Call for Presentations

CfP closes: August 24, 2025

Notification to submitters by September 10, 2025

Conference: November 26, 2025

For presentation proposals we ask for a short abstract and, if available, a preliminary version of the presentation.
The abstract should not be less than 600 characters long. Please pay attention to spelling in all information you provide, as both will appear in the program as is.
Presentations are expected to last 20 or 40 minutes, plus 5 minutes of discussion. A preference on the length must be stated in the CfP.

All topics related to application security are welcome, in particular:

• Practically relevant technical presentations around applicaton security
• “Hot topics” such as machine learning, AI / LLM and their security as well as their use in security. But: see below
• New research results
• News on OWASP projects
• Client application security: browser security and mobile applications
• Server / cloud application security: containerization, DevOps, APIs
• Security programs for developers, testers, architects and project managers
• CISO topics, security management and organizational aspects
• Secure development lifecycle, Threat Modeling, Secure Architectures, Security Maturity
• Application Security Testing: Code Review, Pentest, Dynamic and Static Code Analysis, Fuzzing, ...

The slides of the talks will be published under a free license on the conference website after the conference.
In addition, all talks will be recorded and published on the YouTube channel of the German OWASP Chapter and/or CCC's media web site. There may be even live streaming of presentations.
If you do not wish to be recorded and/or live streamed, please indicate this in the comments section of your submission. The videos will be available under a free license. The default is CC BY-SA 4.0, unless you request a different one.

Please choose either German or English as your presentation language. Please use the language you are fluent in.

The OWASP speaker agreement applies to all submitters.
In a nutshell: Please do not use a company slide deck, but a neutral one or one from OWASP. Company name and logo are welcome on one slide.

Please no “marketing pitches”; neither on the slides nor verbally. The slides must not contain any non-free content.

OWASP assumes no responsibility for compliance with respect to rights of third parties.

The top scored submissions

• have a clear abstract that describes an interesting and relevant talk which one would choose to attend. It attracts attendees and impresses the reviewers as well.
• have an outline that leaves no doubts about the structure of the talk and its timing.
• demonstrate clearly your takeaways for the audience. Even better if your attendees can immediately implement that at their workplaces.
• discuss a novel topic which attendees couldn't see in the recordings of other conferences.
• describe a real-life story of how you solved a problem in a real-world environment.
• have stories to share like e.g. how you failed or what you did and didn't work. Share pitfalls and failures so we can learn from them.

The reasons submissions get marked down or rejected

• Your submission is looking like it has been generated by an AI
• your submission contains an indication of selling products or services
• The shorter the submission, the less time the reviewer will spend on your submission before they mark it down, due to a lack of detail.
• Poorly formatted or structured submission or significant spelling and grammatical mistakes.
• Your submission makes it sound like the answer to problems is to buy your product or service. Alternatively, the submission contains sales pitches. If you work for a vendor, we will be looking for a clear explanation of what value the submission brings, separate to your product or service.
• You used e.g. AI as a buzzword and neither research, use in practice or no takeaway for the audience is indicated. (Submissions around OWASP AI/ML projects are welcome.)
• Your submission is full of buzzwords without clarity on what tangible value the talk brings to the attendee.