AI Agentic Skills and Requisite Security Considerations
(28 Sep 2026)
(28 Sep 2026)
A webinar on agentic AI security, emerging risks, and the controls organizations need as AI systems gain autonomy.
A chronological archive of Vandana Verma's talks, writing, leadership, training, media, and community work.
Explore Vandana Verma’s professional activities and contributions, ordered from newest to oldest.
A webinar on agentic AI security, emerging risks, and the controls organizations need as AI systems gain autonomy.
A video from the MCP Security: Fundamentals to Attack Vectors series.
OWASP EKS Goat is a hands-on AWS EKS security lab that teaches real-world attack and defense techniques for AWS managed Kubernetes clusters.The lab simulates…
A video from the MCP Security: Fundamentals to Attack Vectors series.
A panel discussion on women’s safety, cyberstalking, account takeovers, identity misuse, cyber harassment, and responsible AI-assisted support.
In this episode of A Day in the Life of a Security Leader, I speak with Hilal Ahmad Lone, an experienced CISO and cybersecurity leader whose career spans fin…
A video from the MCP Security: Fundamentals to Attack Vectors series.
A video from the MCP Security: Fundamentals to Attack Vectors series.
A video from the MCP Security: Fundamentals to Attack Vectors series.
A video from the MCP Security: Fundamentals to Attack Vectors series.
In this video, I explain Model Context Protocol (MCP) security and why connecting AI models to real tools fundamentally changes the security conversation.In …
A community gathering featuring a panel, audience Q&A, fishbowl discussion, networking, and open conversations.
A skill that is safe on one AI platform may become unsafe when copied to another.In this video, I explain AST10: Cross-Platform Reuse from the OWASP Agentic …
If your organisation cannot list its installed AI skills, their owners, permissions, versions, and actions, it cannot govern them.In this video, I explain AS…
A speaker appearance focused on the evolving cybersecurity landscape, AI-driven security, digital trust, and cyber resilience.
A scanner may call an AI skill “clean” simply because it did not recognise the attacker’s wording. In this video, I explain AST08: Poor Scanning from the OWA…
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
A video from the AI Agents Kya Hain? Agentic Security Terms in Hinglish series.
AST07: Update Drift explains how unverified updates, patch delays, writable skill directories, rollback attacks, and hot reload can silently change trusted b…
In this video, I explain AST06: Weak Isolation from the OWASP Agentic Skills Top 10.We examine how host-mode execution, broad agent permissions, unauthentica…
Have you ever wanted to contribute to an OWASP project but felt that you were not experienced enough? You are not alone.Many people assume they need advanced…
A skill may be safe when reviewed but become dangerous later because it downloads instructions from a remote URL. In this video, I explain AST05: Untrusted E…
In this video, I explain how an ordinary AI skill can become dangerous when it receives more authority than its task requires.You will learn:• Why agent-leve…
The first comprehensive security framework for AI agent skills. It documents the 10 most critical security risks in agentic AI skills across all major AI age…
In this video, I explain AST04: Insecure Metadata from the OWASP Agentic Skills Top 10. We examine how attackers can manipulate names, author information, pe…
AI Security Engineer is becoming one of the most exciting—and misunderstood—roles in cybersecurity. It is not simply prompt hacking. It is not just AI govern…
A video from the OWASP Spotlight Series series.
In this video, I explain AST01: Malicious Skills from the OWASP Agentic Skills Top 10. We explore how attackers can hide malicious code or instructions insid…
In this video, I explain AST02: Supply Chain Compromise from the OWASP Agentic Skills Top 10. We examine how poisoned dependencies, compromised publishers, u…
A video from the OWASP Agentic Skills Top 10 series.
A practical conversation about open-source security, software supply-chain risk, SBOMs, responsible disclosure, and sustainable communities.
Moderated a live AI incident war room exploring the organizational response to a compromised production LLM.
A practical webinar translating OWASP MCP Top 10 risks into architecture and governance guidance for teams building agentic AI systems.
What happens when an agent is no longer following the intent of the person or organization that deployed it?That is the difficult question behind ASI10: Rogu…
The most convincing voice in the room may also be the least accountable.ASI09: Human-Agent Trust Exploitation targets the human tendency to trust confident, …
In connected agentic systems, one small error rarely stays small.One agent produces a bad result. Another trusts it. A third executes an action. Retries mult…
In a multi-agent system, “another agent told me to do it” cannot be an authorization model.ASI07: Insecure Inter-Agent Communication appears when agents exch…
The most dangerous lie may not affect the agent today. It may wait quietly in memory until tomorrow.That is ASI06: Memory & Context Poisoning.Attackers can p…
ASI05: Unexpected Code Execution (RCE) emerges when untrusted prompts, files, tool responses or generated content cross the boundary into a shell, interprete…
Your AI agent is not one component. It is an ecosystem of trust. Models, Tools, MCP servers, Plugins, prompts, datasets, frameworks, packages, APIs.Every add…
ASI03: Identity and Privilege Abuse appears when agents inherit powerful user sessions, reuse cached credentials, trust another agent by default or operate w…
A tool does not need to be malicious to become dangerous.Sometimes the tool is trusted, the credentials are valid and the API call is allowed. The failure ha…
What if your AI agent performs every step correctly—but someone has quietly changed the destination?That is the danger behind ASI01: Agent Goal Hijack.An age…
A CXO flash-mentoring session offering practical cybersecurity, AI security, AppSec, DevSecOps, and career guidance.
A video from the OWASP Spotlight Series series.
In conversation with Jim Manico, discussing security, misconceptions, and why clear language matters when we talk about AppSec.
A cybersecurity video published on Vandana Verma’s YouTube channel.
A cybersecurity video published on Vandana Verma’s YouTube channel.
A cybersecurity video published on Vandana Verma’s YouTube channel.
A cybersecurity video published on Vandana Verma’s YouTube channel.
A conference session on the OWASP MCP Top 10 and the emerging security risks created by Model Context Protocol-enabled AI agents.
A cybersecurity video published on Vandana Verma’s YouTube channel.
Upcoming keynote appearance at OWASP Italy Day 2026.
Upcoming AI Security training at OWASP Italy Day 2026.
Credential recognizing service on the OWASP 2026-2027 CFP Review Team.
In this episode, I sat down with Dinis Cruz, Founder @ The Cyber Boardroom, MyFeeds.ai, Akeia.ai, and more to explore what it truly means to build, secure, a…
The Sessionize speaker profile is a strong public anchor for Vandana Verma because it brings together bio, speaker profile details, and a broader talk inventory in one place. It is …
RSAC 2026 training session led by Vandana Verma on secure agentic AI workflows.
Recognized by The Cyber Express in its 2026 list of women leaders in cybersecurity to watch.
ISACA-linked panel appearance by Vandana Verma on cyber defense in a hyperconnected environment.
Judge for the 2026 SC Awards.
Official RSAC expert page aggregating Vandana Verma Sehgal’s talks, webcast appearances, and panel video.
The February 2026 AI Radar edition publicly lists Vandana Verma Sehgal as host and continues the series on AI-driven development, LLM risk, MCP security, and practical security …
Webinar by Vandana Verma on securing the invisible thread in agentic AI systems through MCP threat modelling.
Day 2 panel at IdentityShield Summit 2026 featuring Vandana Verma on women leading the next wave of cyber resilience.
This installment of the Top Ten remains data-informed, but not blindly data-driven. We ranked 12 categories based on the data contributed, and allowed two to…
Mishandling of Exceptional Conditions is a new category for 2025. This category contains 24 CWEs and focuses on improper error handling, logical errors, fail…
Security Logging & Alerting Failures retains its position at #9. This category has a slight name change to emphasize the alerting function needed to induce a…
Software or Data Integrity Failures continues at #8, with a slight, clarifying name change from “Software and Data Integrity Failures”. This category is focu…
Authentication Failures maintains its position at #7 with a slight name change to more accurately reflect the 36 CWEs in this category. Despite benefits from…
Insecure Design slides two spots from #4 to #6 in the ranking as A02:2025-Security Misconfiguration and A03:2025-Software Supply Chain Failures leapfrog it. …
Injection falls two spots from #3 to #5 in the ranking, maintaining its position relative to A04:2025-Cryptographic Failures and A06:2025-Insecure Design. In…
Moving down two positions to #4, this weakness focuses on failures related to the lack of cryptography, insufficiently strong cryptography, leaking of crypto…
This was top-ranked in the Top 10 community survey with exactly 50% respondents ranking it #1. Since initially appearing in the 2013 Top 10 as “A9 – Using Co…
Moving up from #5 in the previous edition, 100% of the applications tested were found to have some form of misconfiguration, with an average incidence rate o…
SSRF (Server-Side Request Forgery) is a severe web vulnerability where an attacker tricks a server into making unintended network requests to internal system…
Maintaining its position at #1 in the Top Ten, 100% of the applications were tested for some form of broken access control. Notable CWEs included are CWE-200…
Jury panel role for CyberFrat’s CF100 India 2025 cybersecurity influencers program.
Meetup talk by Vandana Verma on securing Model Context Protocol trust boundaries and MCP-connected systems.
Online workshop hosted by SecuritySenses featuring Vandana Verma Sehgal (OWASP Leader and Staff Developer Advocate at Snyk). The session covered what’s new in the OWASP Top …
This EC-Council cyber talk publicly lists Vandana Verma and focuses on how AI can help modern teams automate security checks and decisions across the software delivery lifecycle. …
Panel discussion featuring Vandana Verma on how AI is reshaping cybersecurity talent, hiring, retention, and inclusive career growth.
Panel discussion featuring Vandana Verma on resilient software, product security, DevSecOps, and secure delivery at scale.
Welcome to the first look at the OWASP MCP Top 10 – 2025, a new community-driven initiative to help secure the emerging ecosystem of Model Context Protocol (…
Operation: Defend the North 2025 - Vancouver Speaking engagement at siberX’s Operation: Defend the North 2025 in Vancouver, Canada. The session continued the Defend the North …
Operation: Defend the North 2025 - Calgary Speaking engagement at siberX’s Operation: Defend the North 2025 in Calgary, Canada. The session focused on modern application …
The Cybersecurity Meetup - Exclusive Charter Speaking engagement at siberX’s The Cybersecurity Meetup, a closed-door charter session bringing together security leaders to …
Overloading LLMs with resource-heavy operations can cause service disruptions and increased costs.Model Denial of Service (DoS) attacks target the availabili…
Large Language Models (LLMs) can sound like the smartest person in the room — confident, smooth, and oh-so-persuasive. But sometimes, that “smart” answer? It…
Vectors and embeddings vulnerabilities present significant security risks in systems utilizing Retrieval Augmented Generation (RAG) with Large Language Model…
The system prompt leakage vulnerability in LLMs refers to the risk that the system prompts or instructions used to steer the behavior of the model can also c…
This public Snyk webinar lists Vandana Verma Sehgal as presenter and focuses on the OWASP Top 10 for LLM applications, including practical risks for teams adopting AI-assisted …
Interview with Vandana Verma by Tanya Janca at Black Hat Conversation with Tanya Janca (SheHacksPurple) recorded at Black Hat, discussing application security, the OWASP community, …
Excessive Agency is a risk where LLMs are given too much control or decision-making power without adequate oversight, potentially leading to actions that hav…
Insecure Output Handling involves scenarios where applications that use LLM outputs fail to properly sanitize or validate these outputs before execution or d…
Data poisoning is when someone deliberately messes with the data used to train or fine-tune an AI model. It’s not just about bugs—it’s about secretly teachin…
Supply Chain Vulnerabilities in LLM applications can arise from compromised third-party services, libraries, or other resources used during the development a…
Snyk webinar hosted by Vandana Verma Sehgal on notable vulnerabilities and what security teams should prioritize next.
A video from the OWASP Top 10 for LLM Applications series.
Panel: Hacking the Status Quo - Tales From Leading Women in Cybersecurity Panel at Black Hat USA 2025 featuring leading women from the Black Hat USA Review Board. The conversation …
OWASP Top 10 for LLMs Webcast presented via PureAI as a Snyk expert and OWASP leader, walking through the OWASP Top 10 for Large Language Model Applications. The session covered …
A video from the OWASP Top 10 for LLM Applications series.
The July 2025 edition of Vulnerabilities on the Radar publicly lists Vandana Verma Sehgal as host alongside Wesley Bentura and continues the series on vulnerabilities that deserve …
Sensitive Information Disclosure occurs when LLMs inadvertently reveal confidential data embedded within their training materials or through careless handlin…
A Prompt Injection Vulnerability happens when someone sneaks tricky or sneaky instructions into what looks like a normal request to a large language model (L…
Session: Implementing Zero Trust in an Organisation to be Uncertainty Ready Session at the Women in Tech Global Conference 2025 exploring how organisations can operationalise Zero …
Judge for the 2025 SC Awards.
About the Project:- OWASP FIASSE focuses on providing a structured approach to assessing and improving the security of AI systems within enterprise environments.
A panel comparing cybersecurity hiring trends across Canada and emerging markets.
Featured on the Snyk blog sharing the journey as a reviewer, speaker, panelist, speaker coach, and learner at Black Hat Asia 2025. Reflects on the multiple roles and contributions …
A cybersecurity video published on Vandana Verma’s YouTube channel.
This piece captures a broader Black Hat Asia 2025 journey across multiple roles including reviewer, speaker, panel participant, and speaker coach. It is a strong recent addition …
Panelist alongside Chi-En (Ashley) Shen, Pamela O’Shea, and Asuka Nakajima. The panel addressed the human side of cybersecurity — struggles, biases overcome, mentors, and …
Panel discussion at Black Hat Asia 2025 on AI models improving threat detection and how adversaries learn to outsmart them, including ethical implications and real-world …
Locknote: Highlights & Key Takeaways from Black Hat Asia 2025 Closing locknote panel at Black Hat Asia 2025, bringing together members of the Black Hat Asia Review Board to …
A Black Hat Asia 2025 meetup session focused on cloud security, identity, compliance, and multi-cloud realities.
About the Project:- OWASP AIVSS (AI Vulnerability Scoring System) provides a framework for scoring and prioritizing vulnerabilities specific to AI and machine learning systems.
Times of India expert piece on cyber awareness for young people, including guidance and quotes from Vandana Verma.
Public OWASP leadership references spanning project, podcast, and community work.
A current public snapshot of active OWASP leadership across multiple projects and community initiatives.
Leadership work on the OWASP MCP Top 10, focused on emerging security risks around AI agents and MCP ecosystems.
Leadership on the OWASP LLM Security Verification Standard, connecting application security and secure AI development.
A software supply chain security article focused on malicious Go packages.
This page is a strong profile anchor because it combines current role wording, article history, and a public headshot in one place. Reference …
Founder and President of InfosecGirls, building a global cybersecurity community through mentorship, workshops, and inclusive learning.
Current governance and compliance work within OWASP, including the public appointment as Compliance Officer.
OWASP board and governance leadership, including service as Chair and Compliance Officer.
Quoted in GovInfoSecurity coverage of the Black Hat Europe 2024 Locknote panel discussion on AI, reality vs hype.
**Locknote: Conclusions and Key Takeaways from Black Hat Europe 2024 ** Closing locknote panel at Black Hat Europe 2024. Joined conference founder Jeff Moss and members of the …
Program committee role for SOSS Community Day India 2024 at KubeCon India, supporting open source security programming.
AI: Now Smarter Than Hackers, But Still Confused by Cats Thursday, December 5, 2024 | 2:00 - 3:00 PM EST Imagine a world where AI is sharper than even the most skilled hackers, …
A public timeline reference for board service and long-running governance leadership within OWASP.
About the Project:- OWASP WrongSecrets is a deliberately vulnerable application for learning about secrets management failures and practicing how to find and fix them. …
Featured in the Cyber Leadership Institute ‘Cyber Leaders on the Move’ series as Global Chair of OWASP and Security Relations Leader APJ/ANZ at Snyk.
“Atomic Talk Title: Defending the unknown using AI and cybersecurity” New and unknown threats emerge daily, making traditional cybersecurity methods insufficient. …
Public video conversation featuring Vandana Verma on cybersecurity leadership, experience, and industry perspective.
This article is a strong fit for the site’s writing and mentoring story, combining application security guidance with community-building and career support. Reference …
This article pairs well with the RSA 2024 webcast already on the site and helps connect the speaking archive with related written work. Reference …
The Magic of Application Security Posture Management and its Future Frontier Aug. 6, 2024 | 02:00 PM ET | 11:00 AM PT Vandana Verma Sehgal presented this RSAC webcast on …
About the Project:- The OWASP LLM project focuses on identifying and addressing security risks associated with Large Language Models, providing guidance for organizations …
Title - Securing AI for Future Ready
Title: The Hackers World Reference:- https://www.bloombloom.co/futureworldsummit-kkem
Judge for the 2024 SC Awards.
The goal was to choose a set of CISOs and InfoSec leaders who have demonstrated an extraordinary leadership and resilience during the challenging times **Reference** …
Use the Manifesto as a guide to develop or refine a methodology that best fits your needs. We believe that following the guidance in the Manifesto will resul…
A hands-on virtual workshop led by Vandana Verma Sehgal and Sonya Moisset covering how to approach and solve Capture the Flag challenges.
Day in the Life of a Food Giant CISO A written feature exploring what a typical day looks like for the CISO of a global food giant - from boardroom risk conversations and …
This technical write-up adds more depth to the site by showing public work beyond talks and panels. Reference …
Let’s Chat Open Source Security With Vandana Verma! Reference
The Cyber Express - Top 100 Women in Cybersecurity **Reference** https://thecyberexpress.com/top-100-women-in-cybersecurity-leading-charge/
Security leader Shiva joins this episode to describe what leadership looks like behind the dashboards and board presentations. Drawing on a career that began in 2001 and expanded …
Anant Shrivastava, security practitioner and founder of Cyfinoid Research, treats a career as a notebook rather than a universal playbook. In this conversation he connects his …
Ajit Hatti, co-founder of PureID and a long-time security community builder, traces a career that began with systems programming and grew into malware analysis, protocol research, …
A video from the All About Conferences and DevRel series.
About the Project:- The OWASP Developer Guide helps developers build secure software by pulling together practical guidance, project references, and security practices into one …
Leadership behind the OWASP Spotlight Series, featuring projects and contributors from across the OWASP ecosystem.
Co-hosting the OWASP Podcast and helping spotlight community conversations, updates, and project work.
Leadership credential issued by the GlobalCISO Leadership Foundation in January 2024.
Reference - https://www.amazon.in/Implementing-DevSecOps-Practices-Vandana-Sehgal/dp/1803231491
Subho Halder, co-founder and CEO of Appknox, joins Vandana Verma to discuss building a mobile security company, how a founder’s role changes over time, and why customer …
Kim Chakanetsa meets two cybersecurity experts who help women stay safe online. Vandana Verma Sehgal is a Security Solutions leader at Snyk and the Chair of the Board of Directors …
Locknote: Conclusions and Key Takeaways from Day 2 Jeff Moss | Founder of Black Hat and DEF CON Conferences & Former Chief Security Officer and VP at ICANN, U.S. Department of …
Chief Information Security Officer certification issued by the GlobalCISO Leadership Foundation.
Guy Podjarny joins Vandana Verma to reflect on founding and scaling technology companies, choosing problems worth years of effort, and beginning a new chapter focused on AI-native …
Title: Paving the Way: Balancing Standards, Regulations, Ownership, and Accountability Reference:- …
Title: Trust the Process: Optimizing Open Source Security with OWASP Frameworks Security has become an integral component, with DevSecOps emerging as a revolutionary approach to …
Title: From Vulnerability to Viability: Tackling Supply Chain Challenges Head-On From Vulnerability to Viability: Tackling Supply Chain Challenges Head-On" dives deep into the …
Kamal Sharma joins Vandana Verma to share lessons from a career spanning traditional networks, service delivery, GRC, and CISO leadership. Their conversation focuses on continuous …
About the Project:- OWASP Domain Protect helps organizations prevent subdomain takeover by continuously scanning DNS records and sending alerts when vulnerable subdomains are …
A video from the All About Conferences and DevRel series.
Divakar Prayaga joins Vandana Verma for a conversation about a 17-year cybersecurity career, the transition from hands-on engineering to leadership, and the habits that help …
About the Project:- OWASP OpenCRE is an open source catalog of cybersecurity concerns that maps standards, guidelines, weaknesses, and references to help teams navigate fragmented …
Link -> https://resource.cobalt.io/humans-of-infosec/episode-74-how-curiosity-empowered-owasp-global-chair-vandana-verma …
This article explores how GitOps practices can improve application security by leveraging Git-based workflows for infrastructure and deployment management. Reference …
Vivek Ramachandran, founder of Pentester Academy and SquareX, joins Vandana Verma to trace his path from a curious young programmer to security researcher, educator, and repeat …
Title: Appsec on a Limited Budget- DEF CON 31- AppSec Village We are all heading towards the modernization of applications. However, we still see the companies being impacted with …
Proactive Defense: Advanced Threat Modeling for Robust Cybersecurity Aug. 1, 2023 | 01:00 PM ET | 10:00 AM PT Vandana Verma Sehgal led this RSAC webcast on proactive defense and …
A video from the All About Conferences and DevRel series.
A video from the All About Conferences and DevRel series.
A video from the All About Conferences and DevRel series.
A video from the All About Conferences and DevRel series.
Sumit Siddharth, widely known as Sid, joins Vandana Verma to discuss the self-belief behind entrepreneurship, lessons from building and selling a security business, and his …
Title: Tracing the Journey of Web Application Security from Past to Future The Open Web Application Security Project (OWASP) has profoundly influenced the cybersecurity arena since …
Research report co-authored by Vandana Verma Sehgal on insecure dependencies across the top 1000 GitHub organizations.
An overview of ethical hacking techniques used by security professionals to identify and remediate vulnerabilities before malicious actors can exploit them. Reference …
A comprehensive guide to the top tools used in ethical hacking, covering reconnaissance, scanning, exploitation, and reporting tools that every security professional should know. …
Ankita Gupta, co-founder of Akto, joins Vandana Verma to discuss turning an API security problem into a product, learning directly from users, and staying resilient through the …
This article explores the challenges and strategies for securing multi-cloud environments, covering best practices for maintaining consistent security postures across different …
Ankita Dhakar, managing director of Security Lit and founder of the Capture the Bug platform, shares how curiosity about confidential information led her from a business …
About the Project:- SamuraiWTF is a web training and testing framework built as a virtual machine with vulnerable applications and tools to support hands-on learning and web …
Travis McPeak, co-founder and CEO of Resourcely, joins Vandana Verma to discuss moving from security engineering into company building, validating a cloud product, and learning …
A review of the Biden-Harris administration’s National Cybersecurity Strategy, examining its key pillars and implications for software security, supply chain protection, and …
A Snyk session on the most impactful open source vulnerabilities developers should prioritize.
Named as a “Woman to Watch” by Risky Women, a global network connecting, celebrating and championing women in Risk, Regulation and Compliance since 2014.
, writing on cybersecurity topics including application security, DevSecOps, and diversity in the security industry.
According to a recent report, 69% of CISOs say the volume of alerts make it difficult to prioritize vulnerabilities. That’s one of the reasons why picking open-source packages to …
A summary and analysis of key points from the joint Google and Accenture ransomware white paper, highlighting trends, attack vectors, and recommended defenses for organizations. …
A cybersecurity video published on Vandana Verma’s YouTube channel.
This feature covers a discussion with Chris Hughes, CISO and co-founder of Aquia, including his path into security leadership, software supply chain security, SBOMs, workforce …
An update on the OpenSSL high severity vulnerabilities, providing details on the impact, affected versions, and remediation steps for security teams. Reference …
A timely breakdown of the new OpenSSL critical vulnerability, covering what security teams need to know about the risk, affected systems, and how to respond. Reference …
A recap of Black Hat USA 2022, covering key themes, notable talks, emerging trends, and takeaways from one of the largest cybersecurity conferences. Reference …
TechStrong Secure Software Summit session by Vandana Verma on dependency security and modern software supply chain risk.
Conversation with Chloe Messdaghi on ITSP Magazine’s The Changemaking Podcast, discussing the InfosecGirls community, its mission to increase female participation in …
Official keynote listing for OWASP 2022 Virtual AppSec APAC.
Title: Agility Broke AppSec. Now It’s Going to Fix It Reference:- https://www.appsecvillage.com/events/dc-2022/agility-broke-appsec-now-it-s-going-to-fix-it
A live ITSPmagazine conversation with Vandana Verma during Black Hat USA and DEF CON 2022.
About the Project:- OWASP Juice Shop is an intentionally insecure web application used in security trainings, awareness demos, CTFs, and testing exercises. References:- OWASP …
About the Project:- The OWASP Secure Headers Project describes HTTP response headers that help applications increase security and reduce exposure to preventable browser-side …
Speaker at Apidays conference, presenting on API security topics and best practices for securing APIs in modern application architectures. Reference …
Conference talk by Vandana Verma Sehgal on supply chain thinking and dependency security in modern software development.
Recognized in IFSEC Global’s 2022 Influencers in Security list.
Full audio interview with ESG (Enterprise Strategy Group) as part of their Women in Cybersecurity series, covering the journey from security operations night shifts to OWASP board …
Equality Lounge conversation at RSA Conference on hacking for good and the importance of women in cybersecurity.
Title - Continuous Security - Integrating Pipeline Security Vandana Verma Sehgal presented this RSAC 2022 session on building security into modern CI/CD workflows. In a world of …
Featured interview with Cyber Protection Magazine discussing the InfosecGirls initiative, the significance of open source security, and Vandana’s work at Snyk helping to …
Named in the 40 under 40 in Cybersecurity list for 2022, recognizing emerging leaders making significant contributions to the cybersecurity field.
A Software Engineering Radio episode discussing the OWASP Top 10.
A panel discussion on the Purple Book community and practical software security guidance.
A panel on hiring, coaching, and scaling effective application security teams.
Locknote: Conclusions and Key Takeaways from Black Hat Asia 2022 Jeff Moss | Former Chief Security Officer and VP at ICANN, Founder of Black Hat and DEF CON Conferences, U.S. …
Public conference talk by Vandana Verma Sehgal on software supply chain risks and modern application security realities.
Part of Ally of the Year Award, Humbled and honoured to receive the award - People choice Award Reference
Women in Cybersecurity Reference https://www.techtarget.com/esg-global/video/women-in-cybersecurity-vandana-verma/
Link - https://www.techtarget.com/esg-global/video/women-in-cybersecurity-vandana-verma/
An overview of how Snyk’s developer security platform helps organizations meet the White House cybersecurity recommendations, covering software supply chain security, SBOM …
Business Standard event coverage mentioning Vandana Verma among global women leaders speaking on emerging technologies.
Caroline Wong shares her experience as a service company CISO, including leadership, customer trust, team building, and how modern security programs balance business and technical …
A cross-border panel on building cybersecurity networks, visibility, and opportunity across global communities.
Selected as a judge for the SC Awards 2022, evaluating outstanding cybersecurity products, services, and professionals. Reference …
Feature interview covering Vandana Verma’s cybersecurity journey, OWASP leadership, community work, and role at Snyk.
Executive cyber leadership credential covering board engagement, cyber resilience, governance, and stakeholder communication.
Counting down the days! Mark your calendar for our #WomenInSecurity virtual Roundtable: Crossley, Leticia Nzioki-Kinuthia, MAR…
Vandana Verma discussed public speaking, professional networking, and growing from an application security newcomer into an OWASP leader.
Marina Segal reflects on the beginning of her entrepreneurial journey shortly after starting Tamnoon. She describes the gradual decision to found a company, the constant context …
Chris Russell, CISO at tZERO, on the journey to becoming a fintech CISO, what makes the role different, and how security leadership connects to cryptocurrency, digital wallets, …
Public talk by Vandana Verma Sehgal on Java attack surface growth and the security impact of dependency risk.
Vikram Mehta discusses leaving an enterprise security leadership role to found a cloud security product company. He explains how years of conversations with CISOs exposed a …
Steve Kinman shares what a field CISO role looks like, how it differs from an operational CISO role, and how leadership strategy shifts during active incidents and large ecosystem …
Recognized for community enablement in cybersecurity through InfosecGirls, WoSec, and OWASP.
Rahul Tyagi, a co-founder of Safe Security, describes a path from university curiosity to building a company focused on quantifying cyber risk. He discusses how the business moved …
Featured discussion with Wallarm’s Researcher Corner on security challenges in the FinTech space. The conversation covered OWASP Top 10 and related projects, modern FinTech …
Included in the Redgate 100 as one of the most influential voices in the database community.
Member of the Della Leaders Club, Pune Chapter — a global community of leaders across industries, recognising contributions to cybersecurity, community building, and diversity …
Return guest on the Cyber Security & Cloud Podcast (CSCP) with Francesco Cipollone, discussing why security teams need to be more empathetic, the OWASP Spotlight Project, …
Sandeep Kamble discusses the long path from a failed first company to building SecureLayer7 into a recognised security-testing business. He explains how an engineering-minded …
Featured on ISRM (Information Security Reading Room) for being re-elected to the OWASP Foundation Global Board with the highest number of votes. Director term began January 1, …
Muslim Koser shares lessons from more than two decades in cybersecurity and from building Volon, a customer-focused threat-intelligence company. He explains why startup life …
About the Project:- OWASP VulnerableApp is designed to help evaluate how vulnerability scanners perform by providing an intentionally structured target that is scalable, …
Evolving with The New Norm
Akshat Jain, co-founder and CTO of Cyware, joins LeaderSpeak to describe how complementary founder skills, close collaboration, and a culture of ownership helped shape a …
Kunal Bajaj and Sachin Kumar explain how complementary strengths brought them together to build eSec Forte. Their discussion is a candid account of co-founding a cybersecurity …
About the Project:- OWASP Threat Dragon is a threat modeling tool used to create diagrams and record threats as part of a secure development lifecycle. References:- OWASP Threat …
Rahul Sasi, founder of CloudSEK and a security researcher, explains why ideas matter only after someone starts implementing them. His account connects the origin of a product …
Recipient of the 2021 Executive Women’s Forum Women of Influence Award in the Public Sector & Academic category.
About the Project:- CycloneDX is a lightweight Software Bill of Materials standard designed for application security and supply chain component analysis. References:- OWASP …
An Application Security Weekly episode with audio, video, and show notes.
Career advice for people breaking into security, with perspective from Snyk founder Guy Podjarny.
Ed Adams, CEO of Security Innovation, joins LeaderSpeak to discuss a career that moved from mechanical engineering to software quality and then application security. The …
Title: The Curious case of knowing the unknown Reference:- https://www.rootcon.org/html/archives/rc15#curios_case_unknown
Arun Mane, founder and CEO of Amynasec Labs, joins LeaderSpeak to discuss turning specialised security knowledge into a research company. His story connects technical curiosity …
A cybersecurity video published on Vandana Verma’s YouTube channel.
Title - Finding the unknown before it finds you Reference Link: Black Hat USA
A live hacking session demonstrating how developers can identify and remediate common application security vulnerabilities directly in their development workflow.
Panelist on “Building Diversity into AppSec” at the OWASP 20th Anniversary Event alongside Zoe Braiterman, Loredana Mancini, Aastha Sahni, and Jessica Gottsleben. The …
About the Project:- OWASP Security Pin helps organizations motivate and reward security champions by making security participation visible. The project encourages recognition for …
Tanya Janca, founder of We Hack Purple, explains how an unsuccessful startup led her to build an application security education business. The conversation covers testing demand …
Title - New way of looking at the hidden mysteries in the code https://india.c0c0n.org/2021/agenda 13-Nov-2021 (DAY 4), TRACK 3
Ken Underhill is the founder of Cyber Life LLC and the executive producer and host of the Cyber Life television show. In this conversation, he explains how a podcast grew into a …
Featured interview with Eat My News, discussing the journey from struggles to becoming a recognized advocate in cybersecurity in India. The conversation covers career challenges, …
Cyber Security Awards Reference link: https://cybersecurityawards.com/
Magda Chelly https://www.linkedin.com/in/m49d4ch3lly/ Bio:- Head of Cyber Risk Consulting, Asia at Marsh Asia, PhD, S-CISO, CISSP, Cert SCI (General Insurance)
Kumar Ritesh, chairman and CEO of Cyfirma, discusses the thinking behind a cybersecurity company built around predictive intelligence. The conversation covers the market gap that …
Rohit Srivastwa https://www.linkedin.com/in/rohit11/ https://twitter.com/rohit11 Bio:- Virtual CISO@ Various Large Enterprises, Author, 3x Founder, Charter Member @TiE, Mentor, …
Title: The Curious Case of Knowing the Unknown Reference:- https://www.appsecvillage.com/events/dc-2021/the-curious-case-of-knowing-the-unknown
Grant Ongers, co-founder of Secure Delivery and a long-time OWASP community contributor, joins LeaderSpeak to discuss why conventional security gates fail to scale. He also shares …
Aisling MacRunnels & Ronald Ulko Aisling MacRunnels https://www.linkedin.com/in/aisling-macrunnels-a021572/ & Ronald Ulko https://www.linkedin.com/in/ronald-u-7b05381/
Recognized in IFSEC Global’s 2021 Influencers in Security and Fire list.
Upendra Mardikar https://www.linkedin.com/in/upendra-mardikar-11523a/ Bio:- A prolific inventor and cyber security & digital identity executive with an “art of possible” …
OWASP Spotlight - Project 19 - OWASP Application Security Verification standard (ASVS) About the Project:- The OWASP Application Security Verification Standard (ASVS) Project …
Abeer Khedr https://www.linkedin.com/in/abeerkhedr/ https://twitter.com/abeer_khedr2 Bio:- Abeer is a Chief Information Security Officer with 20+ years of information security and …
Preetam Sirur https://www.linkedin.com/in/preetamsirur/ Bio:- Preetam is Director Information Security at Vitech Systems Group. Prior to that he has worked in multiple …
Pawan Desai, co-founder and CEO of MitKat Advisory Services, discusses the transition from naval and corporate roles into entrepreneurship. He explains how he learned to lead the …
Lakshmi Hanspal https://www.linkedin.com/in/lakshmi-hanspal/ Bio:- Lakshmi Hanspal is the Global Chief Security Officer of Box, leading the Trust Office for Box across multiple …
Aseem Jakhar joins LeaderSpeak to explain how a small security meetup in Pune grew into communities, conferences, a consultancy, and security products. Calling himself an …
Sarb Sembhi https://www.linkedin.com/in/sarbsembhi/ Bio:- Sarb is a CTO & CISO speaking, writing and contributing to many events and publications. He is the Founder of the …
Shubham Mittal, co-founder of RedHunt Labs, shares the transition from a secure technical career to building a cybersecurity company. His account focuses on preparation, …
Guest on Ravi’s Focus Hive podcast discussing security advocacy, the role of OWASP, diversity in cybersecurity, and lessons from a career in information security. Reference …
OWASP Spotlight - Project 18 - OWASP DSOMM About the Project:- The DevSecOps Maturity Model, shows security measures which are applied when using DevOps strategies and how these …
Aaron Rinehart joins LeaderSpeak to discuss the origins of Verica, the principles behind chaos engineering, and his work extending those principles into cybersecurity. The …
Recognized as one of the Top 25 Women Leaders in Cybersecurity for 2021, highlighting leadership and contributions to the global cybersecurity community.
Featured on ISRM for being named a Risky Woman to Watch, recognising positive impact on the cybersecurity industry through leadership on the OWASP Global Board, diversity …
Amar Singh, co-founder of Cyber Management Alliance, joins LeaderSpeak for a candid discussion about passion, delegation, customer understanding, and the inevitability of failure. …
Dhillon Kannabhiran, founder and CEO of Hack in the Box (HITB), joins LeaderSpeak to explain how a desire for an affordable, technically strong security conference grew into a …
OWASP Spotlight - Project 17 - Education and Training Committee About the Committee To provide a support mechanism for OWASP education activities to foster collaborations and …
RSA Conference 2021 included multiple appearances for Vandana Verma, with the official RSAC presentation archived as “Let’s Talk, Open-Source Application …
It was a pleasure to be part of the ONLINE PANEL: ‘Shifting Left in Application Security’ at Australian Information Security Association (AISA) this morning with the …
Digitization is the way to go However, while the consumers are increasing, we still follow the primitive approach and have always been taking too much information from the users …
Keenan Skelly joins LeaderSpeak to discuss moving from military and government service into cybersecurity entrepreneurship. The conversation explores startup culture, educational …
Opening Note: Insights and Predictions: What’s Next in InfoSec Neil R. Wyler (A.K.A. Grifter) | Threat Hunting & Incident Response Specialist, RSA Lidia Giuliano | …
Mari Galloway joins the conversation to discuss launching a bookkeeping and cybersecurity consulting business while continuing a full-time role and leading a nonprofit. Her …
IBM certification listed on Vandana Verma’s LinkedIn certifications profile.
Takaharu Ogasa, founder of Security Initiative and a leader in the OWASP Sendai community, describes an unconventional move from software development into penetration testing and …
OWASP Spotlight - Project 16 - Cornucopia About the Project:- OWASP Foundation Cornucopia is a mechanism in the form of a card game to assist software development teams identify …
Bryson Bort joins LeaderSpeak to explain how relationships, mission, and a willingness to learn unfamiliar business disciplines shaped several different organisations. His …
About the Project:- Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. …
Moderator - Nenne Adaora Nwodo, Software Engineer, Microsoft Mixed Reality; Creator, AdoraHack; Public Speaker Panelists Malini Rao, Global Head – Cybersecurity and GRC Operations …
Shira Shamban, co-founder and CEO of Solvo, joins this conversation to explain how a cloud security researcher became a software entrepreneur. She discusses the uncertainty behind …
Review board role supporting Black Hat Asia and Black Hat Europe through conference submission review and technical program shaping.
About the Project:- The Secure Coding Dojo is a training platform which can be customized to integrate with custom vulnerable websites and other CTF challenges. Getting Involved …
Shivangi Nadkarni, co-founder and CEO of Arrka, reflects on building a business at the intersection of information security and privacy. The discussion follows Arrka’s …
About the Project:- The MSTG is a comprehensive manual for mobile app security testing and reverse engineering for iOS and Android mobile security testers with the following …
Vandana Verma joined the Application Security Podcast to discuss the OWASP Project Spotlight Series and lessons from the featured projects.
The goal was to choose a set of CISOs and InfoSec leaders who have demonstrated an extraordinary leadership and resilience during the challenging times Reference …
The most awaited #podcast is out, It was a great pleasure to host a Cyber male ally panel with the amazing Co-host Nathan Chung , hosted by peerlyst. We disc…
EC-Council cyber talk featuring Vandana Verma on practical zero trust strategy and implementation.
LinkedIn Live Episode 6 focused on women in infosec, barriers in the industry, and the importance of visible cybersecurity leadership.
Episode 55 of Snyk’s “The Secure Developer” podcast featuring a conversation about diversity in DevSec and cloud security, covering the journey into …
CQ100: Meet The Dynamic Women Changing The Face Of Indian Cyberspace Reference https://www.the420.in/meet-the-dynamic-women-changing-the-face-of-indian-cyberspace/
Panelists Nicole Perlroth, Sam King & Vandana Verma discuss Industry Leadership for International Women’s Day Sam King, CEO of Veracode, New York Times investigative …
Closing the Skill Gap With More Women in Cybersecurity To gain an insight into the lack of women representation, CISO MAG gauged a few women security influencers to understand the …
Colleges are doing exceptional work towards bringing cyber security closer to the students. Once such incident, I witnessed over the weekend, where I was invited to VIT Bhopal …
Celebrating Women in Cyber Security To gain an insight into the lack of women representation, CISO MAG gauged a few women security influencers to understand the cause of this …
Let’s start with a beautiful quote by Ruth Bader Ginsburg -“Women will have achieved true equality when men share with them the responsibility of bringing up the next generation”. …
Allyship done right is critical
Selected as a judge for the SC Magazine 2021 Awards, evaluating the best information security products and solutions alongside other cybersecurity industry luminaries including …
About the Project:- The OWASP Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by a dedicated international team of …
Joined Digital Week: Southeast Asia as a #keynotespeaker Four-day virtual conference from 23-26 February is a chance for all of us in the Cloud, Datacenter, and Cybersecurity …
Fri Feb 26, 11:00 AM - 11:45 AM GMT +5.5 (45 Min) [Track : Security & Privacy] Title : Redefining Trust in Security If you ask a security expert on “how to protect their …
About the Workshop Showcasing Security Testing essentials, OWASP Project, different tools and approaches for Security Testing. Attendees will learn: What is Application security …
Student Session: Bridge the gap between AI/ML and Cyber Security Session on Embedding AI/ML with Cyber Security with Sabudh Foundation for BML Munjal University (BMU), Haryana …
Advisory board role contributing practitioner perspective to the EC-Council Certified Network Defender ecosystem.
Advisory board role for SiberX Beyond Borders, supporting women in cybersecurity and global community-building.
Global Roundtable hosted by the ISRM Women in Security Sisterhood group. The subject of Women in Technology is one that is at the forefront of multiple vectors, including …
This International Day of Women and Girls in Science. I got an opportunity to train over 200 college girls around Social Media safety along with the IGNITE Worldwide.
2020 was a year like never before. We all witnessed the twists and turns in our lives. It did have a torrential impact on the cyber security ecosystem too. Although everyone …
A video from the Cloud Security series.
Panel discussion - Application Security Testing Schedule: Jan 28, 19:30-20:10 CET Invited panelists: Scott Gerlach (CSO & Co-Founder @ StackHawk) Sam Stepanyan (OWASP London …
INSPIRE 20 Podcast: Vandana Verma Sehgal, Infosec Girls Reference https://techbeacon.com/enterprise-it/inspire-20-podcast-vandana-verma-sehgal-infosec-girls?utm_source=richisoc
In the podcast, Verma explains why mentorship is so critical in addressing gender imbalance in the tech industry, and what it means to “uplift others,” help them …
I got an opportunity to speak to DPS Bangalore East students on #cyberethics #privacy and #hackingstrategies as part of 1M1B (1 Million for 1 Billion) initiative.
Alumni Association of IIT Kanpur Delhi Chapter cordially invites you all to benefit from the Webinar on Cyberthreats and Darkweb scare while working from home on Saturday 16th Jan …
The Society for Data Science team is back with an exciting set of Workshops and Tutorials as a part of ICDMAI 2021 to happen on 15th January 2021. Join the Workshops on Spice of …
This project is an automated penetration testing tool, but it can be used for all sorts of interesting things because it is modular and basically it’s written in Python, and …
Reference https://cybersecurityworks.com/cyber-security-predictions-2021/vandana-verma.html
The OWASP Top 10 is a standard awareness document for developers and web application security. It represents a broad consensus about the most critical security risks to web …
Featured in CXO Junction’s list of the Most Influential and Most Recognized Women in India’s Cybersecurity industry. Reference …
Reference - WhiteSource https://twitter.com/WhiteSourceSoft/status/1345009431252242432?s=20
Initiative Star Contributor Award - Issued by IBM Member or non-member of the IBM Academy of Technology who has completed 3+ Academy Initiatives since January 1, 2020 and at least …
Organisation, who wants to set up an AppSec program from scratch using open source tools especially the start ups. They need a security program which they ca…
Building an AppSec Program with Open Source
About the Project:- The Software Assurance Maturity Model (SAMM) is an open framework to help organizations formulate and implement a strategy for software security that is …
About the Project:- The OWASP Top Ten Proactive Controls describes the most important control and control categories that every architect and developer should absolutely, 100% …
How Owasp can help Security Teams - Guides and Testing Tools - 8th December 2020 By Dinis Cruz, Sam Stepanyan, Grant Ongers and Vandana Verma
Hi Everyone. We are back again with another spotlight series project and today we have OWASP Security Knowledge Framework (SKF) with us. I feel that this is one project, which is …
Title: Running a devsecops pipeline with open source projects Reference:- https://www.devsecopsdays.com/2020-devsecops-days-london
Reference:- scmagazine.com/women-in-it-security/women-advocates/vandana-verma-broadening-the-diversity-aperture/
Times webinar on cybersecurity and women hackers Reference
We are back again with another oversaw spotlight series project, and this time we have a very interesting project, which is around Threat Modeling. Fixing the bugs later in the …
National webinar with Mizoram University on cyber crime against women, focused on precautions and response strategies.
In this interview Jenny talks to the multi award winning women’s advocate and member of OWASP global board of directors, Vandana Verma. They discuss her career in cyber, her …
Webinar: Cybersecurity Trends & Women in Ethical Hacking | #TimesTechiesWebinars In this week’s edition of #TimesTechiesWebinars, watch India’s leading women …
Webinar: Cybersecurity Trends & Women in Ethical Hacking | #TimesTechiesWebinars In this week’s edition of #TimesTechiesWebinars, watch India’s leading women …
Speaker at the Cybersecurity Career Conference 2020 organized by Niloufer Tamboly, focused on helping professionals navigate cybersecurity career paths.
Gathering the requirements and tracking them is always a challenge in the application development. The biggest concern area is if the security requirement changes then to track …
Speaker at All Day DevOps, the world’s largest DevOps online conference, presenting on application security practices using OWASP frameworks and open source tools.
About the Project:- The OWASP Cheat Sheet Series was created to provide a set of simple good practice guides for application developers and defenders to follow. Rather than …
About the Project:- The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS …
https://medium.com/epic-women-in-cyber/epic-women-in-cyber-vandana-verma-173c0775c3fe
A video from the Application Security series.
SC Media, Women in IT Security Advocates Award Reference https://www.scmagazine.com/women-in-it-security/women-advocates/vandana-verma-broadening-the-diversity-aperture/
Title : Applying OWASP Web Security Testing Guide by Vandana Verma - 12 Jun
“Cybersecurity is much more than an IT topic.”
OWASP has so many amazing and great projects which can help organisations, developers, security testers and many more groups. However, working with OWASP projects very closely in …
About the Training This Training is intended for students/professionals interested in making a career in the Information Security domain. This training involves real world …
Recently I have been experimenting with various IBM product integrations and I posted a reciepe in IBM Community portal for integration of IBM IGI with IBM Security Verify. This …
OWASP has so many amazing and great projects which can help organisations, developers, security testers and many more groups. However, working with OWASP projects very closely in …
Reference Link: Black Hat Asia
Interview with Cybersecurity Magazine Reference https://cybersecurity-magazine.com/interview-with-vandana-verma-from-infosec-girls/
Talk at the DevOps India Summit 2020 discussing various Open Source Tools available from OWASP to be used in the journey of DevSecOps. Published on Techstrong TV.
Users always wants to make sure they have everything is working, they are able to use the website and at the same time their identities are secure. There is a huge shift in the …
Impact of COVID-19 on Cloud Adoption & Security at CSA India Annual Summit The onset of the pandemic has thrown normalcy out of gear. There is talk of a “new normal”, which …
Reference https://cybersecurityawards.com/2020-winners
Humbled to be enlisted among the finalists for “Cybersecurity Woman Supporter of the Year” along with Noureen Njoroge Noureen Njoroge & Diana Kelley Reference …
Featured in Technology Magazine’s list of the Top 100 Women in Cybersecurity for 2020. Reference …
Guest on the Cyber Security & Cloud Podcast (CSCP) with Francesco Cipollone, discussing the best way to communicate the importance of security without using scare tactics, and …
Moderator - Dr. Chandra Vadhana R, Founder & Director Prayaana Labs Panelists Sanjay Kumar IPS, DIG Range Trivandrum Vandana Verma, OWASP Global Board of Directors
Moderator - DoS 2021: Lunch Panel - Founders’ Discussion: Being an Ally with Deidre Diamond, Soledad Antelada Toledano, Tennisha Martin, & Vandana Verma Sehgal (Keynote) …
Moderator - Panelists
Dr Kiran Bedi was in her element as the Chief Guest The jury comprised of • Mr Rajan Luthra, Chairman’s Office – Head-Special Projects, Reliance Industries Ltd. • Dr. Shailja …
Indo-Pacific Series - reviewing the Australian Cyber Security Strategy and making Women in Security announcements Moderator - Chris Cubbage Panelists Ron Gauci GAICD Sean Duca Ian …
Talk at The Diana Initiative 2020 exploring the myths around Zero Trust architecture, breaking down the concept of trust models and demystifying common misconceptions about Zero …
We are all heading towards modernisation of applications. However, we still see the vulnerabilities like SQL Injection, Sensitive data exposure, and security misconfiguration etc. …
There are still lots of misconceptions and myths about Cloud Security. In this episode , Vandana Verma Global Board of Directors at OWASP and InfosecGirls shares her thoughts on …
Advice for aspiring speakers on sharing work publicly, submitting talks, and becoming more active in the security community.
Reference
Title: Running an appsec program with open source projects We are all heading towards the modernization of applications. However, we still see the companies being impacted with …
Title: Zero Trust - A Vision for Securing Cloud and Redefining Security Reference:- https://redteamvillage.io/day0.html
Reference Link: Black Hat USA
How to get closer to web application security Reference - https://www.synopsys.com/blogs/software-security/vandana-verma-web-application-security/
Developing Community for Woman Infosec Pros in India Reference - Dark Reading …
Named in the Cyber Defense Awards Top 100 Women in Cybersecurity for 2020, announced at Black Hat USA 2020. Reference …
“Hac’KP Webinar Series_ How to run an Appsec program with open source tools (OWASP)
A practical conversation about how to get started in cybersecurity and build an early path into the field.
Interview on improving diversity and helping to grow the Indian security community Reference …
The #Covid19 pandemic has seen a sudden spur in #Cyber Crimes. With the new world order of WFH and remote working has created new exposures of potential #Cyber-attacks. The panel …
An introduction to cryptography, Why do we need it, what are the different encryption mechanisms. What are the elements and functions used to encrypt data? H…
There are still lots of misconceptions and myths about Cloud Security. In this episode , Vandana Verma Global Board of Directors at OWASP and InfosecGirls shares her thoughts on …
Panel discussion on Ethics and Privacy
Cloud Migration is the next big thing. Everyone wants to be in the cloud, but what about security and compliance standards? How do organizations manage both safety and security in …
OWASP chapter talk by Vandana Verma on DevSecOps and secure application delivery.
Title : Applying OWASP Web Security Testing Guide by Vandana Verma - 12 Jun
Session: Implementing Zero Trust in an organisation to be uncertainty Ready The Current unprecedented situation has changed the IT World forever, no matter what the outcome is, the …
Vuneraility Assessment for Enterprises Glad to share the #Highlights of Data Security Council of India. DSCI_Connect #CyberShikshaa Virtual Session for Women Students. The virtual …
Recognised as one of the Top 10 Influential Indian Women in Cybersecurity for contributions to application security, community building through InfosecGirls and WoSec, and …
Guest on the TestGuild Security Testing Podcast discussing cloud security myths, busting common misconceptions about security in the cloud, and sharing practical advice on securing …
India edition of the Times of India story on women cybersecurity professionals securing work-from-home systems, featuring Vandana Verma.
Times of India feature on women hackers and remote-work security, highlighting Vandana Verma’s cybersecurity work.
Web Application Pen-testing for BeginnersTopic Wise Time Stamps:-00:00 - Video start00:36 - Tutor’s Introduction 01:00 - Web Application Architecture 03:15 …
Quoted as a cybersecurity expert in Republic World’s coverage of the significant increase in cybercrime against women during the COVID-19 lockdown. Discussed how …
Appeared on the Cloud Security Podcast to discuss cloud security practices and the InfosecGirls community initiative, covering topics including public cloud security, myths in …
It will not be easy to go out even when the lockdown period is over. The way this pandemic is evolving, will take us far away from what we consider normal, and that is for a while. …
A cybersecurity video published on Vandana Verma’s YouTube channel.
Hindustan Times report on rising cybercrime against women during lockdown, featuring direct quotes from Vandana Verma.
The time is challenging. No one ever believed that a pandemic would leave us stranded. We will be home for such a long time even though some of us always wanted to work from home …
NDTV coverage of rising cybercrime against women during lockdown, including direct quotes from Vandana Verma as founder of InfoSec Girls.
ETCISO / Economic Times coverage of cybercrime against women during lockdown, including direct quotes from Vandana Verma as founder of InfoSec Girls.
Business Standard coverage of cybercrime against women during lockdown, carrying direct quotes from Vandana Verma.
Title: Living In A World of Zero Trust
Moderator - Niloufer Tamboly, Panelists Mohan Yelnadu Katy Anton Vandana Verma
Webinar: Zero trust , why and why not?
Fast, Accurate, Agile Security Testing Moderator: Eitan Worcel Panelists: Vandana Verma Sehgal Dragan Pleskonjic Laura Guazzelli Reference:- …
Speaking at any Conference is a savoir faire itself. Most often I am asked when and how to start the Infosec speaking journey. My answer to them is fundamental: there is no …
Being an information security evangelist, I have been preaching and practicing security for more than a decade. Security is my bread and butter and I love it! I started with …
Closing the Skill Gap With More Women in Cybersecurity To gain an insight into the lack of women representation, CISO MAG gauged a few women security influencers to understand the …
Glad to be on the list. Each of the women listed here plays an integral role in the development and progress of application security in their respective organizations. With a wide …
Reference Link: https://2019.owaspseasides.com/events/penetration-testing-workshop
Speaker at OWASP Seasides 2020 held in Goa, India. OWASP Seasides is a security conference organized by the OWASP community bringing together security professionals from across …
https://reflections.scit.edu/?p=4852
Diversity by Design: Securing the Cyber Workforce Development Lifecycle - Panel …
Reference Link: Appsec Cali
Speaker at OWASP AppSec California 2020, presenting on application security topics to the West Coast security community.
Why do we need Sec in DevOps? Learn more about it in this video.
ETCISO Security Summit Virtual speaker listing referencing Vandana Verma as part of the event program.
Featured interview in Reflections Magazine (Symbiosis Centre for Information Technology) discussing the journey from SCIT alumnus to a global cybersecurity leader, work at IBM …
Named in the Cybersecurity Ventures list of 247 Women in Cybersecurity to Follow on Twitter, recognising contributions to the cybersecurity community, diversity initiatives, and …
A cybersecurity video published on Vandana Verma’s YouTube channel.
A cybersecurity video published on Vandana Verma’s YouTube channel.
As Chapter Leader at OWASP Bangalore and Asia Lead and Secretary OWASP Women in AppSec(WiA) Vandana kicked off our Appsec themed spell by discussing just how important Appsec is in …
Speaker at Security Guild 2019, presenting on application security and DevSecOps topics to the security community.
Session on web application security for All Women’s CTF team(Egypt University)
Session for the security guild
Listed as one of the top women leaders in the field of technology and cybersecurity in India by Instasafe. Reference https://instasafe.com/top-women-in-cybersecurity-in-india/
Glad to be on the list. Reference - https://www.peerlyst.com/posts/peerlyst-community-ebook-52-influential-cyber-security-bloggers-and-speakers-peerlyst
On 26th September, 2019 infosecgirls organised a one day cyber security conference in collaboration with c0c0n12 hosted by Kerala Police and ISRA on 26th September. The conference …
There has been a lot of conversations around diversity and inclusion in the recent past. This is a step in a positive direction. The benefits of diversity in cybersecurity are …
Workshop details : This was a 1-day training course. The Application Security Training is intended for students/professionals interested in making a career in the Information …
An InfoSec Life | A Conversation With Vandana Verma By Marco Ciappelli Reference https://www.itspmagazine.com/itsp-chronicles/an-infosec-life-a-conversation-with-vandana-verma
Cyber Security Woman Supporter of the Year Award 2019 - Woman CyberJutsu, 2019 in “Secure Coder” Category Reference https://womenscyberjutsu.org/page/AWARDWinners
A cybersecurity video published on Vandana Verma’s YouTube channel.
Title: Shifting the DevSecOps Culture, Taking away the sugar piece and giving the pile to ants We have been talking about the technical angle of DevSecOps. How do I go about …
Speaker at BSides Las Vegas 2019, part of Hacker Summer Camp alongside DEF CON and Black Hat USA.
The talk would be around the general myths we have on Cloud Security and Cloud Computing. Also, we will map the myths with different roles and discuss how to resolve that.
Recognized in IFSEC Global’s 2019 Influencers in Security and Fire list.
Workshop details : OWASP Kids village is an Open space exclusively for Kids where there is so much playing around and exploring the insights of Digital World. Reference: …
Provided free training on Introduction to Web Application Hacking at OWASP Global AppSec Tel Aviv 2019. Also served on the Call For Papers Review committee for the event.
Workshop details : This was a 1-day training course. The Application Security Training is intended for students/professionals interested in making a career in the Information …
HackInterview with Vandana — document your learning in the form of blogs Reference …
Speaker at Nullcon 2019, one of India’s premier cybersecurity conferences, presenting on application security topics.
About the Training In this completely hands-on workshop, you would get to understand the techniques and methodologies that could be applied when performing a web application …
Speaker at OWASP AppSec California 2019, one of the premier application security conferences on the West Coast.
Web Application Penetration Testing: An Introductory Workshop For Developers and Security Professionals At All Levels In this completely hands-on workshop, you will get to …
Hands-on BSides Delhi 2018 training on attacking web applications using Burp Suite.
Speaker and organizer at BSides Delhi 2018, contributing to the Indian security community through both presentation and event management.
Why a free workshop? The OWASP volunteer community and our Women in AppSec Committee (WIA) Committee commit to training the leaders behind securing the World Wide Web… That’s YOU! …
Served as an Information Security Award Judge for the Women Cyberjutsu Awards 2018, evaluating nominees across cybersecurity categories.
Introduction to the Project.To understand what is. Dependency Checker by Supported Languages/tech. Relation to OWASP top 10. Reviewing How it works. Vulnerability Data Source and …
Webinar: Referencd: https://shesecures.org/shesecures-women-in-cybersecurity-webinar/
Thursday, July 5 • 12:30pm - 1:30pm OWASPWIA (Women In AppSec) hosted a talk and luncheon for all the Ladies Venue: Byron- 4th Floor QEII Centre Broad Sanctuary, Westminster, …
Manager’s Choice Award for demonstrating the Unite to get it done now Reference https://leadmind.inteligenca.com/cswy2020/
This Training is intended for Women Infosec professionals interested in making a career in the Information Security domain. This training involves real world scenarios that every …
The moment an organization starts making a move to Cloud, the way they look at their security changes as well. A traditional security operation is more focused towards a bunch of …
Speaker at c0c0n 2017, the annual hacking and cybersecurity conference organized by Kerala Police, presenting on security topics to law enforcement and security professionals.
Topic: ‘The Emerging trends in cyber security’. Panelists Vandana Verma, Manager Information Security Priya Murthi, Project Manager, Shell Minatee Mishra, Lead Engineer, Philips …
Won first prize at the inaugural Winja CTF at Nullcon Goa 2015, solving the maximum number of security challenges in the given time. Winja CTF is a Capture The Flag event aimed at …
EC-Council certification listed on Vandana Verma’s LinkedIn certifications profile.
Palo Alto Networks certification listed on Vandana Verma’s LinkedIn certifications profile.
Checkmarx certification listed on Vandana Verma’s LinkedIn certifications profile.
IBM identity management certification listed on Vandana Verma’s LinkedIn certifications profile.
GIAC certification listed on Vandana Verma’s LinkedIn certifications profile.
EC-Council certification listed on Vandana Verma’s LinkedIn certifications profile.
ISO 27001 lead auditor certification listed on Vandana Verma’s LinkedIn certifications profile.
Qualys certification listed on Vandana Verma’s LinkedIn certifications profile.
IT service management certification listed on Vandana Verma’s LinkedIn certifications profile.
Cloud Security Alliance certification listed on Vandana Verma’s LinkedIn certifications profile.
Cloud certification listed on Vandana Verma’s LinkedIn certifications profile.
Process improvement certification listed on Vandana Verma’s LinkedIn certifications profile.
EC-Council certification listed on Vandana Verma’s LinkedIn certifications profile.
IBM AppScan certification listed on Vandana Verma’s LinkedIn certifications profile.
Governance certification listed on Vandana Verma’s LinkedIn certifications profile.
AWS security learning credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM foundations credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM cognitive learning credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM design thinking credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM architecture credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM Resilient technical sales credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM agile learning credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM learning credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM AppScan professional credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM QRadar technical sales credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM QRadar professional credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM QRadar credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM mobility and security credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM security foundations credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM security learning credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM speaker recognition listed on Vandana Verma’s LinkedIn certifications profile.
IBM recognition credential listed on Vandana Verma’s LinkedIn certifications profile.
IBM certification listed on Vandana Verma’s LinkedIn certifications profile.