Name: Guardrails First: Building AI Agents That Won’t Leak Your Secrets
Start: 2026-09-22T11:00:00-0700
End: 2026-09-22T11:55:00-0700

Guardrails First: Building AI Agents That Won’t Leak Your Secrets

Tuesday September 22, 2026 11:00am - 11:55am PDT

As generative and agentic AI rapidly enters security workflows, practitioners face a difficult choice: leverage AI to enhance efficiency, or risk exposing sensitive data to systems that weren’t designed with security in mind. For me, as a security engineer and pentester, this challenge is especially important - pentesting often involve confidential data, proprietary code, and high-impact vulnerabilities that cannot leave controlled boundaries.

In this talk, I would like to share my own practical lessons learned from designing and deploying AI agents specifically for security testing use cases. When building your own agent for security testing purposes, you often face a lot of issues, related to privacy, data protection, efficiency and cost-optimization. In my talk we’ll explore how to build AI agents with strong guardrails from the ground up: isolating execution environments, minimizing data exposure, utilizing obfuscation practices without a negative impact on performance, implementing secure prompt handling, and enforcing strict boundaries between sensitive inputs and model interactions. I’ll also cover architectural patterns that enable safe augmentation of pentesting workflows without introducing new attack surfaces or compliance risks and what is more important, do not cost you an arm and a leg.

Attendees will gain insights from practical experience into how to safely integrate AI into daily workflows, whether they are building internal tools, experimenting with agentic systems, or securing AI-enabled applications. This session is designed for security professionals, developers, DevOps engineers and everyone who want to utilize the power of AI without turning it into a new source of security risks.

The goal is simple: build AI agents that work for you, not against you.

Speakers

Ihor Sasovets

Lead Security Engineer, TechMagic

I am a Lead Security Engineer at TechMagic with previous experience in test automation, security testing automation, a contributor of OWASP API Top 10 (2019), speaker at various community meetups. I have more than 4 years of experience with AWS.

I am passionate about cloud securit... Read More →

Tuesday September 22, 2026 11:00am - 11:55am PDT

Implementation

Audience All

OWASP 25th Anniversary Virtual Conference (September)

Ihor Sasovets

Attendees (2)

Get help with the event

OWASP 25th Anniversary Virtual Conference (September)

Ihor Sasovets

Attendees (2)

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Get help with the event