Conference Description
Key Takeaways
- Hands-on workshops and tabletop exercises replace traditional conference presentations, focusing on peer-driven problem solving for CISOs and security leaders.
- Core topics include AI threat response, agentic security, post-authentication vulnerabilities, and identity management for human and non-human identities.
- Practical scenarios address incident response for AI infrastructure, MFA bypass defense, agent memory as an attack surface, and supply chain security.
- Designed for senior security executives from large enterprises, technology companies, and financial institutions with advanced security requirements.
About the Event
The Bay Area Anti-Summit takes a departure from conventional conference formats by structuring the entire event around interactive engagement rather than passive presentations. Held at Devil’s Canyon Brewing Company in San Carlos, California, the summit brings together security leaders for workshops, tabletop exercises, and peer-led discussions designed to produce actionable strategies participants can implement in their organizations.
AI and Agentic Security Challenges
A significant portion of the event addresses security implications of rapid AI adoption in enterprise environments. Sessions examine AI threat response, the emerging discipline of agentic security (protecting AI agents and the systems they interact with), and the operational realities of deploying AI and automation within security programs. Specific exercises tackle incident response for AI infrastructure and the treatment of agent memory as a potential attack surface.
Identity and Access Management Focus
The summit dedicates substantial attention to identity and access management, particularly post-authentication vulnerabilities and the challenge of building effective identity and authorization stacks for environments with both human and non-human identities. Workshops cover defending against MFA bypasses, with references to technologies including FIDO2, SSO, and SaaS identity architectures.
Who Should Attend
The event targets CISOs, Heads of Security, VPs of Information Security, and Security GRC leaders responsible for security strategy, operations, and risk management. Attendees typically come from large enterprises, technology companies, and financial institutions facing complex security environments where theoretical frameworks must translate into operational practice.