Cybersecurity

Security BSides Kraków 2026

Security BSides Kraków 2026 is an open platform event gathering security experts and industry professionals to share insights, network, and contribute to the cybersecurity community. The conference features expert-led sessions, workshops, and keynotes covering the latest trends, techniques, and strategies in cyber security. BSides provides rare opportunities…

Visit the official siteRegisterSponsorship open
35Speakers
12Sponsors
107On the bill · sessions
29Companies · in total
§I

Speakers

Programmed at Security, in alphabetical order.
Adrian DSouza
GRC Consultant and Tribe Lead · Devoteam NV/S
Andoni Alonso
Cloud Security Engineer
András Klein
Ethical Hacker
Andrew Schwartz
Principal Detection Engineer · Huntress
Arad Donenfeld
Attacks and Exploits Developer · SafeBreach
Arnav Singh
Cloud Security Engineer
Arnav Tripathy
Cloud Security Engineer
Blessen Thomas
Independent Security Researcher
Cássio Pereira
BSides Kraków Founder; Application Security Expert
David Papp
CEO & Founder of Gen0Sec; Co-Founder of OpenShield · Gen0Sec
Jyrki Huhta
ICEYE Security Engineering · ICEYE
Jyrki Huhta aka jyrki
ICEYE Security Engineering · ICEYE
Kashif Amanat
Offensive Security Engineer & Community Speaker
Kim Dvash
Offensive Security Team Leader, Israel Aerospace Industries · Israel Aerospace Industries
Liam Follin
Principal Security Researcher · HSBC
Lidor Ben Shitrit
Founding Team Vulnerability Researcher · Novee Security
Mateusz Olejarka
Principal Security Consultant · SecuRing
Michael Reimsbach
Product Security Specialist · SAP
Naveen Kumar Angappan
Cybersecurity Engineer (Offensive)
Paco Sanchez
Platform Engineer
Pedro Cruz
Penetration Tester · Hakai Security
Pedro Cruz aka gankd
Penetration Tester at Hakai Security · Hakai Security
§II

Sponsors

The houses behind the program. Tiers as disclosed.
BlazeNotable Sponsor
CheckmarxLeading Sponsor
CyCodeSupporter Sponsor
DevSecCon PolandSupporter Sponsor
ICWTSupporting Sponsor
InfoSecMapCommunity Partner
Nova8 CybersecurityLeading Sponsor
OWASP PolandCollaborator
Practical DevSecOpsCommunity Partner
SessionizeCollaborator
UnimusSupporting Sponsor
Zero Day AGHCollaborator
§III

Agenda

Selected from 107 sessions on the bill.
  • 09h - 09h45

    Beyond SHA Pinning: Security for CI/CD Pipelines

    Recent months have seen several supply chain attacks, such as the tj-actions, teamPCP and hackerbot-claw. Is your CI/CD pipeline prepared to defend against them? Pipelines have pri…

  • 09h - 09h45

    Ghost in the Hiring Machine: How to Spot Fake Personas Before They're on Your Payroll

    People are getting hired and trusted every day. Some of them do not exist at all, yet they still pass interviews, collect paychecks, and gain access to sensitive systems. Campaigns…

  • 10h - 10h45

    From Thermostats to Seismic Monitors: Real-World Zero-Days in Critical Devices

    Critical devices that underpin our daily lives - from smart thermostats and routers to seismic monitors, fuel systems, and CCTVs - are far more exposed than most realize. In this s…

  • 10h - 10h45

    How To Create a Self-Evolving Autonomous Offensive Security Agent

    I have created a tool for autonomous testing. Molly is a hallucination-resistant, autonomous offensive security agent built in Python and Rust. It strictly separates LLM-driven hyp…

  • 10h - 10h45

    Zero Trust, Zero Hype: Implementing Strong Security Posture in AWS

    Zero Trust is more than a buzzword, it’s a practical approach to minimizing the blast radius of compromises and ensuring secure operations in dynamic cloud environments. But how do…

  • 11h - 11h45

    Don’t Trip the Breaker: A Practitioner's Guide to Safe Power Grid Pentesting

    Pentesting critical infrastructure like a power grid is a high-stakes game where "move fast and break things" is a recipe for disaster. This session provides a transparent look on …

  • 11h - 11h45

    Even more alert(1)

    Cross-site scripting is often treated as a solved problem. Output is escaped, frameworks are opinionated, and many assume that without obvious use of innerHTML or eval, XSS is no l…

  • 11h - 11h45

    The Agents of Chaos: AI Driven Malware Generation

    As AI agents catch wind across offensive security, from social engineering to vulnerability research, it was only a matter of time before malware followed. While much of the conver…

  • 13h - 13h45

    Building a digital beehive: The cluster that wasn't real, but the attacks were

    Kubernetes is everywhere now - and so are attacks against it. Misconfigurations, exposed APIs, and overly permissive RBAC have made clusters a prime target, while most security too…

Intermission
Part the Second · For the Buyer

An audience of 29 companies, parsed from the program.

29 companies in attendance.

The numbers below are derived from the speakers, sponsors, and exhibitors on this page, cross-referenced into one ledger. They are the only thing here that 10times.com cannot tell you.

Who's in the room
0All threespeak · spons · exh
12Sponsoringsponsor only
17Companies Speakingspeaker only
Speakers by seniority

6% of the speakers carry senior titles: C-suite, Founder, VP, or Director-level.

  • C-suite13%
  • Founder / Owner13%
  • Manager / Lead720%
  • Engineer · IC1337%
  • Research / Science720%
  • Other roles617%

Of 35 on the bill · classified by free-text title

Most-represented companies
  1. 01BlazeSp·N
  2. 02CheckmarxSp·L
  3. 03Cycode Ltd.Sp·S
  4. 04DevSecCon PolandSp·S
  5. 05ICWTSp·S
  6. 06InfoSecMapSp·C
  7. 07Nova8 CybersecuritySp·L
  8. 08OWASP PolandSp·C
  9. 09Practical DevSecOpsSp·C
  10. 10SessionizeSp·C
  11. 11UnimusSp·S
  12. 12Zero Day AGHSp·C
  13. 13Hakai Security2V
  14. 14ICEYE2V
Sponsors by tier
collaborator3
25% of 12
community partner2
17% of 12
leading sponsor2
17% of 12
notable sponsor1
8% of 12
supporter sponsor2
17% of 12
supporting sponsor2
17% of 12
Related events · by shared sponsors

Related events

Same brand, other regions