Erez Yalon

I am the VP of Security Research at Checkmarx, where I founded and still lead the Checkmarx Zero offensive and defensive security research division. I am the founder and leader of OWASP projects, and co-authored the API Security Top 10, the industry-standard framework for API threat classification adopted by organizations worldwide. I founded the AppSec Village at DEF CON, one of the largest application security communities globally, and co-founded the INTENT Summit conference. As a regular speaker at RSAC, Black Hat, DEF CON, OWASP, and DevNetwork, I'm in my second decade of hands-on experience in vulnerability discovery, software supply chain security, API security, and AI security. Translating security research into actionable guidance for developers and management, and creating education and awareness environments, is what I do.