OWASP Boston Chapter Meeting - June 2025

We kick off this year's OWASP Chapter meetings! This month we will be welcoming Nate Michalov, a seasoned application security professional, to our meetup. Doors open at 6:30pm and the presentation starts at 7pm. Pizza and soda will be provided.

In this session Nate will be talking about Evolving Your AppSec Program in the Era of AI .

AI is already transforming how software is built—but for security teams, it’s mostly just making life harder. Developers are shipping AI-generated code at breakneck speed, while security teams struggle to keep up. The challenge isn’t just securing AI-generated code and systems—it’s evolving your AppSec program to keep pace with software development.We'll explore how security teams can evolve their programs across two key dimensions: securing AI-driven software development and using AI to enhance security workflows. You’ll learn:

• Strategies for managing risks from AI-generated code and autonomous agents
• How security teams can use AI to reduce work and improve security outcomes
• Where AI can enhance security—and where human expertise remains irreplaceable.

AI isn’t just a security challenge; it’s a chance to build a smarter, more efficient security program. Join us to learn how to make AI work for security, not against it.

Nate Michalov is a seasoned application security professional with over 12 years of diverse experience. Throughout his career, Nate has contributed to organizations such as Endor Labs, Apiiro, Snyk, Veracode, and Annkissam, where he has focused on securing digital ecosystems while aligning technological strategies with business objectives. In various roles including customer success architect, senior sales engineer, and senior SAST specialist, Nate has consistently tackled complex challenges at the intersection of business and technology. Known for his collaborative approach and dedication to staying informed about emerging trends, Nate is recognized as a trusted advisor in promoting innovation and resilience in application security.