

What we’re about
The OWASP LA (Los Angeles) chapter (https://owasp.org/www-chapter-los-angeles/) was formed in 2008. We hold meetings on the 4th Wednesday of every month, featuring great speakers on important appsec topics. Join us for food, drinks, to network and understand what application security is really about.
The Open Worldwide Application Security Project (OWASP) is a not-for-profit, organization focused on improving the security of all software. Our mission is to improve software security through Open Source initiatives, community education, and networking. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license.
Become an OWASP Member TODAY
Support your LA Chapter: only $50 for the entire year! ($20 if you're a student)
Sponsors
See allTOPIC: Enhancing Open Source Tools Using AI: A "No Code" Journey to Build an Automated DefectDojo Parser Generator
Join us for great networking, dinner and drinks, and see a presentation by Tracy Walker, Principal Solution Architect, DefectDojo
ABSTRACT: See a live demonstration of using an AI LLM to accelerate the ability to adopt new, custom or unsupported security tools into DefectDojo, an open-source vulnerability management platform.
Through live examples, attendees will see a data transformation problem deconstructed into a series of repeatable prompts using an AI LLM to automatically generate 100% of parsing code, detailed documentation, and unit tests while maintaining code quality and existing best practices.
The demonstration:
- Highlights OWASP feature project DefectDojo,
- Is applicable to any open source tool or community, and
- Is accessible to security practitioners or engineers of all technical levels.
Thanks to our SPONSOR: DefectDojo
DevSecOps, ASPM, Vuln Management - All on one platform!
DefectDojo is the platform and product that enables scalable security through DevSecOps, integrates with 180+ security tools and counting, with a vibrant and active open source community. We also have a Pro Edition for those who are looking to achieve security automation and actionable insights with the smallest lift possible.
Thanks to our HOST: HiveWatch
Intelligent, efficient, and scalable security
HiveWatch is a cloud-based SaaS platform built for physical security teams to enhance their current security technologies. It streamlines incident response, allows for the consolidation of disparate programs and systems, and reduces false alarms.
CODE OF CONDUCT
We hope you enjoy the event, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback/concerns or would like to speak to us, we take these matters very seriously. You can find out more about our policies here:
https://owasp.org/www-policy/operational/conferences-events.html#conference-and-event-anti-harassment-policy
SPONSORSHIP Opportunities Available
Vendors interested in sponsoring please send an email to sponsorship.la@owasp.org
Upcoming events (4+)
See all- OWASP LA Monthly In-Person Meeting - Apr 23, 2025HiveWatch HQ, El Segundo, CA
TOPIC: Enhancing Open Source Tools Using AI: A "No Code" Journey to Build an Automated DefectDojo Parser Generator
Join us for great networking, dinner and drinks, and see a presentation by Tracy Walker, Principal Solution Architect, DefectDojoABSTRACT: See a live demonstration of using an AI LLM to accelerate the ability to adopt new, custom or unsupported security tools into DefectDojo, an open-source vulnerability management platform.
Through live examples, attendees will see a data transformation problem deconstructed into a series of repeatable prompts using an AI LLM to automatically generate 100% of parsing code, detailed documentation, and unit tests while maintaining code quality and existing best practices.
The demonstration:- Highlights OWASP feature project DefectDojo,
- Is applicable to any open source tool or community, and
- Is accessible to security practitioners or engineers of all technical levels.
Thanks to our SPONSOR: DefectDojo
DevSecOps, ASPM, Vuln Management - All on one platform!
DefectDojo is the platform and product that enables scalable security through DevSecOps, integrates with 180+ security tools and counting, with a vibrant and active open source community. We also have a Pro Edition for those who are looking to achieve security automation and actionable insights with the smallest lift possible.Thanks to our HOST: HiveWatch
Intelligent, efficient, and scalable security
HiveWatch is a cloud-based SaaS platform built for physical security teams to enhance their current security technologies. It streamlines incident response, allows for the consolidation of disparate programs and systems, and reduces false alarms.CODE OF CONDUCT
We hope you enjoy the event, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback/concerns or would like to speak to us, we take these matters very seriously. You can find out more about our policies here:
https://owasp.org/www-policy/operational/conferences-events.html#conference-and-event-anti-harassment-policySPONSORSHIP Opportunities Available
Vendors interested in sponsoring please send an email to sponsorship.la@owasp.org - Hands-on Workshop OWASP LA - May 28, 2025Need Location, Los Angeles, CA
TOPIC: Hands-on Application Security Workshop with Runtime Security IAST Technology and Secure Code Training
Join us for an action-packed hands-on workshop event led by Jeff Williams, Founder and CTO of Contrast Security.
Earn 2 hours of CPE credit!*ABSTRACT:
Together, we will...- Unify around a precise definition of a vulnerability, as well as understand the challenges current application testing methodologies have in detecting vulnerabilities, and how to change the way we interact with them
- Get hands-on-keyboard experience leveraging Contrast training to find a vulnerability in code, learn how to fix said vulnerability, and proactively go and remediate the vulnerability
Who should attend?
- AppSec professionals
- Security engineers
- Software engineers
- DevOps/DevSecOps professionals
- Anyone wanting to learn more about identifying and fixing code vulnerabilities, discover the most efficient ways to execute on a DevSecOps program, and become proactively more knowledgeable around secure coding techniques.
PLEASE NOTE - for the lab portion of this event, you must bring a laptop (phones or other personal devices will NOT work for the lab).
*This workshop qualifies for 2 hours of hands-on training for Continuing Professional Credits (CPE). For CISSP holders this would be in the Application Security Discipline and you will receive a certificate of completion after the workshop.Thanks to our SPONSOR: Contrast Security
Vendors interested in sponsoring please send an email to sponsorship.la@owasp.orgCODE OF CONDUCT
We hope you enjoy the event, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback/concerns or would like to speak to us, we take these matters very seriously. You can find out more about our policies here:
https://owasp.org/www-policy/operational/conferences-events.html#conference-and-event-anti-harassment-policy - LayerOne Security Conference - Pasadena, CAHilton Pasadena, Pasadena, CA
OWASP LA will be hosting a table at the LayerOne 2025 security conference coming up in May! Be sure to stop by and say hi! See you there.
The LayerOne 2025 Information Security Conference will take place on May 24-25, 2025 at the Pasadena Hilton Hotel!
EARLY BIRD registration for the event is OPEN (LAST DAY APR 30)!!!! Get your tickets on their registration page NOW! Early bird pricing is not discounted, so get in while the discounts last! Prices go up as we get closer to the conference.
Interested in sponsoring this year’s event, hosting a vendor booth in the main hall, or contributing an awesome contest or event to this year’s conference? Reach out to L1 team at contact@layerone.org and tell them what you’re interested in!
Join the Discord and come hang out with us! Make some new friends and catch up at https://discord.gg/layeroneconference.
More announcements to come over the following days and weeks!
Hope to see you all in May!