OWASP Bristol, UK

Welcome to OWASP Bristol Chapter

The OWASP Bristol Chapter is run by Katy Anton, Craig Francis and Jon Gadsden.

We are a bunch of friendly people interested in application security, and we are interested in every flavour of security.

The Bristol Chapter is pleased to have the support of WiTCH (Women in Tech & Cyber Hub) in promoting a more diverse software security community in the South West of England

Social media

  • Our meetings are scheduled on Meetup
  • We post videos of some of the meetings on our YouTube Bristol channel
  • Discussions and questions are welcome on our chapter OWASP slack channel

Chapter Meetings

Typically our meetings are held in the evening and last for a couple of hours. View the meeting schedule on the events tab.

To register for an event, please visit our Meetup page.

Speaking at OWASP Bristol Chapter Events

Call For Speakers is open - if you would like to present a talk on Application Security at future OWASP Bristol Chapter events - please review and agree with the OWASP Speaker Agreement and send the proposed talk title, abstract and speaker bio to: Katy Anton / Katy Anton @Infosec Exchange

All types of talks and presentations are welcome, such as:

  • Short / lightning talks, approximately 10 minutes on a specific subject
  • Longer talks between 30 and 45 minutes
  • Wider ranging presentation or tutorials up to an hour long

Meeting Supporters

Here is the list of organisations who have generously provided us with space for our OWASP Bristol chapter meetings:

  • ImmersiveLabs
  • RBS
  • GreshamTechnologies
  • JustEat
  • Ovo
  • HargreavesLansdown

Scheduled events

To register for this event, please visit our Meetup page.

Past events

A list of our previous events and presentation, and occasionally videos.

2025

  • 2025-3-25:
    • Introduction slides
    • Talk: Ship Happens: The Stormy Seas of Supply Chain Security, David Archer
    • Discussion: The human element of open source, led by WiTCH (Women in Tech & Cyber Hub)

2024

  • 2024-5-21:
    • Workshop: Interactive cyber crisis simulation, hosted by James Riley and Chris Wood at the Immersive Labs Bristol office
  • 2024-3-5:
    • Talk: OWASP Threat Dragon, Jon Gadsden - slides
    • Discussion: The Effects of our Decisions, led by Craig Francis

2023

  • 2023-11-28:
    • Talk: Integrating Threat Modeling into the SDLC, Rob Fewster - video slides
  • 2023-10-17:
    • Talk 1: Secure by Design and by Default, Chris Goff - video
    • Talk 2: Exploring Security, Dan Billing - video
    • Update: ZAP and the Software Security Project, Jon Gadsden - video slides
  • 2023-06-15:
    • Talk 1: LLM and Application Security, Chris Wood
    • Talk 2: An Introduction to scripting for Application Testers, Alex Archondakis - slides

2020

2019

  • 2019-11-14:
    • Talk 1: Least-privilege principle of container security, Ben Meier - video
    • Talk 2: OWASP Threat Dragon: Cupcake to the rescue, Jon Gadsden - video slides
  • 2019-09-12:
    • Talk 1: Hacking into Developers’ Security Consciousness, Andra Lezza
    • Talk 2: Stranger Danger: Finding Security Vulnerabilities Before They Find You!, Siobhan Meier
  • 2019-07-07:
    • Talk 1: autom8on’s infamous stalking talk, Steve Wilson
    • Talk 2: Exploits with Scratch, Kevin Sheldrake
  • 2019-06-06:
    • Talk: Cracking HiTag2 Crypto - Weaponising Academic Attacks for Breaking and Entering, Kev Sheldrake
  • 2019-01-09: “Capture The Flag (CTF) Evening”

2018

2017

  • 2017-11-30:
    • Talk 1: Can DevSecOps Prevent the Impending Software Apocalypse?, Jeff Williams
    • Talk 2: Cookie Security - Myths and Misconceptions, David Johansson
  • 2017-11-23:
    • Talk 1: A Corporate Phishing Trip, Iain Baughen
    • Talk 2: Modern Access Management, Jonathan Scudder
  • 2017-09-28:
    • Talk 1: Website hacking, Craig Francis
    • Talk 2: Threat Modeling, Jon Gadsden - slides
  • 2017-06-22:
    • Talk 1: IoT, Ramesh Krishnasagar
    • Talk 2: Securing financial APIs, Dave Tonge
  • 2017-04-20:
    • Talk: The path of secure software, Katy Anton
  • 2017-03-09:
    • Talk: OWASP Top 10 Proactive Controls

2016

  • 2016-11-17:
    • Talk: Embedded Systems or - the Unwitting Accomplice, Jamie Riden
  • 2016-09-15:
    • Talk: How to test your software for security, Matteo Meucci
  • 2016-07-21:
    • Talk 1: OT is not IT, Vitor Jesus
    • Talk 2: Car hacking, Ken Munro
  • 2016-05-20:
    • Workshop: “Threat Modelling”
  • 2016-03-17:
    • Talk 1: New Era of Software with modern Application Security, Dinis Cruz
    • Talk 2: Android app security on a shoestring budget, Scott Alexander-­Bown
  • 2016-01-21:
    • Talk 1: Don’t Panic - Maintain Security in Continuous Deployments, Chris Dare
    • Talk 2: New Adventures in Security Testing, Dan Billing

2015

  • 2015-11-19:
    • Talk 1: Devops & Continuous Delivery Security, Jason Alexander
    • Talk 2: Dip Your Toes in the Sea of Security, James Titcumb
  • 2015-07-02
Watch Star