SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

SnowFROC 2026, held in Denver, explored the evolving landscape of application security (AppSec) in a world of fast-paced, AI-assisted software development. The conference emphasized the importance of implementing security measures at the point of action, such as in integrated development environments (IDEs) and pull requests, to make secure choices more intuitive for developers. Keynote speaker Tanya Janca highlighted the human factors behind insecure code, advocating for secure defaults and training that emphasizes secure patterns over mere compliance. Chris Lindsey discussed the modern threat landscape, focusing on trust as a vulnerability vector and stressing the need for disciplined security spending. Jenn Gile examined npm account takeovers, underscoring the difference between accidental vulnerabilities and malicious packages, while advocating for team-wide malware prevention strategies. Mudita Khurana from Airbnb presented a model for scaling AppSec through human networks and AI tools, emphasizing the creation of feedback loops to refine security measures. Overall, the conference stressed the importance of reducing silent trust, treating credentials as operational risks, and building systems that enable secure decisions to be the easiest choices.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.