Why Secure Software Begins Before the First Line of Code

Moin Hamburg et al.,

we're thrilled to have Jim Manico from the US @ our OWASP meeting in Hamburg! Jim is since a long time engaged in software security. (IIRC I met him first 13 years ago @ OWASP's Global AppSec conference)

Since then he became one of the most influential volunteers in the OWASP community, who founded and maintains OWASP's Cheat Sheets. He also led the Application Security Verification Program which have shaped how developers everywhere write secure code. He is a Java Champion and a JavaOne "rockstar" speaker, and is a regular keynote/trainer at AppSec conferences globally. Being on the cutting edge he co-led the new OWASP AISVS , a community-driven catalogue of testable security requirements for AI-enabled systems.

Eckdaten:

Location: Iteratec, am Sandtorkai 75 . Danke @ Iteratec und Jan!
Title: ORDNUNG! PRÄZISION! SPEZIFIKATION! Why Secure Software Begins Before the First Line of Code
Speaker: Jim Manico
Date: 12.10.2026
Start: 18:00 (doors open)

Please make sure your RSVP reflects your attendance by Oct 7 (evening) as our host is planning for some finger food.

Abstract:
Developers spend enormous effort fixing defects that should never have existed. The root cause is often not poor coding. It is poor requirements. This presentation introduces Spec-Driven Development, a disciplined engineering approach where precise, security-aware specifications become the foundation for implementation, testing, code review, and AI-assisted development. You'll learn practical techniques for writing requirements that are measurable, verifiable, and resistant to ambiguity, allowing both humans and AI to consistently produce secure software.

Because secure code starts with secure specifications and engineering discipline.

Misc

If you'd like to give a talk yourself, or if you can generally provide an ad-free venue for talks, please feel free to get in touch!

General remarks to our OWASP Meeting

Our meetings are open to everyone, focus on software and its security on the Internet and/or Infosec in general. This is where people who deal with IT security, professionally or personally, come together: developers, managers, penetration testers, and anyone interested in (application) security. The atmosphere is open and relaxed. We’re all about sharing experiences, discussing technical topics, and last but not least: networking. If you’re looking to sell or advertise products or services: sorry, this isn’t the place for you. You’re more than welcome to let your colleagues or friends know about our meetups. All meetups are free, open to everyone, and free of charge, with or without an OWASP membership.

Schönen Gruß, Dirk

https://www.meetup.com/owasp-hamburg-stammtisch/
https://infosec.exchange/@owasphamburg
https://www.linkedin.com/company/owasp-meeting-hamburg
https://owasp.org/www-chapter-germany/stammtische/hamburg/