Aptori Is Sponsoring BSides NYC 2026

Aptori is sponsoring BSides NYC 2026 on October 17, and we're looking forward to meeting the security researchers, engineers, and practitioners who are pushing application security forward.

One of the challenges we keep seeing in large enterprise environments is the gap between finding a vulnerability and getting it fixed. Security tools generate findings, but engineers still need to investigate them, establish whether they're exploitable, understand their impact, coordinate remediation, and verify the results.

As applications become more complex, especially with interconnected APIs, microservices, and AI-driven workflows, that process becomes increasingly difficult to manage.

At Aptori, we're building technology to close that gap.

What We're Bringing to BSides NYC

Finding Vulnerabilities That Matter

Aptori combines semantic code analysis with autonomous penetration testing to understand how applications behave, not just how their code is structured.

Our approach examines application logic, data flows, API interactions, and authorization boundaries to identify weaknesses that traditional scanning approaches may overlook.

For example, an API authorization weakness may only become apparent when a particular sequence of requests is executed across different user identities. Aptori tests these stateful workflows to identify security issues that conventional scanners can miss.

The goal is to give security teams more than a list of potential vulnerabilities. We want them to have the context and evidence needed to determine which issues require attention.

Closing the Security Loop

Finding a vulnerability is useful. Getting it fixed and verifying the fix is what matters.

We're using tailored AI agents to connect vulnerability discovery, validation, remediation, and verification. These agents work with existing development and security systems, helping teams move from a confirmed issue to a verified resolution without relying on disconnected manual processes.

For example, once a vulnerability has been validated, an agent can help create a development ticket, prepare a proposed code fix, and coordinate follow-up testing after the change has been reviewed and applied.

Security teams retain control over which actions can be automated and which require human approval.

This allows organizations to reduce the manual effort involved in vulnerability management while maintaining oversight of changes to their applications.

Keeping Security Under Your Control

For enterprises that cannot send sensitive code, application data, or security telemetry to external AI services, Aptori supports sovereign deployment within customer-controlled infrastructure.

Organizations can use privately hosted AI models and govern which tools agents can access, what actions they can take, and when human approval is required.

This is particularly important when security agents interact with source repositories, development pipelines, and operational systems.

We believe autonomous security should work within an organization's existing security boundaries, rather than requiring organizations to give up control of their data or workflows.

Come Talk Security With Us

BSides is an opportunity to exchange ideas with people who work on security problems every day.

If you're working on application security, API testing, autonomous penetration testing, vulnerability remediation, or AI agent security, come find us at the Aptori booth.

We'd enjoy comparing notes on the problems you're tackling, discussing different approaches, and showing you what we're building.

BSides NYC 2026
Saturday, October 17, 2026
John Jay College of Criminal Justice, New York City