

Building an "AI Storm"-Ready Security Program: SDLC Security Guardrails Summit - London
250 CISOs wrote the strategy paper. Now we want to take it further.
Get the room together again, bring in more voices, and see what new ideas and papers come out of it.
This is another event in the first wave of summits, alongside San Francisco, New York, and DC — a direct follow-up to the paper on the "AI Storm", released by CSA, SANS, the OWASP GenAI Security Project, and [un]prompted, and spearheaded by Gadi Evron, Rich Mogull, and Rob T. Lee.
We'll present the new SDLC - Building agentic SDLC Paper https://phoenix.security/whitepapers-resources/frontier-ready-vulnerability-management-program/
===
Telefonica Tech floor 31
Guests should use the SOUTH entrance - this is opposite a large “living wall” and adjacent to the public sky garden entrance - and bring VALID PHOTO ID.
===
Logistics
📍 The London Summit will be hosted by Telefónica UK at 20 Fenchurch St, London EC3M 8AF.
✅ Register before you come — no registration, no entry.
🪪 Bring one photo ID that matches your name.
===
Who's behind it
CSA — organizing the summit, and riving the "AI Storm" paper series forward.
Phoenix Security — sponsoring, nd speaking on securing the agentic SDLC.
Telefónica Tech — hosting us in London, at their office on Fenchurch Street (your on-site contact: Edward Tucker).
===
Speakers
Sean R. Turner — CSA UK chapter lead. Your compère for the day, and opening the event with a lightning talk on remediation and what’s next.
Matthew Adams — Citi. On triaging vulnerabilities at AI-scale discovery — ranking by what an attacker can actually reach, not by severity score alone.
Francesco ☁️ Cipollone ☁️ — Phoenix Security. How Phoenix scaled from 40 to 800 commits a week, same headcount, without shipping insecure AI-generated code.
Ryan Winstanley — on what gets missed when AI adoption outruns security and governance, and design patterns you can actually take home.
===
Note on attendance approval
This one's for CISOs, CSOs, Chief Risk Officers, and Heads of AppSec or Vulnerability Management.
Please provide enough information when you register for us to work out who you are.
Space is limited. Register soon. You'll hear back once your registration is approved.
===
Other Summits
NYC Summit, 8 June: https://luma.com/kn2djk5v
SF summit, 29 May: https://luma.com/rnc4iy70
DC summit, 9 June: https://luma.com/jzr25473