AppSec & DevSecOps Singapore schedule

AI is rewriting how software is built, and how it can be broken. From AI-generated code to a surge in malicious open-source packages, the modern supply chain has expanded faster than most security strategies can keep up. In this session, JFrog explores what it takes to establish trust across every binary, model, and artifact moving through your pipelines, without slowing innovation.

• Strategies to increase development velocity without compromising security standards
• Designing pipelines and controls that scale with fast-moving engineering teams
• Managing risk and accountability in highly automated development environments
• Cultural and operational changes needed to embed security into everyday delivery
  
  Moderator
  Anthony Lim Fellow Global Fintech Institute (GFI) 
  Speakers
  Reuben Athaide Head Innovation, Application Security and Assurance Standard Chartered
  Shilpy Banerjee Cyber Security Manager - Africa and Asia Yara International
  Yenn Jie Ho Principal Systems Engineer GovTech 
  

• Best practices for integrating SAST, DAST, and runtime protection into CI/CD pipelines
• Modern threat modelling techniques and secure coding practices for high-velocity teams
• Balancing security coverage with development speed to avoid bottlenecks
• Case studies of AppSec adoption at scale without slowing innovation

Artificial Intelligence is transforming how software is built, accelerating innovation while introducing entirely new security risks. This session explores how AI is reshaping the application security landscape, the emerging threats organisations face, and the strategies security teams can adopt to enable AI safely without slowing development.

• Strategies for restoring systems quickly while preserving security and compliance
• Maintaining team productivity and workflow continuity during and after incidents
• Practical approaches to learning from every incident: improving processes and preventing repeat issues

AI is rewriting how software is built. Development is accelerating, AI is becoming embedded throughout the software lifecycle, and increasingly autonomous tools and agents are changing the speed and scale at which software can be created and shipped.

For security leaders, the challenge is bigger than simply securing AI-generated code. As development accelerates, so does the volume and complexity of risk. Traditional AppSec approaches built around scanning later in the development cycle can struggle to keep pace - and finding more vulnerabilities doesn't necessarily mean being more secure. The real challenge is knowing what matters, preventing risk earlier, and enabling teams to fix issues without slowing development.

This session explores how Checkmarx is rewriting AppSec for the AI era - starting security at the point where code is created. From helping developers secure code as it is written, to protecting the software supply chain and using AI to intelligently validate, prioritise and remediate risk, security becomes part of the development process from the very beginning.

Discover how Checkmarx is enabling organisations to keep pace with a new era of software development — giving developers the security they need as they build, while giving security leaders the visibility, intelligence and governance they need to manage risk at scale.

• Integrating security practices from design to deployment in Agile workflows
• Upskilling engineers and staff to maintain security resilience under pressure
• Creating a culture where security is a shared responsibility, not an afterthought

AI is reshaping software development by boosting productivity and accelerating delivery, but it also introduces new security, quality, and governance challenges through AI-generated code, open source usage, and modern DevOps practices. This session explores how organisations can securely adopt AI-assisted development by integrating application security into developer workflows and aligning AppSec programs with evolving development practices. It also highlights how Black Duck Agentic AI AppSec helps teams reduce alert fatigue, prioritise exploitable risks, and provide actionable, AI-driven remediation guidance, enabling organisations to balance speed, innovation, and security while building more resilient software without slowing developer productivity.