CodeSecCon Virtual Event Tackles Secure Coding and AI Application Risks

CodeSecCon, the premier virtual conference uniting developers and cybersecurity professionals, is set to take place today with over 1,500 registered attendees. The event focuses on the most pressing challenges in modern software security, covering secure application development, vulnerability reduction, and fostering DevSecOps collaboration between security and engineering teams. With AI-assisted coding and agentic development reshaping the threat landscape, the agenda places heavy emphasis on integrating artificial intelligence into applications without exposing sensitive data or introducing new attack surfaces.

The full-day agenda features sessions from leading security practitioners and engineers at major organizations. Joseph Frisk, CISO of Dine Brands, and Gareth Davies, Chief Product Officer at Auth0, open the event at 11:00 AM ET with a talk on transforming security from a bottleneck into a revenue growth engine. Following sessions address securing agentic development (Mike McGuire of Wiz), cloud-powered enterprise security (Christina DePinto of Datadog), and practical WordPress hardening lessons drawn from real-world incidents (Haim Michael). Afternoon sessions dive into AI gateway security controls, preventing jailbreaks in agent runtimes, and enforcing least privilege on autonomous AI coding agents. Presenters include Khushboo Bhatia (AI & Data Solution Architect at Google), Karan Bansal (Global Head of AI and Security Innovation at ArmorCode), Ravikumar Dwivedi (SVP of Software Engineering at JPMorgan Chase), and Jitendra Singh (Senior Software Engineer at Microsoft).

A recurring theme throughout CodeSecCon is the emerging risk surface created by AI-integrated applications, including over-permissioned code, sensitive telemetry exposure in cloud-native environments, and securing human-AI code collaboration. Developers attending the event can gain actionable guidance on building defense-in-depth strategies for AI-assisted pipelines and cloud-deployed services. Attendees concerned about their own application security posture can use our SSL/TLS checker to verify certificate configurations and our port scanner to identify exposed services. For teams integrating third-party AI APIs or cloud platforms, our DNS leak test can help confirm that sensitive development traffic is not inadvertently leaking outside secured channels.