Theme: Offensive Security for CISOs — Validating Exposure at Attacker Speed
A closed-door breakfast for CISOs and heads of security. Peer discussion under the Chatham House rule, not a product presentation.
What the table will work through
- Exploit windows in days, not months. Edge devices, CI/CD and AI gateways were all exploited within weeks of disclosure this autumn (GitLab CVE-2026-97229, Cisco ASA/FTD CVE-2026-76418, PHP2Shell). How do you prioritise and verify fixes at that pace?
- From the annual pentest to continuous validation. What to test, how often, how to scope safely in production, and what auditors and boards accept.
- Agentic AI pentesting in practice. Where AI agents find real issues, where human testers are still needed, and the guardrails, scope enforcement and cost controls to demand.
- Testing the identity and SaaS layer. OAuth app consents, service accounts and secrets held by PaaS and backup providers as attack paths.
- Reporting offensive security to the board. Metrics that show reduced exposure rather than activity.
Time: 8:00 AM – 11:00 AM IST · Format: Invite-only breakfast roundtable · Venue: shared with confirmed attendees
Sponsor: FireCompass
Seats are limited. RSVP on this page and the CISO Platform team will confirm your seat and share the venue.