Application security engineers spend their year inside code reviews, CI pipelines and threat models. Most security conferences talk about networks and buyers. Finding talks about secure code, OWASP projects and developer workflows takes a narrower list.
This page covers OWASP and other application security events with 2027 dates you can plan around. For each one you get dates, the venue and the cheapest published ticket to the talks. Most 2027 AppSec prices are not out yet, so the table says Not announced where that is true. Broader hacker and research events are on our InfoSec conferences page.
Prices appear as registration opens, so confirm the live figure at checkout. The method is on How we review tools.
OWASP BASC 2027
OWASP BASC, the Boston Application Security Conference, is one day of application security talks and workshops. April 3, 2027, at the Boston Marriott Cambridge. In-person.
Best for: AppSec engineers and developers in the US Northeast who want a one-day OWASP event close to home. First-time speakers looking for a regional stage.
Dates and city: April 3, 2027. Boston Marriott Cambridge, Cambridge, Massachusetts. In-person. Official site and the BASC 2027 call for speakers.
What you actually get: One day of talks and workshops on application security, run by the OWASP community. The call for speakers is on Sessionize.
Notable limitations:
- Ticket price and registration are not on the official site yet.
- One day only. It works best as a local trip.
- The venue is in Cambridge, not downtown Boston. Check transit from your hotel.
Tickets: Not announced. The official site lists the date and venue, not a registration link.
SecAppDev 2027
SecAppDev 2027 is a one-week course in secure application development, with in-depth lectures and hands-on workshops. June 7-11, 2027, in Belgium. The venue page names the Faculty Club in Leuven. In-person.
Best for: Developers, architects and AppSec engineers who want structured learning on building secure software, not a vendor show.
Dates and city: June 7-11, 2027. Faculty Club, Groot Begijnhof 14, 3000 Leuven, Belgium, per the official venue page. In-person.
What you actually get: Lectures and one-day workshops. The 2026 edition had 2 keynotes, 20 technical sessions and 4 one-day workshops. Tickets in 2026 came as full course, lectures only or workshops only, with lower community rates.
Notable limitations:
- 2027 prices are not published yet. The registration page still shows 2026.
- Belgian VAT at 21% is charged on all registration fees.
- The venue page sits under the 2026 menu. Confirm the 2027 venue before booking a hotel.
Tickets: Not announced for 2027. For reference, 2026 prices excl. VAT were 2,500€ for lectures only (3 days), 1,600€ for workshops only (2 days) and 3,500€ for the full course, with community tickets from 800€.
OWASP Global AppSec EU 2027
OWASP Global AppSec EU 2027 is the OWASP Foundation's flagship European conference. June 21-23, 2027, at the Austria Center Vienna. The 2026 edition ran June 22-26, 2026 in Vienna, with trainings and conference days. In-person.
Best for: AppSec engineers, security champions, OWASP project leaders and product security teams. Vendors that sell to developers and AppSec teams in Europe.
Dates and city: June 21-23, 2027. Austria Center Vienna, Vienna, Austria. In-person. Dates and venue from the official OWASP call for talks.
What you actually get: The main OWASP gathering in Europe, with talks from OWASP project leaders and AppSec teams. The call for talks is open now and closes December 10, 2026.
Notable limitations:
- Registration and prices are not published yet.
- The OWASP events page does not list the 2027 edition yet. Dates come from the official call for talks.
- The 2026 edition ran five days with trainings. Training days for 2027 are not posted yet.
Tickets: Not announced. Watch the OWASP events page for the registration launch.
Can I still submit a talk?
Yes, until December 10, 2026 at 11:59 PM. The call page lists two different time zones for the deadline, so submit a day early.
OWASP LASCON 2027
OWASP LASCON 2027 is the Lonestar Application Security Conference in Austin, Texas. Pre-conference training runs October 19-20 and the conference days are October 21-22, 2027. In-person.
Best for: AppSec engineers, developers and security teams in Texas and the US South. Teams that want training days and talks in one trip.
Dates and city: Training October 19-20, conference October 21-22, 2027. Norris Conference Centers, 2525 W. Anderson Lane, Suite 365, Austin, Texas 78757. In-person. Official site.
What you actually get: Two days of pre-conference training, then two conference days of application security talks.
Notable limitations:
- Ticket prices are not published yet. The site says early bird tickets for the conference days will be available soon.
- Training and conference days are separate. Check which days your ticket covers.
- The 2027 agenda is not published yet.
Tickets: Not announced. Early bird tickets for the conference days are listed as coming soon.
Still to come in 2026
OWASP AppSec Days India runs November 21-22, 2026 online, held in Indian Standard Time. The conference is free. Registration is required, and the stream link goes to registered participants.
OWASP BeNeLux runs November 26-27, 2026 in Utrecht, the Netherlands. The conference day on November 26 is free with registration. Training on November 27 costs €50 per day. The site names Utrecht but not the venue.
Other AppSec conferences worth considering
OWASP Global AppSec USA ran November 2-6, 2026 in San Francisco. The OWASP events page does not list a 2027 US edition yet. This page will not guess the date or city.
SnowFROC is the OWASP Denver conference. The 2026 edition ran April 16-17 at the Denver Cable Center. The OWASP SnowFROC page says tickets typically cost $75 to $105. The 2027 dates are not posted yet.
AppSec & DevSecOps Melbourne lists July 2027 in Melbourne with a register-interest form. Exact days are not published yet.
How we picked these conferences
We shortlisted application security events, OWASP and independent, whose 2027 edition has exact dates on the organizer's own site or official call for talks. A missing price did not exclude an event. Dates and prices were checked on the organizers' sites on 5 Nov 2026. In the table, "From" is the cheapest published ticket that includes the talks. "Not announced" means the organizer has not published a 2027 price yet.
FAQs
Which AppSec conference should I plan for if I can only attend one in 2027?
OWASP Global AppSec EU in Vienna, June 21-23, 2027, if you can travel to Europe. It is the flagship OWASP event there. The agenda and prices are not out yet, so confirm before you book.
Is there an AppSec event in the US in 2027 with a confirmed date?
Yes. OWASP BASC is on April 3, 2027 in Cambridge, Massachusetts, and OWASP LASCON is October 19-22, 2027 in Austin. Neither has published ticket prices yet.
Is there a Global AppSec USA in 2027?
It is not on the official OWASP events page yet. The 2026 US edition ran November 2-6 in San Francisco. We do not invent a 2027 date.
How is SecAppDev different from an OWASP conference?
SecAppDev is a one-week course with lectures and workshops. OWASP conferences are community events with talks and an exhibitor area. In 2026, a standard lectures-only ticket was 2,500€ excl. VAT, with lower community rates. 2027 prices are not out yet.
Should an AppSec team also look at RSAC or Black Hat?
It can. Black Hat runs a research Briefings program and RSAC runs sessions across security topics, alongside large vendor floors. Dates and prices are on our cybersecurity conferences page.
Bottom line
For application security in 2027, start with OWASP. If you can travel to Europe, plan for Global AppSec EU in Vienna in June and submit a talk before December 10. In the US, BASC in April and LASCON in October are the two regional OWASP dates. If you want a structured week of secure development training, look at SecAppDev in June. Wait for prices before you book any of them.
