

# Event Details

- **Event Name**: OWASP AppSec Italy 2026 - Trainings
- **Event Start and End Date**: Wed, 17 Jun, 2026 at 09:00 am – Wed, 17 Jun, 2026 at 06:00 pm (+02:00)
- **Event Description**: OWASP Italy Day 2026 will take place on June 17th-18th, 2026, in Cagliari, Sardinia (Italy).About this EventOWASP Italy Day 2026 will take place on June 18th, 2026, in Cagliari, Sardinia (Italy) — returning to one of the most inspiring locations for cybersecurity innovation and collaboration.This will be a free, one-day, in-person event focused on application security, AI security, DevSecOps, and secure software development, bringing together researchers, professionals, and students to exchange ideas, share experiences, and strengthen the AppSec community.The main conference will start on June 18th at 3:30 PM, following a day of training sessions and workshops on June 17th (and optionally the morning of June 18th).Tickets for the training sessions and workshops starting on June 17th can be purchased directly through this Eventbrite page. These tickets grant access to the hands-on training activities taking place on June 17th (and, where applicable, on the morning of June 18th).Registration for the public OWASP Italy Day event on June 18th (afternoon) is handled separately. Tickets for the main conference are available on the official OWASP Italy website at: https://owasp.org/www-chapter-italy/events/OWASPItalyDay2026-06-18Day 1- Agenda🕑: 09:00 AM - 06:00 PMIntroductory - AI Security TrainingHost: Vandana Verma	SehgalInfo: This hands-on workshop is designed for security engineers, AppSec teams, DevSecOps practitioners, senior developers, and software architects building or defending AI-powered applications.
By the end, you’ll walk away with:
A clear mental model of LLM and agent-based threat surfaces
A hardened mini-agent you’ll build during the session
A reusable MCP server security checklist
Practical playbooks and patterns you can apply immediately in real environments
This isn’t theory — it’s attack → understand → defend.
Attendee Requirements (Prepare Beforehand)
Laptop with: Docker, Python 3.11+, Node 18+
One LLM: Ollama (llama3.1/phi3) or a cloud API key (OpenAI/Azure/OpenRouter)
Git installed, plus pipx or venv
Browser with DevTools (VS Code recommended but optional)
Sample lab repos (provided ahead of time):
- basic-llm-injection-demo
- mini-agent-tools-demo
- mcp-server-minimal (FastAPI/Express versions)🕑: 09:00 AM - 06:00 PMIntroductory - Secure Coding for LLM ApplicationsHost: Fabio CerulloInfo: Description
AI-driven applications are rapidly transforming products, developer workflows, and customer experiences.
But these systems introduce unique security risks that traditional AppSec practices don’t address.
This 1.5 days hands-on course teaches developers, AppSec engineers, and architects how to design and build secure AI/LLM applications. Participants learn to defend against prompt injection, insecure output handling, model poisoning, data leakage, and other risks from the updated OWASP Top 10 for LLM Applications 2025.
Through labs and real-world case studies, attendees gain practical skills for deploying safe, trustworthy, and compliant AI capabilities at scale.
Course Outline
Part I: Foundations of AI and LLM Security
Part II: Threat Modeling and Architecture Threat Modeling for LLM Systems
RAG Security: Retrieval, Embeddings, and Index Integrity Agent and Tool Security
Part III: The OWASP Top 10 for LLM Applications 2025
Part IV: Secure AI/LLM Design and Governance🕑: 09:00 AM - 06:00 PMIntermediate - Secure AI Agent SwarmHost: Krishnendu DasguptaInfo: Modern AppSec teams are using agentic workflows to triage vulnerability reports and incident tickets that contain logs, stack traces, and chat transcripts often with PII, secrets, and sensitive internal context. Once these workflows add RAG and autonomous tool use (function calling), the attack surface expands: prompt injection can trigger unsafe actions, sensitive data can leak through memory/RAG/tool outputs, agents can be spoofed, and controls can be bypassed.
You will understand the need of building, securing and deploying AI Agent Swarms in a decenetralized and trustless ecosystem.
In this training you will build a Secure AppSec Triage &amp; Remediation Swarm: a policy-governed, privacy-preserving multi-agent system powered by open-source foundation models in the 4B–20B range (Mistral/Qwen-class), with an explicit focus on EU policy-driven controls.🕑: 09:00 AM - 06:00 PMIntermediate - AI-Powered Threat ModelingHost: Marco MoranaInfo: Traditional threat modeling frameworks such as STRIDE and PASTA remain essential to secure design, but modern cloud-native architectures, distributed systems, and fast development cycles require more scalable and consistent analysis than manual approaches can offer. This session introduces an AI-augmented approach to threat modeling that leverages Large Language Models (LLMs) such as ChatGPT and domain-specific tools like StrideGPT to accelerate the threat modeling lifecycle while preserving expert judgment.
Drawing from the AI-Powered Threat Modeling eBook and an accompanying 8-module online course, the presentation demonstrates how generative AI can support system decomposition, automatically generate threat scenarios from architectural descriptions and DFDs, assist risk-based prioritization using CVEs and telemetry, and streamline documentation into standardized, repeatable outputs, with a focus on proper data preparation and preprocessing.🕑: 09:00 AM - 06:00 PMAdvanced - The Mobile Playbook - Android AppSecHost: Sven SchleierInfo: This hands-on course is designed to teach penetration testers, developers, and engineers how to analyse Android applications for security vulnerabilities. The course covers the different phases of testing, including dynamic testing, static analysis and reverse engineering. We will also explore how you can use the Model Context Protocol (MCP) to automate some of these workflows and leverage its strengths.
The course is based on the OWASP Mobile Application Security Testing Guide (MASTG) and taught by one of the project co-leaders. This comprehensive, open-source mobile security testing book covers both Android, providing a methodology and detailed technical test cases to ensure completeness and utilizes the latest attack techniques against mobile applications. This course provides hands-on experience with open-source tools and advanced methodologies, guiding you through real-world scenarios.Day 2 - Agenda🕑: 09:00 AM - 01:00 PMIntroductory - Secure Coding for LLM ApplicationsHost: Fabio CerulloInfo: AI-driven applications are rapidly transforming products, developer workflows, and customer experiences.
But these systems introduce unique security risks that traditional AppSec practices don’t address.
This 1.5 days hands-on course teaches developers, AppSec engineers, and architects how to design and build secure AI/LLM applications. Participants learn to defend against prompt injection, insecure output handling, model poisoning, data leakage, and other risks from the updated OWASP Top 10 for LLM Applications 2025.
Through labs and real-world case studies, attendees gain practical skills for deploying safe, trustworthy, and compliant AI capabilities at scale.
Course Outline
Part I: Foundations of AI and LLM Security
Part II: Threat Modeling and Architecture Threat Modeling for LLM Systems
RAG Security: Retrieval, Embeddings, and Index Integrity Agent and Tool Security
Part III: The OWASP Top 10 for LLM Applications 2025
Part IV: Secure AI/LLM Design and Governance🕑: 09:00 AM - 01:00 PMIntermediate - AI-Powered Threat ModelingHost: Marco MoranaInfo: Traditional threat modeling frameworks such as STRIDE and PASTA remain essential to secure design, but modern cloud-native architectures, distributed systems, and fast development cycles require more scalable and consistent analysis than manual approaches can offer. This session introduces an AI-augmented approach to threat modeling that leverages Large Language Models (LLMs) such as ChatGPT and domain-specific tools like StrideGPT to accelerate the threat modeling lifecycle while preserving expert judgment.
Drawing from the AI-Powered Threat Modeling eBook and an accompanying 8-module online course, the presentation demonstrates how generative AI can support system decomposition, automatically generate threat scenarios from architectural descriptions and DFDs, assist risk-based prioritization using CVEs and telemetry, and streamline documentation into standardized, repeatable outputs, with a focus on proper data preparation and preprocessing.
- **Event URL**: https://allevents.in/cagliari/owasp-appsec-italy-2026-trainings/100001981026107415
- **Event Categories**: Workshops, Art, fine-arts
- **Interested Audience**: 
  - total_interested_count: 0

## Ticket Details

- **Ticket URL**: https://consumer.pxf.io/c/1339408/3151484/39691?partnerpropertyid=1191892&MediaPartnerPropertyId=1191892&svlink=14105511&level=1&u=https%3A%2F%2Fwww.eventbrite.com%2Fe%2Fowasp-appsec-italy-2026-trainings-tickets-1981026107415
- **Ticket Price Range**: min: 850, max: 1200, currency: EUR

## Event venue details

- **city**: Cagliari
- **state**: SA
- **country**: Italy
- **location**: Hotel Regina Margherita
- **lat**: 39.2140904
- **long**: 9.116369299999999
- **full address**: Hotel Regina Margherita, 44 Viale Regina Margherita, Cagliari, Italy

## Event Organizer details

- **affiliate_id**: 10
- **organizer**: OWASP Italy (https://allevents.in/org/owasp-italy/27503647)

## Event gallery

- **Alt text**: banner
  - **Image URL**: https://cdn-az.allevents.in/events3/banners/2b78c4c6ac95973223351195da1760f62ae0569f3e0e19272ec2262504465258-rimg-w1200-h800-dc2c2c30-gmir.jpg?v=1771827881
- **Alt text**: thumbnail
  - **Image URL**: https://cdn-az.allevents.in/events3/banners/55e5a49db87d819b6379394a0903cd5a3fd88a45dbcd2910c7224cda1da299fd-rimg-w400-h400-dc2d2d30-gmir.jpg?v=1771827880

## FAQs

- **Q**: When is the event happening?
  - **A:** Wed, 17 Jun, 2026 at 09:00 am (+02:00)
- **Q**: Where is the event happening?
  - **A:** Hotel Regina Margherita, 44 Viale Regina Margherita, Cagliari, Italy
- **Q**: What is the ticket price?
  - **A:** starting from 850 up to 1200 EUR
- **Q**: Who is organizing the event?
  - **A:** OWASP Italy
- **Q**: What type of event is this?
  - **A:** Workshops, Art, fine-arts
- **Q**: Where can I find ticket details about OWASP AppSec Italy 2026 - Trainings ?
  - **A:** You can find ticket details about this event on AllEvents.

## Structured Data (JSON-LD)

```json
[
    {
        "@context": "https://schema.org",
        "@type": "Event",
        "name": "OWASP AppSec Italy 2026 - Trainings",
        "image": "https://cdn-az.allevents.in/events3/banners/2b78c4c6ac95973223351195da1760f62ae0569f3e0e19272ec2262504465258-rimg-w1200-h800-dc2c2c30-gmir.jpg?v=1771827881",
        "startDate": "2026-06-17T09:00:00+02:00",
        "endDate": "2026-06-17T18:00:00+02:00",
        "url": "https://allevents.in/cagliari/owasp-appsec-italy-2026-trainings/100001981026107415",
        "eventStatus": "https://schema.org/EventScheduled",
        "location": {
            "@type": "Place",
            "name": "Hotel Regina Margherita",
            "address": {
                "@type": "PostalAddress",
                "streetAddress": "44 Viale Regina Margherita",
                "postalCode": "09124",
                "addressLocality": "Cagliari",
                "addressRegion": "SA",
                "addressCountry": "IT"
            },
            "geo": {
                "@type": "GeoCoordinates",
                "latitude": "39.2140904",
                "longitude": "9.116369299999999"
            }
        },
        "eventAttendanceMode": "https://schema.org/OfflineEventAttendanceMode",
        "description": "OWASP Italy Day 2026 will take place on June 17th-18th, 2026, in Cagliari, Sardinia (Italy).",
        "offers": [
            {
                "@type": "AggregateOffer",
                "availability": "https://schema.org/InStock",
                "priceCurrency": "EUR",
                "availabilityStarts": "2026-02-23",
                "availabilityEnds": "2026-06-17T18:00:00+02:00",
                "validFrom": "2026-02-23",
                "lowPrice": "850.00",
                "highPrice": "1200.00",
                "price": "850.00",
                "url": "https://allevents.in/cagliari/owasp-appsec-italy-2026-trainings/100001981026107415"
            },
            {
                "@type": "Offer",
                "availability": "https://schema.org/InStock",
                "priceCurrency": "EUR",
                "availabilityStarts": "2026-02-23",
                "availabilityEnds": "",
                "validFrom": "2026-02-23",
                "url": "https://allevents.in/cagliari/owasp-appsec-italy-2026-trainings/100001981026107415",
                "price": "1200.00",
                "name": "Introductory - Secure Coding for LLM Applications"
            },
            {
                "@type": "Offer",
                "availability": "https://schema.org/InStock",
                "priceCurrency": "EUR",
                "availabilityStarts": "2026-02-23",
                "availabilityEnds": "",
                "validFrom": "2026-02-23",
                "url": "https://allevents.in/cagliari/owasp-appsec-italy-2026-trainings/100001981026107415",
                "price": "850.00",
                "name": "Introductory - AI Security Training"
            },
            {
                "@type": "Offer",
                "availability": "https://schema.org/InStock",
                "priceCurrency": "EUR",
                "availabilityStarts": "2026-02-23",
                "availabilityEnds": "",
                "validFrom": "2026-02-23",
                "url": "https://allevents.in/cagliari/owasp-appsec-italy-2026-trainings/100001981026107415",
                "price": "850.00",
                "name": "Advanced - The Mobile Playbook - Android AppSec"
            },
            {
                "@type": "Offer",
                "availability": "https://schema.org/InStock",
                "priceCurrency": "EUR",
                "availabilityStarts": "2026-02-23",
                "availabilityEnds": "",
                "validFrom": "2026-02-23",
                "url": "https://allevents.in/cagliari/owasp-appsec-italy-2026-trainings/100001981026107415",
                "price": "855.95",
                "name": "Intermediate - Secure AI Agent Swarm"
            },
            {
                "@type": "Offer",
                "availability": "https://schema.org/InStock",
                "priceCurrency": "EUR",
                "availabilityStarts": "2026-02-23",
                "availabilityEnds": "",
                "validFrom": "2026-02-23",
                "url": "https://allevents.in/cagliari/owasp-appsec-italy-2026-trainings/100001981026107415",
                "price": "1200.00",
                "name": "Intermediate - AI-Powered Threat Modeling"
            }
        ],
        "organizer": [
            {
                "@type": "Organization",
                "name": "OWASP Italy",
                "url": "https://allevents.in/org/owasp-italy/27503647",
                "description": "TheOWASP® Foundationworks to improve the security of software through its community-led open source software projects, hundreds of chapters worldwide, tens of thousands of members, and by hosting local and global conferences.As OWASP Italy Chapter we aim to regularly organize the following activities:One annual conference, the OWASP Italy DayThree virtual OWASP Italy Meetups (over Zoom)How can you help?If you would like to speak at the OWASP Italy Day, keep an eye on open calls for speakers before the event or contact the leaders for informal inquiriesIf you would like to organize or be involved in a meetup, contact the leaders to applyAttend the events:The success of the events depends upon you!Spread the word:Reaching out for more people who may be interested in our activitiesKeep in touch:Join our community on Slack and LinkedInWebsitehttps://owasp.org/www-chapter-italy/"
            }
        ]
    }
]
```