Corporate Supporters & Sponsors

Disclaimer: The following information is not an endorsement for any particular entity and reflects the messaging of the supporter only.

Diamond Corporate Supporters and Event Sponsors


  • Arnica integrates across your software supply chain and provides the necessary context, prioritization, ownership, and actionability to proactively mitigate risks. In addition to providing complete reports around code risk, excessive permissions, vulnerable dependencies, code repository misconfigurations, anomalous developer behavior, and more, Arnica’s pipelineless approach eliminates these risks in a blameless and shameless way by interacting directly with the developers in real-time to stop any new risks from entering your source code while also helping resolve your risks backlog.

Platinum Corporate Supporters and Event Sponsors


  • 7ASecurity is an ISO27001 and SOC2 certified cybersecurity consultancy and OWASP Platinum Supporter specializing in manual, high-quality penetration tests and secure code audits. Trusted since 2011 by the Linux Foundation, Mozilla Foundation, Tor Project, The Guardian, and many others (7asecurity.com/publications). Every engagement is tailored to the client priorities and threat model, and guided through a dedicated channel from scoping to free fix verification. With researcher-led testing that outperforms automation, 7ASecurity consistently uncovers vulnerabilities others miss — delivering real results with proof and replication steps, clear guidance, and measurable security improvements that stand up to real-world threats.


  • Changing the world through personalized digital experiences. Adobe empowers everyone, everywhere to imagine, create, and bring any digital experience to life. From creators and students to small businesses, global enterprises, and nonprofit organizations — customers choose Adobe products to ideate, collaborate, be more productive, drive business growth, and build remarkable experiences.


  • Tools for teams, from startup to enterprise - Atlassian provides tools to help every team unleash their full potential


  • Bloomberg is a global leader in business and financial information, delivering trusted data, news, and insights that bring transparency, efficiency, and fairness to markets. The company helps connect influential communities across the global financial ecosystem via reliable technology solutions that enable our customers to make more informed decisions and foster better collaboration.


  • Digital.ai Arxan Security protects the world's most targeted apps against reverse engineering, tampering, and runtime attack. Arxan Security hardens mobile, web, and desktop applications so they resist analysis and manipulation in the wild. Trusted by leading enterprises across six continents, Arxan Security delivers code obfuscation, anti-tamper, RASP, white-box cryptography, and jailbreak/root/emulator detection without requiring source code changes.


  • InfoSecMap is a worldwide directory of InfoSec events and groups, created and maintained by community members and industry professionals. From major conferences to CTFs and local meetups, it features carefully curated, up-to-date content tailored for the InfoSec community. The platform's advanced filtering system allows users to conduct detailed searches across thousands of events, including active Call for Papers, Trainers, Sponsors, and Volunteers. Community-driven and free to use, InfoSecMap is the ultimate resource for staying connected and engaged in InfoSec.


  • Secure Code Warrior is a Developer Risk Management Platform enabling enterprises to implement new standards for secure code throughout the software development lifecycle. With an integrated approach of organizationally benchmarking secure code skills, governance by quality gates integrated during code changes, and upskilling with dynamic agile learning opportunities. Secure Code Warrior allows cybersecurity teams and CISOs to go beyond basic compliance initiatives. Efficiently measure, manage, and mitigate security risk to eliminate introduced vulnerabilities by up to 53%, reduce MTTR by 2x, ease tension between security and engineering teams, and provide continued development opportunities to help retain top talent.


  • SecureFlag empowers organizations in 30 plus countries to implement secure coding training. The platform offers thousands of hands-on labs in over 45 programming languages, hosted in virtualized environments. Developers gain skills to identify and remediate vulnerabilities, building secure software from the start. Through plugins, we integrate with the Software Development Life Cycle, embedding secure practices into workflows. Our customer success team designs bespoke training programs tailored to organizational needs. SecureFlag also offers ThreatCanvas, an automated threat modeling solution enabling developers to assess and mitigate design risks independently, reducing reliance on security teams.

Gold Corporate Supporters and Event Sponsors


  • Aikido is the no-nonsense security platform for developers. The all-in-one security platform that covers you from code-to-cloud and helps you get security done. Engineering teams execute faster with Aikido thanks to centralized scans, aggressive false positive reduction, automatic risk triaging & fixing, risk bundling, and easy step-by-step risk fixes. Aikido makes security simple for SMEs and doable for developers, so companies can win customers, grow up-market, and ace compliance. Don’t just get security done fast, get it done automatically.


  • BDO’s Global Cybersecurity practice is comprised of professionals from a diverse range of backgrounds, including experienced IT, operations, and data privacy consultants, as well as forensic technology, business advisory, and accounting practitioners. We are built to provide comprehensive, customized services for each client, focusing on your specific operating model, technical demands, regulatory environment, and industry dynamics. Whether it’s financial services, healthcare, retail, natural resources, or any other industry – we understand your needs.


  • Checkmarx is the enterprise application security leader and the provider of Checkmarx One™, the industry-leading cloud-native AppSec platform that helps enterprises build


  • Guardsquare offers the most complete approach to mobile application security on the market. Guardsquare's software integrates seamlessly across the development cycle: from app security testing to code hardening to real-time visibility into the threat landscape. Guardsquare products provide enhanced mobile application security from early in the development process through publication. More than 900 customers worldwide across all major industries rely on Guardsquare to help them identify security risks and protect their mobile applications against reverse engineering and tampering. Learn more at www.guardsquare.com.


  • Security Journey offers robust application security education tools to help developers and the entire SDLC team recognize and understand vulnerabilities and threats and proactively mitigate these risks. The knowledge learners acquire in our programs goes beyond helping learners code more securely – it turns everyone in the SDLC into security champions.


  • Zimperium is the world leader in mobile security for iOS, Android and ChromeOS. Zimperium solutions, including Mobile Threat Defense (MTD) and Mobile Application Protection Suite (MAPS), offer comprehensive mobile security for enterprises. MTD is a privacy-first application that provides mobile risk assessments, insights into application vulnerabilities, and robust threat protection. It is used to secure both corporate-owned and bring-your-own (BYO) devices against advanced mobile threats across device, network, phishing, app risks, and malware vectors. MAPS delivers in-app protection to safeguard applications from attacks and ensure data integrity. Together, these solutions empower security teams to effectively manage and mitigate mobile threats.

Silver Corporate Supporters and Event Sponsors


  • AppSecAI is transforming application security through AI-powered expert automation, enabling security champions to secure applications at portfolio scale. Our success-centric business model delivers guaranteed ROI by only charging for vulnerabilities fixed! Led by security pioneers from Contrast Security, Aspect Security, and Cloudflare, AppSecAI is driving the future of application security to with tools that work.


  • Approov is the world leader in mobile security. As cybercriminals adopt AI tools and a mobile-first attack strategy, Approov helps organizations stay ahead of threats with runtime, zero-trust protection of both the mobile apps that run your business and all the APIs they use. Approov secures the world’s most targeted mobile apps and APIs with patented app attestation and runtime API protection. Our cloud-first approach ensures only your genuine mobile app, running on a safe device, can access your backends—stopping fake and repackaged apps, emulators, bots, and man-in-the-middle attacks.


  • Cyata is the Control Plane for Agentic Identity. Cyata takes a posture-first approach - discover, explain, and control every AI agent in your environment. This enables governance at scale - organizations can enforce posture guardrails that adapt to risk levels and establish context-aware access controls. The result - preemptive security where every agent action is attributable and audit-ready, not shadow risk.


  • GitGuardian is a global cybersecurity startup focusing on code security solutions for the DevOps generation. A leader in the market of secrets detection and remediation, its solutions are already used by hundred thousands developers in all industries. GitGuardian helps developers, cloud operation, security and compliance professionals secure software development, define and enforce policies consistently and globally across all their systems. GitGuardian solutions monitor public and private repositories in real-time, detect secrets, sensitive files, IaC misconfigurations and alert to allow investigation and quick remediation.


  • GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations make better decisions that minimize risk. Our experts act as your trusted advisor to understand your business and challenges, helping you through an evaluation of your cybersecurity posture and ecosystem to expose risks, optimize resources, and implement best-fit solutions. GuidePoint’s unmatched expertise has enabled a third of Fortune 500 companies and more than half of the U.S. government cabinet-level agencies to improve their security posture and reduce risk.


  • Hitachi Solutions is a core IT company of the Hitachi Group. We deliver products and services of superior value to customers worldwide through key subsidiaries in Asia, the United States, and Europe. We have also been providing a variety of solutions globally using cutting-edge digital technologies based on collaborative creation with customers. Together with our partners around the world, we are accelerating Sustainability Transformation (SX) to solve the challenges facing society and business, and contribute to the realization of a happy society where no one is left behind.


  • Noma Security is the enterprise AI security and governance platform designed to give organizations the confidence to rapidly build and deploy AI at scale. As the comprehensive solution for both enterprise AI applications and agentic AI, Noma Security provides deep visibility and discovery, AI supply chain security, red teaming, and runtime protection for applications and AI agents, all in one powerful, enterprise-ready platform. With seamless integration to your AI stack and alignment with AI security and regulatory compliance frameworks, Noma Security empowers teams to embrace AI innovation confidently while addressing the unique threats posed by enterprise AI development and adoption.


  • Only the NowSecure Platform delivers automated 360-degree coverage of mobile app security testing with the speed and depth modern enterprises require. The world’s most demanding organizations and advanced security teams trust NowSecure to identify the broadest array of security, privacy, and compliance gaps in custom, third-party, and business-critical mobile apps.


  • Rakuten Security Team, aka the Cyber Security Department, is a team of multi-national professionals that aims to protect Rakuten's users and maintain the peaceful order of the Internet society. With its cross-continent branches, the Rakuten Security Team is not only responsible for the Cyber Security of Rakuten Group, Inc. but also for its group companies across Asia, the Americas, and Europe, which together serve 70+ services to almost 1.4 Billion users. Inside the team includes Rakuten-CERT (https://www.nca.gr.jp/member/rakuten-cert.html), our emergency response team established in 2007, which has been a long time Cyber Security Guardian for Rakuten.


  • Raxis is a team of highly skilled U.S. engineers tasked with breaching the security controls of major corporations to small start-ups and anywhere in between. Since 2011, Raxis has focused on infosecurity related to the data breach. Through providing services including network and application penetration testing, social engineering, red teaming, and PTaaS, the team of Raxis experts is proficient at breaking through security controls and demonstrating real world risk to organizations worldwide. Raxis performs over 600 penetration tests annually against some of the most protected organizations and has breached controls to retrieve protected data over 85% of the time.


  • Red Hat is the world’s leading provider of enterprise open source solutions, using a community-powered approach to deliver high-performing Linux, hybrid cloud, edge, and Kubernetes technologies.


  • Architects and Developers of a world leading, top tier Optical Practice Management System. Formed in 1989, SDS is a strategic software supplier to many 'Top 10'​ Optical Retailers in North America. We have a comprehensive and fully flexible solution which allows our clients to operate successfully in their unique environments. SDS also offers custom development to handle any client specific requirements.


  • Salt Security makes it safe to innovate by protecting the APIs at the core of every SaaS, web, mobile, microservices and IoT application. Our API Protection Platform is deployed in minutes, and requires no configuration or customization. We use patented behavioral protection to automatically and continuously discover and learn the granular behavior of each unique API to ensure protection. The company was founded in 2016 by alumni of the Israeli Defense Forces (IDF) and serial cybersecurity executives. In 2019 Salt Security was selected as a finalist for the RSA Innovation Sandbox and as the winner of the OWASP Innovation Fair.


  • SerpApi, LLC is a U.S.-based technology company that provides real-time APIs for extracting and structuring search engine data. It enables developers to access results from Google, Bing, Yahoo, Baidu, Yandex, and other platforms with built-in support for CAPTCHA solving, proxy rotation, and location-specific queries. The API returns structured JSON results across a wide range of verticals, including web, images, news, maps, shopping, and more. SerpApi is widely used for SEO automation, competitive intelligence, price monitoring, data enrichment, and machine learning applications.


  • What if the world's best hackers rebuilt AppSec from the ground up based on what actually matters to attackers? Meet Xint.io: AI-native AppSec to find real vulnerabilities in your code and then prove they’re exploitable in your live application. In just hours find the real vulnerabilities attackers target without drowning your team in false positives, with full trigger/impact reports to quickly validate and triage severe vulnerabilities.


  • Continuous offensive security for modern engineering teams. Borg finds real, exploitable vulnerabilities across applications, code, and infrastructure before they become incidents.


  • Chainloop is the trust and governance platform for AI-driven software delivery. It gives security and engineering teams one source of truth for everything they ship: capturing signed evidence and artifacts, enforcing policies as code, and using AI to assess risk and open a pull request to fix it. The payoff is simple. Ship AI-generated software faster, and prove it is secure. The Chainloop core is open source and runs in production at Fortune 500 enterprises, banks, and government agencies.


  • Amidst evolving hacking techniques, eShard stands at the forefront of cutting-edge security testing solutions. With expertise in Chip, System, and Mobile App Security, our comprehensive offerings include full testing services (pentest, training, diagnosis), software tools, and expert consultations, aimed at vulnerability assessments and framework evaluations. We're renowned for pioneering automated MAST/DASP with our tool esChecker, reshaping Mobile App Security by seamlessly integrating dynamic and static tests, UX recording and video replay, aligning with the highest OWASP MASVS security standards.


  • Trent AI. Securing Your Agentic Software. We make every software product secure and compliant by design delivering invisible, automatic security for the AI age, empowering teams to innovate freely.


  • TryHackMe is a hands-on cybersecurity training platform used by millions of people to build real-world offensive and defensive skills. Pre-configured virtual machines run directly in the browser, so learners can spend time on the work, not the setup, regardless of what equipment they have. For organisations, TryHackMe for Business helps security teams close skill gaps and track progress through customisable learning paths and a central management dashboard, trusted by 1,000+ companies. Ideal for CTFs, workshops, assessments, and structured training.

Partnership Sponsors

Watch Star