At our event, experts from various fields and industries will speak on the different aspects of application security and AI-powered software development.
Marek Stiefenhofer -accompaniment
Companies believe security is controllable. This keynote questions this assumption: AI fundamentally shifts the boundaries between knowledge, implementation, and protection.
Using concrete examples, the presentation shows how vulnerabilities are created and exploited in minutes rather than months, why defenders currently still have a temporary AI advantage – and why Intellectual Property is increasingly eroding as a business model.
Finally, the session delivers three clear imperatives for action: consistently live „Assume Breach,“ leverage the current AI defence window, and shift the competitive advantage from knowledge to speed of execution.
Stanislav Bajer - Deutsche Börse Group (Lecture in English)
What does it actually take to bring an Agentic AI system from proof-of-concept into production within a highly-regulated financial institution? In this session, Stanislav shares hands-on engineering experience from Deutsche Börse Group's Security IT department, where his team is building an Agentic AI solution that supports security operations across a growing number of technologies.
Starting with how the team validated use cases and navigated the regulatory process for getting agents into production, the talk delves into the technical reality: integrating with a central AI gateway, building support for diverse security technologies, and the surprises encountered during the first production deployment, despite months of intensive testing. Stanislav will walk through how the system performs today in read-only mode, how the team is introducing human-in-the-loop approval to allow agents to take action, and what the architecture looks like that will enable the system to scale from three to more than ten supported security technologies.
A practical, engineering-focused perspective on building AI applications in an environment where getting it right really matters.
Norbert Roestel - Deutsche Börse Group
Two releases a year, then CI/CD, now AI-powered development. With each step, the way code is created at Deutsche Börse Group has fundamentally changed, and the pace continues to increase: more code in less time, faster cycles, new code patterns, and altered risk profiles. The requirements for the security of this code have never diminished.
Each new development method brings its own requirements for code analysis: more scans per week, highly varied runtimes, and bottlenecks that didn't exist a few years ago. OpenText's Fortify SAST solution has been the backbone of application security at Deutsche Börse Group for over ten years and has had to keep pace with new release cycles time and again during this period.
In this presentation, you will learn how Norbert Röstel and his team consistently developed the infrastructure further. Instead of relying on gut feeling, they systematically measured: scan volumes, runtime distributions, bottlenecks. From these insights, concrete measures emerged, such as their own „fast lane" for short scans, so that AI-driven development cycles don't have to wait for lengthy analyses. What resulted are real figures, honest insights, and solutions that are reliably running in production today.
Jan Wienand - OpenText
AI is making software development faster and cheaper than ever before. Coding assistants and vibe-coding tools enable more code to be produced in a very short time, often without in-depth security know-how in the background. The amount of code that needs to be reviewed is therefore growing faster than the teams that can handle it. Anyone who doesn't scale here loses out.
At the same time, integrating AI into your own applications brings with it a new category of vulnerabilities. Prompt injection, insecure plugin architectures, uncontrolled data access: The OWASP Top 10 for Large Language Models shows that AI-powered applications create attack surfaces that traditional security methods do not cover.
Jan Wienand shines a light on both sides of the coin: the new risks AI introduces to the daily development routine, and how OpenText uses AI to make Fortify, OpenText's application security solution, more effective. From automatic triage and remediation of SAST findings, through MCP integration and ready-made skills for faster onboarding, to AI-powered dynamic testing: AppSec that keeps pace with the speed of modern development.
