For years, we’ve been shifting security left. More scanners, earlier detection, better visibility. And yet, the backlog keeps growing. Enterprise security teams are juggling decades-old Java and .NET applications, codebases inherited through acquisitions, and now AI agents shipping software faster than anyone can review it.

CISOs don’t need another dashboard telling them what’s broken. They need a way to get the important things fixed.

Join fellow CISOs and application security leaders for an invite-only dinner exploring what comes after shift left, and how lean AppSec teams can move from finding risk to actually fixing it.

• Finding vs. fixing: How can code, cloud and runtime context help teams focus on the risks that actually matter?
• AI-speed development: How do lean AppSec teams keep up as developers and AI agents ship faster than traditional review cycles?
• Software supply-chain security: How do we control the open-source packages entering our environments and fix what gets through?
• Beyond shift left: How can we automate remediation, get safe fixes into the codebase, and verify they actually work?

Leading the conversation is John Amaral, CSTO at Aikido, former co-founder of Root.io, where he helped build an agentic software factory for securing and maintaining open-source software at scale.

No pitches, no slides. Just candid conversations with peers tackling the same challenges, under Chatham House Rule.

Less finding. More fixing. That’s the path to self-securing software.