OWASP

A decade. Hundreds of conversations, ideas, and inspirations. And we're celebrating with a meetup that truly delivers. Three exceptional speakers, topics that matter, and plenty of room for what has made this meetup special for 10 years: real people, real conversations, real networking. **The Evening at a Glance** 17:30 Doors open, first drinks, familiar faces and new ones 18:00 Welcome and a brief look back at 10 years of DevOps Meetup Zurich 18:15–18:45 **Claws in the Dark: Bringing DevSecOps to Legacy Hardware with Robotics and Playwright** by Alexander Friesen 18:45–19:15 **Beyond Agile: Structuring Organizations for Real Autonomy** by Lea Düker 19:15–19:25 Short break 19:25–19:55 **From Bottlenecks to Flow: OKRs, Value Stream Management, and Governance Done Right** by Vasileios Konofaos 19:55–20:15 Panel discussion with all three speakers 20:15 Networking, Open Space, snacks, drinks, and anniversary cake 🎂 **Claws in the Dark: Bringing DevSecOps to Legacy Hardware with Robotics and Playwright** What do you do when your software’s "deployment target" is a piece of security hardware embedded in a concrete wall for 20 years? In the world of access control, we don't have the luxury of "move fast and break things"—if the integration fails, the door stays locked. For decades, hardware development at Primion relied on manual bit-shifting, incomplete specifications, and the "read, write, and pray" method. When the pandemic decentralized our R&D department—scattering 60 developers across Europe—the traditional model of physical bench testing collapsed. We couldn't send a lab to everyone’s home, so we brought the developers to the lab through robotics. In this session, we deep-dive into how we bridged the physical-digital divide by building a fully automated hardware-in-the-loop (HIL) testing farm. We will explore: * The Architecture: How we orchestrate GitLab CI, Azure ephemeral environments, and Playwright to drive physical interactions. * The Hardware Hack: How a 200 CHF robotic claw replaced manual testing, allowing developers to "touch" hardware from anywhere in the world. * The Shift-Left Strategy: Moving from "praying for compatibility" to robust integration testing that catches bit-level errors before they ever hit the factory floor. * Scaling on a Budget: How a single working student scaled our setup to 20+ (and rising) automated test cells. Join us to see how "claws moving in the dark" turned hardware debugging from a nightmare into a breeze, and learn how to apply DevSecOps principles to the most stubborn, physical environments. **Alexander Friesen** Aexander is a **Lead IT Architect** with over a decade of experience in software architecture and technical leadership. He specializes in building and scaling modern ecosystems for major enterprises like **Swisscard** and **Siemens**. DevOps & Platform Engineering Highlights * **Platform Leadership:** Directed technical strategy for Siemens’ IoT flagship "BuildingX" and managed multi-million dollar budgets for large-scale SAFe trains. * **Automation & Compliance:** Expert in **DevSecOps**, achieving ISO27000 compliance through automated CI/CD pipelines and security scanning. * **Efficiency Gains:** Improved software team productivity by **30%** through the implementation of AI Ops and Internal Developer Platforms. * **Cloud Native Stack:** Certified **AWS Architect** with deep expertise in Kubernetes, Terraform, Serverless, and **Data Mesh** architectures. * **Global Teams:** Proven track record of leading cross-functional engineering teams across Switzerland, Germany, the USA, and India. **Beyond Agile: Structuring Organizations for Real Autonomy** Many organizations invest in agile methods, DevOps, and new technologies, and yet the desired impact on collaboration, accountability, and decision-making often fails to materialize. A key lever for change lies in how organizations are structured. This talk provides an introduction to Holacracy as a model for radical self-organization and places it within the broader landscape of organizational development. It explains what defines Holacracy, the principles behind it, and the problems it aims to address. The focus, however, is not solely on the organizational model. The talk also presents concrete tools and practices of self-organization, such as clear role definitions, structured decision-making processes, and transparent governance, that can be applied regardless of the organizational structure in place. **Lea Düker** * Since 2024: IT Project Manager and Scrum Master at digital agency Unic AG * 2021–2024: Project Manager and Deputy Head of IT at the Building Department of the City of Zurich * 2018–2021: Consultant for Process Management at Join GmbH * 2016–2018: Master's degree in Business Management with a specialization in Process Management **From Bottlenecks to Flow: OKRs, Value Stream Management, and Governance Done Right** In our session, we'll be delving into the advanced flow engineering practices we've implemented at KPMG CH for our Cloud Platform. These methods have truly transformed how we deliver outcomes—faster, safer, and with an even greater level of satisfaction. During the session, we'll take a closer look at how we leverage OKRs to align teams and drive strategic goals, and how Value Stream Management helps us optimize workflow and eliminate bottlenecks. Our robust Governance model will also be discussed, highlighting how we maintain compliance without sacrificing agility. Beyond sharing the technical details, we'll reflect on the lessons learned and valuable insights we've gained throughout our journey. Our goal is to provide actionable takeaways that will benefit the DevOps community and inspire organizations seeking to enhance their delivery pipelines and nurture a culture of continuous improvement. **Vasileios Konofaos** Head of Business Services CH Group Digital Vasileios Konofaos is a seasoned technology leader with more than 20 years of experience driving large‑scale software engineering, cloud infrastructure, and digital transformation initiatives. As Director of Business Services CH Group Digital at KPMG Switzerland, he leads high‑impact programs that advance innovation, operational excellence, and AI‑enabled capabilities across the organization. His career spans senior roles in global financial institutions and consulting firms, where he has successfully delivered complex projects in software development, automation, DevOps, and machine learning. Certified in Azure, ITIL, PMP, PRINCE2, and Scrum, Vasileios is recognized for his strategic mindset, strong leadership, and ability to empower teams to achieve exceptional results. He brings deep expertise in systems analysis, project delivery, and process improvement, consistently enabling organizations to scale technology solutions with quality and precision. Many thanks to our **sponsors**: * Catering and Location Sponsor: **KPMG** https://kpmg.com/

Map the World, Change the World. Join Our Mapathon! Got a laptop? Ready to make a difference? 💥 We're on a mission to create life-saving maps for disaster response, and we need YOU. No experience? No problem. Whether you're a mapping newbie or an OpenStreetMap Pro, you'll learn, collaborate, and help create maps that matter. What to bring? Your laptop (mouse = bonus points!) Why join? Learn cool mapping skills Make a real impact in crisis zones Meet like-minded change-makers Ready to map for good? Let’s do this.

As it is sometimes difficult in Switzerland to practice high german, in 2010 we decided to organize a conversation group that is free to everyone who wants to practice german and socialize. WhatsApp group for easier contact: https://chat.whatsapp.com/KmMkpiQxs291vTPv2RBNm4

**WALK THE TALK** Zurich Toastmasters is the place to be if you want to improve your public speaking, communication, and leadership skills. **Walk the Talk** offers a friendly and inspirational environment for all levels of public speaking experience. Guests and new members are always welcome! A typical meeting includes 1–3 prepared speeches by members, evaluations of the speeches, and Table Topics – impromptu speaking. This meeting is Hybrid. "You can speak well if your tongue can deliver the message of your heart." John Ford DISCLAIMER: We may take pictures/videos of our events and share them online or on social media. If you do not wish to be in the pictures, please let us know before the meeting starts. We will do our best to respect your wishes.

**[Tickets here on Eventfrog](https://eventfrog.ch/jackpotcomedy)** **Down on your luck?** Perfect. Comedy works best on people with low expectations. At **Jackpot Comedy**, comedians test brand-new jokes alongside the ones that actually work. Some hit the jackpot, some crash out spectacularly. Either way, you win, because it’s funnier when anything can happen. Expect a proper underground comedy night, close to the stage, real crowd energy, and comics who are risking their dignity for your entertainment. Hosted by **[Jack Roberts](https://www.instagram.com/jackrobertscomedy/)**, a man who has invested his long-term financial stability entirely into making strangers laugh. We’re downstairs at **Bar OTRO,** just off Langstrasse, the ideal location for high-risk decisions you’ll be glad you made the next morning. No dress code. No awkward theatre seating. Just drinks, friends, and a very high probability of laughing harder than you planned. Roll the dice. Bring someone you like. Or someone you’re unsure about, this is an excellent test. **[Tickets here on Eventfrog](https://eventfrog.ch/jackpotcomedy)** **SHOW BEGINS AT 20:00 (Doors at 19:00)**

**[⚠️>>Ticket needed (click here)<<](https://eventfrog.ch/en/p/sport-fitness/yoga/yoga-sound-healing-7437531987315800493.html) or** **[www.social-circle.ch](http://www.social-circle.ch/)** 🌿 **Social Circle Yin Yoga & Soundbath – Reset & Reconnect** 🌿 Join the Social Circle community for a deeply restorative evening designed to help you slow down, reset, and reconnect — with yourself and with others. 💖✨ 📲 Join our WhatsApp chat to keep up with the event: [https://chat.whatsapp.com/EsTccDt6vB2A8z3OXbPUbW](https://chat.whatsapp.com/EsTccDt6vB2A8z3OXbPUbW) (if you run into trouble open it in WhatsApp Web on your desktop) We’ll begin with a gentle **Yin Yoga practice**, featuring long-held, calming postures that release tension and soothe the nervous system. No rush, no pressure — just space to arrive and soften. 🧘‍♀️ As you rest into stillness, you’ll be immersed in the healing vibrations of a **soundbath** with crystal and Tibetan bowls. The sounds will guide you into a meditative state, helping you drop out of your head and into your body. 🎶 After the workshop we will go in a cafe for a drink to relax and socialize. This combination of Yin Yoga and sound healing is perfect if you’re looking to: 🌸 unwind after a busy week 🌸 calm your nervous system 🌸 reconnect with yourself in a warm, welcoming group setting **What to bring:** – Comfortable, loose clothing – A bottle of water Come as you are. Leave feeling grounded, relaxed, and gently connected. 🌙💫 We’re looking forward to creating a calm and supportive space together as part of Social Circle. ​📸 Photos and short videos may be taken during the event. Let the host know if you prefer not to be in them. Tickets are non refundable. Want more events like this? Join our community! [https://chat.whatsapp.com/DaGFCvKs6iu62pftk5cotM](https://chat.whatsapp.com/DaGFCvKs6iu62pftk5cotM)

**_DE_** (_EN below_): Wir, Peter und Patrick, sind zwei Physiotherapeuten mit einer Leidenschaft für Sport und Bewegung. Bei unserem **Gruppenfitness Training** trainierst du gemeinsam mit anderen, das motiviert, macht Spaß und hilft, dranzubleiben. Wir kombinieren Kraft, Ausdauer, Beweglichkeit und funktionelle Übungen, passend für alle Fitnesslevels. **Wichtig:** Bitte kommt in bequemer Sportkleidung. Wer nicht direkt auf dem Boden trainieren möchte, bringt gerne eine Matte mit. Du kannst an einem kostenlosen Probetraining teilnehmen. Danach besteht die Möglichkeit, ein Trainingsabo zu lösen: • 5 Trainings: 160 CHF • 10 Trainings: 280 CHF • 20 Trainings: 490 CHF Werde Teil unserer aktiven Community und erlebe, wie viel Energie Gruppentraining geben kann! **_EN_** We, Peter and Patrick, are two physiotherapists with a passion for sports and movement. In our **group fitness sessions**, you train together with others! it’s motivating, fun, and helps you stay consistent. We combine strength, endurance, mobility, and functional exercises, suitable for all fitness levels. **Important:** Please wear comfortable sports clothing. If you prefer not to train directly on the ground, feel free to bring a mat. You can join a free trial session. After that, you have the option to choose a training package: • 5 sessions: CHF 160 • 10 sessions: CHF 280 • 20 sessions: CHF 490 Become part of our active community and experience how energizing group training can be!

We are excited to invite you to join our cyber security breakfast where we share our knowledge and experience in the constantly evolving field of cybersecurity.

Workshop-Details Wo: Zürich Hauptbahnhof Meeting Point (Big Clock) Zeit: 19:30 – 22:15 Uhr Was du lernen wirst – Fotografieren bei wenig Licht – Echte und ungestellte Augenblicke des Nachtlebens festhalten – Die Schönheit der Schwarzweiss-Strassenfotografie entdecken (natürlich kannst du auch in Farbe fotografieren!) Wir beginnen den Abend mit einem Drink in einem nahegelegenen Café — natürlich auf meine Einladung! Dies ist die perfekte Gelegenheit, sich kennenzulernen, Erwartungen auszutauschen und individuelle Wünsche für den Workshop zu besprechen. Deine Teilnahme kostet 150 CHF. Bitte melde dich direkt über meine Website an und sichere dir deinen Platz: www.katjabouwman.com/workshops Erst nach Zahlungseingang ist dein Platz gesichert! Workshop Details Where: Zurich Hauptbahnhof Meeting Point Time: 7:30 — 10:15 PM What you’ll Learn – Shooting in low light – Capturing candid nightlife moments with confidence – Exploring the beauty of black and white street photography (of course, you can shoot in color too!) We’ll kick off the evening with a quick drink at a nearby café — my treat! This is a great chance to get to know each other, share expectations and discuss any specific wishes you might have for the workshop. Your participation costs 150 CHF. Please register directly through my website to secure your spot: www.katjabouwman.com/workshops More info on www.katjabouwman.com/workshops or visit my Instagram account katja_zuerich

We are excited to invite you to join our cyber security breakfast where we share our knowledge and experience in the constantly evolving field of cybersecurity.

Bei der Strassenfotografie geht es darum, ganz präsent zu sein und die kleine Momente wahrzunehmen, die kraftvolle Geschichten erzählen. Ich zeige dir, wie du mit einem neuen Blick die Magie des Alltäglichen einfängst. Dabei teile ich wertvolle Tipps zur kreativen Bildkomposition und den besten Kameraeinstellungen für Strassenfotografie und eindrucksvolle ICM-Aufnahmen. Am wichtigsten ist jedoch, dass wir gemeinsam die Freude daran entdecken, das Gewöhnliche durch die Objektive unserer Kameras in etwas Aussergewöhnliches zu verwandeln. Workshop-Details Wo: Zürich Escher Wyss Platz Zeit: 10:00 – 13:00 Uhr Was du lernen wirst * Lerne, wie du natürliches Licht und Schatten meisterhaft einsetzt, um ausdrucksstarke Schwarzweiss-Bilder zu gestalten. * Echte und ungestellte Momente auf der Strasse mit Selbstvertrauen festhalten * ICM (Intentional Camera Movement), eine kreative Technik, die absichtliche Kamerabewegungen mit einer langen Verschlusszeit kombiniert, um abstrakte, malerische Bilder zu schaffen * Die Schönheit der Schwarzweiss-Strassenfotografie entdecken Deine Teilnahme kostet 150 CHF. Bitte melde dich direkt über meine Website an und sichere dir deinen Platz: www.katjabouwman.com/workshops Erst nach Zahlungseingang ist dein Platz gesichert! Workshop Details Where: Zurich Escher Wyss Platz Time: 10:00 — 13:00 AM What you’ll Learn * Master how to use natural light and shadow to create striking black and white images * Capture candid street moments with confidence * Embrace ICM (Intentional Camera Movement), a creative technique that combines deliberate camera movement with a slow shutter speed to create abstract, painterly images * Discover the timeless beauty of black and white street photography Your participation costs 150 CHF. Please register directly through my website to secure your spot: www.katjabouwman.com/workshops More info on www.katjabouwman.com/workshops or Visit my Instagram account katja_zuerich

It all sounded straight forward. Then the project started... Join us for an informal evening with fellow Agile practitioners, Scrum Masters, project managers, coaches, and anyone working with change, delivery, or transformation. We’ll meet at a local pizzeria, have some good food, and talk about the things that usually come up once the theory meets reality — challenges, lessons learned, different approaches, and questions we’re still figuring out. Nothing formal, just a chance to exchange ideas, meet people from the community, and have interesting conversations. Because some of the best discussions don’t happen in meeting rooms. They happen in the second floor private room of a pizzeria. 🍕 **The venue:** Da Raffaele brings a slice of Naples to the heart of Zürich's Altstadt. Think 48-hour dough, a 500°C wood-fired oven, and an amazing pizza. Two minutes from Central, close to HB — easy for everyone coming from across the city or the S-Bahn.

Open Sharing Circle ✨ Dieser Circle findet auf Deutsch statt. Wir kommen zusammen, um im Moment präsent zu sein und uns so zu zeigen, wie wir wirklich sind. Die Intention ist, in einem sicheren und vertrauensvollen Raum zu teilen — Gedanken, Emotionen, Ziele, Meinungen — alles, was sich für dich im Moment lebendig anfühlt. Niemand muss etwas teilen, und jede\*r ist willkommen. ⸻ Worum geht es? • Stärkung von Selbstwahrnehmung & Selbstvertrauen • Persönliches Wachstum • Aufbau tiefer Beziehungen & Vertrauen • Menschen auf einer echten, menschlichen Ebene kennenlernen • Sich frei fühlen, sich authentisch auszudrücken ⸻ Circle-Vereinbarungen Frei & freiwillig Du darfst alles teilen, was du möchtest — und musst nichts teilen. Sprich aus deiner eigenen Erfahrung Teile aus deiner persönlichen Perspektive: deine Erfahrungen, Gedanken, Gefühle und Wahrnehmungen. Der Raumhalter kann dich dabei sanft unterstützen, indem er als Zeichen eine Hand auf die Brust legt. Respekt & Vertraulichkeit Wir begegnen uns respektvoll und ohne zu urteilen. Was im Circle geteilt wird, bleibt im Circle. Rede-Objekt Nur die Person, die das Rede-Objekt hält, spricht. Verständnisfragen sind willkommen. Redezeit & Raum teilen Nimm dir Zeit beim Teilen und lass gleichzeitig Raum für andere. Ratschläge & Unterstützung Sprich für dich selbst und gib Ratschläge nur mit Einverständnis. Bitte frage ausdrücklich nach, wenn du Ratschläge oder Unterstützung möchtest. Trigger & Emotionen Jede\*r ist für die eigenen Gefühle und Themen selbst verantwortlich. Starke Emotionen (z. B. Weinen) sind willkommen und werden respektiert. Unterstützung wird nur angeboten, wenn sie gewünscht ist. Eigene Bedürfnisse Kümmere dich selbst um deine Bedürfnisse (WC, Essen usw.) und respektiere den Gruppenraum. Raumhalter Das Organisationsteam wählt Raumhalter, die den Ablauf des Circles unterstützen und darauf achten, dass die Vereinbarungen eingehalten werden. Der Circle kann bei Bedarf sanft unterbrochen werden. Fokusrunde Der Raumhalter kann intuitiv eine kurze Fokusrunde initiieren, wenn es unterstützend wirkt. Mobiltelefone Bitte schalte dein Handy auf lautlos und nutze es nur für Notizen, falls nötig. Zeit Dauer: ca. 3 Stunden. Du kannst jederzeit gehen, idealerweise während der Pausen (etwa alle 45 Minuten). Nach dem Circle gibt es Raum, um zu bleiben, sich zu verbinden oder weiter zu teilen, wenn du magst. Teilnahme CHF 5 Basisbeitrag + freiwillige Kollekte. Damit unterstützt ihr Raummiete, Organisation und ermöglicht es uns, den Sharing Circle möglichst vielen Menschen zugänglich zu machen. Bezahlung: Bar vor Ort oder per Twint an +41 79 123 16 74.

Apéro Mensuel

The Fellowship of the Star Schema: Transforming OLTP Data for Power BI One does not simply build reports on OLTP data. Join us on an epic journey from the depths of raw, normalized tables to the shining halls of a well-modeled star schema fit for Power BI greatness. We will demystify the differences between OLTP and OLAP, walk through star schema vs snowflake (and why Power BI has a clear favorite), and show you the compression differences between normalized and columnar storage that will make you never look at an OLTP model the same way again. We will cover the different types of dimensions, when to use them, and how to handle Slowly Changing Dimensions without losing your mind. You will leave knowing exactly how to identify a bad model, how to convert OLTP data into a clean star schema, and how to forge relationships that rule them all. Whether you are a data wizard, a curious hobbit, or somewhere in between, your models will never be the same.

Bring your Raspberry Pi, Arduino, microcontroller, or any other electronic project and join fellow electronics makers for a night of creativity and collaboration! This session is open forum to share your current projects—whether complete or in progress, it’s all interesting! Whether you’re deep into embedded systems, exploring new ideas, or just getting started, you’ll find a welcoming space to collaborate, share, and get inspired. **New to electronics or curious about tinkering?** You’re absolutely welcome. If you’re a beginner and want to experiment, I’ll have a couple of starter kits available so you can try things out—whether that’s blinking your first LED, putting something on a display, or experimenting with simple sensors. No pressure and no experience required—just an interest in learning and building. While we continue to pursue a more permanent venue for this Meetup, we’ll be using public library facilities based on availability. This session will be at the Worthington Park Library in the Olentangy Meeting Room.

Our monthly PHP meetup. A virtual shindig courtesy of Zoom. Check back here for the details around 6:15 pm

**About this Event** Curious how your secure coding skills stack up in real-world scenarios? Join OWASP St. Louis for a **hands-on Secure Code Training Tournament** sponsored by Security Journey. This is not a lecture... you’ll be actively solving real vulnerabilities in a live, interactive environment. **What to Expect** * Hands-on secure coding challenges (break/fix format) * Real-world vulnerability scenarios developers face today * Friendly competition with a live leaderboard * Prizes awarded to the **top 3 participants** **Important Details** * **Laptop required** (you’ll be coding) * Hybrid format: join **in-person or remotely** * Pre-registration required to access the platform * You do not need to be an experienced developer or security expert to participate. The challenges start easy and progress from there. Come have fun! In addition to RSVPing to this Meetup event, please register here to secure your spot and get platform access: [https://forms.office.com/r/VpTMjg8Smw](https://forms.office.com/r/VpTMjg8Smw) Whether you're a developer, AppSec professional, or just getting started, this session is built to sharpen real skills! (\* OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security) **Event Details** 📍 **Location:** RubinBrown, 7676 Forsyth Blvd., Suite 2100, Saint Louis, MO 63105 🗓 **Date/Time:** April 28, 2026 / 6:00pm CST **Food and Drink will be provided!** Please RSVP so that we can plan accordingly. ℹ️ **Parking Directions:** * Google map to “North Lyle Avenue & Forsyth Boulevard, Clayton, MO 63105” Link: https://maps.app.goo.gl/WYqyZ3Jv9cUBBF289 * Enter the **Parking Garage #4** (from Forsyth Blvd) next to Dry Bar * **Pull a ticket at the gate** and proceed into the garage, turning right. * Up the ramp is visitor parking. **You may have to go up past the 6th floor.** * **Take elevator to \*L** (Lobby of Centene Plaza C) * Check in at the OWASP sign-in table in the lobby; you'll be escorted up * **Bring your parking ticket with you** to get validated at the meetup. **Who Should Attend** * Application & security professionals * Software engineers and developers * IT leaders and managers * Anyone with an interest in application security * You DO NOT need to be an OWASP member to attend! **About OWASP** The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation dedicated to improving the security of software. Local chapters provide opportunities to learn, network, and collaborate with others in the field. Come to learn more and participate in OWASP Saint Louis - your voice will continue to help shape what OWASP Saint Louis becomes next.

**Important time note:** Please plan on arriving between 5:30 and 6:00 as the elevators lock after 6 and you'll need to message us and we'll need to come get you. The building address is 4450 Bridge Park The entrance is 6620 Mooney St, Suite 400 You will need to scan your ID at the door to get a visitor badge. **Abstract** GitHub Copilot is powerful, but what if you could scale from a solo AI assistant to an entire team of specialized agents working in parallel? This session introduces Squad: an open-source framework for multi-agent orchestration that lets you define teams of AI agents with specific roles, responsibilities, and expertise. We'll progress from Copilot basics to the Copilot CLI, explore how Agents add autonomy, and see how Instructions and Skills let you customize agent behavior. Then, the climax: a live demo where a Squad team of 3 agents (Lead, Developer, Tester) stands up and builds a working application in real-time, showcasing true multi-agent collaboration. Whether you're new to AI or exploring how to scale your use of Copilot, this session will show you what's possible when agents work as a team. **YouTube Link** TBD

Will fill in once finalized.

Pay attention! We’re delaying a week for those of you who may be on Spring break and/or celebrating the holiday. Ok, no pancakes, but waffles-a-plenty. Join the local UX and Digital Design community for a casual monthly breakfast. Look for us upstairs!