AI Security Workshop Lisbon

We're getting hands on. Bring your laptop.

This is a hands-on workshop, not a talk. You'll work on your own laptop, at your own pace, with our team on hand if you get stuck.

AI coding agents write code fast, and they write vulnerabilities just as fast. In this workshop you'll see what that looks like and how to stop it.

What you'll do

• Break it: Exploit a deliberately vulnerable app with SQL injection, a vulnerable dependency, and command injection.
• Fix it: Let Cursor and Snyk work together to find and fix the issues, then prove the attacks no longer work.
• Check new code: Have Snyk scan brand-new code that an AI agent just wrote.
• Secure your agent's inputs: Look at what your agent loads before it ever runs, meaning MCP servers and skills. Learn how tool poisoning and toxic flows work, then scan MCP servers and skills for problems without installing or running anything.

You'll leave with a repeatable workflow for securing agentic development, plus a short quiz to check what you've learned.

Everything runs in a disposable Docker container, so nothing touches your machine.

What to bring

• A laptop with Docker running, Node.js 18+, and git
• A free Cursor account
• A free Snyk account with an API token

We'll share a quick preflight check before the event so you can arrive ready.

Schedule

• 18:00 Doors open
• 18:30 Workshop starts
• 20:30 End

Where: Central Lisbon. The exact venue will be shared with registered attendees soon.