# Talk catalogue: security talks by Liran Tal 149 talks on AI security, software supply chain security, Node.js and web security, delivered 225 times in 21 countries. Canonical: https://lirantal.com/speaking/talks Speaking · Talk catalogue # 149 talks, given 225 times. Every talk I've given, newest first, with where it was delivered and a recording when there is one. Each one is adapted to your slot and your audience, and most include a live hacking demo. talks delivered 225 talks delivered · since 2013 countries 21 countries · 42 cities talks in the catalogue 149 talks in the catalogue · 7 topics Stranger Danger: Finding Security Vulnerabilities Before They Find You! 10× Stranger Danger: Finding Security Vulnerabilities Before They Find You! Topic All 149 AI & agentic security 23 Containers & cloud 10 Software supply chain 33 Node.js & web security 41 DevRel & community 12 Developer tooling & testing 5 Secure coding & AppSec 25 Has recording Showing 149 of 149 * AI & agentic security New ### [From Second Brain to AI Chief-of-Staff: Engineering an Assistant That Runs Your Workweek](/speaking/talks/from-second-brain-to-ai-chief-of-staff-engineering-an-assistant-that-runs-your-workweek) 2026 · Meetup · next: LLMDay + Data TLV, Nov 17 Details * AI & agentic security Signature talk New ### [Your AI Agent Installed Malware Because a SKILL.md Told It To](/speaking/talks/your-ai-agent-installed-malware-because-a-skill-md-told-it-to) Delivered 4× · 2026 · Conference, Meetup Watch * AI & agentic security New ### [Open Source at the Inflection Point: A Fireside Chat with Anthropic on AI-Powered Defense](/speaking/talks/open-source-at-the-inflection-point-a-fireside-chat-with-anthropic-on-ai-powered-defense) Delivered once, at AI Security Summit · 2026 · Conference Details * AI & agentic security New ### [Giving Your Agentic Coding AI a Security Brain](/speaking/talks/giving-your-agentic-coding-ai-a-security-brain) Delivered once, at AGNTCon + MCPCon Europe 2026 · 2026 · Conference Details * Developer tooling & testing New ### [Boxdown CLI](/speaking/talks/boxdown-cli) Delivered once, at Codex Demo Night - Tel Aviv · 2026 · Meetup Details * AI & agentic security New ### [Security tradeoffs in the age of AI adoption](/speaking/talks/security-tradeoffs-in-the-age-of-ai-adoption) Delivered once, at Echo Meetups · 2026 · Meetup Details * Secure coding & AppSec ### [Preventing the next sha1-hulud: Zero Day Best Practices](/speaking/talks/preventing-the-next-sha1-hulud-zero-day-best-practices) Delivered once, at Snyk Webinar · 2025 · Webinar Watch * AI & agentic security ### [Weaponizing LLMs to Hack AI Applications](/speaking/talks/weaponizing-llms-to-hack-ai-applications) Delivered once, at AI DEV TLV · 2025 · Conference Details * AI & agentic security ### [Weaponizing LLMs to Hack Your Node.js Apps](/speaking/talks/weaponizing-llms-to-hack-your-node-js-apps) Delivered once, at NodeTLV · 2025 · Conference Details * AI & agentic security ### [These Aren't the Tools You're Looking For: MCP Security Awakens](/speaking/talks/these-arent-the-tools-youre-looking-for-mcp-security-awakens) Delivered once, at AI Native DevCon · 2025 · Conference Watch * AI & agentic security ### [Weaponizing LLMs to Hack JavaScript AI Applications](/speaking/talks/weaponizing-llms-to-hack-javascript-ai-applications) Delivered 2× · 2025 · Conference, Meetup Watch * Secure coding & AppSec ### [Secure Coding Challenge!](/speaking/talks/secure-coding-challenge) Delivered once, at Node.js Monthly Meetup · 2025 · Meetup Details * AI & agentic security ### [Your Lack of Agent Security is Disturbing](/speaking/talks/your-lack-of-agent-security-is-disturbing) Delivered once, at Cursor User Group · 2025 · Meetup Details * Node.js & web security Signature talk ### [Friend or Foe? TypeScript Security Fallacies](/speaking/talks/friend-or-foe-typescript-security-fallacies) Delivered 3× · 2025 · Conference Watch * Secure coding & AppSec ### [0Day at Day Zero Security Quiz](/speaking/talks/0day-at-day-zero-security-quiz) Delivered once, at WeAreDevelopers World Congress 2025 · 2025 · Conference Details * AI & agentic security ### [Hacking AI Applications](/speaking/talks/hacking-ai-applications) Delivered 2× · 2024–2025 · Conference, Meetup Watch * Software supply chain ### [Adversarial Security Threats in the Open Source Supply Chain](/speaking/talks/adversarial-security-threats-in-the-open-source-supply-chain) Delivered once, at Codemotion Rome 2025 · 2025 · Conference Details * Node.js & web security ### [Unpacking Config & Env Variables in Node.js](/speaking/talks/unpacking-config-and-env-variables-in-node-js) Delivered once, at Platformatic Webinar · 2025 · Webinar Watch * DevRel & community ### [DevRel: Everything You Wanted To Know But Were Afraid To Ask](/speaking/talks/devrel-everything-you-wanted-to-know-but-were-afraid-to-ask) Delivered once, at Women On Stage · 2025 · Meetup Details * DevRel & community ### [DevRel Roundtable](/speaking/talks/devrel-roundtable) Delivered once, at Daily.Dev · 2025 · Conference Watch * AI & agentic security ### [Webdev + AI Day: Exploring AI Opportunities and Risks in Development](/speaking/talks/webdev-ai-day-exploring-ai-opportunities-and-risks-in-development) Delivered once, at WeAreDevelopers · 2024 · Webinar Watch * AI & agentic security ### [Securing AI-generated code in Banking Applications](/speaking/talks/securing-ai-generated-code-in-banking-applications) Delivered once, at Finance & Risk – The Official Cybersecurity Summit · 2024 · Conference Details * AI & agentic security ### [Opportunities and Risks of AI for Developers](/speaking/talks/opportunities-and-risks-of-ai-for-developers) Delivered once, at WeAreDevelopers: Webdev & AI Day · 2024 · Webinar Details * AI & agentic security ### [AI Native Dev Con](/speaking/talks/ai-native-dev-con) Delivered once, at AI Security Risks: The Impact of Generative AI in Developer Workflows · 2024 · Conference Watch * Secure coding & AppSec ### [The AppSec Arcade is Where Developers Become Security Champions](/speaking/talks/the-appsec-arcade-is-where-developers-become-security-champions) Delivered once, at DevSecCon 2024 · 2024 · Conference Details * AI & agentic security ### [Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools](/speaking/talks/can-machines-dream-of-secure-code-emerging-ai-security-risks-in-llm-driven-developer-tools) Delivered once, at WeAreDevelopers LIVE · 2024 · Conference Watch * AI & agentic security ### [Can Machines Dream of Secure Code? Let’s hack a Node.js and a React app](/speaking/talks/can-machines-dream-of-secure-code-lets-hack-a-node-js-and-a-react-app) Delivered 2× · 2024 · Conference Watch * AI & agentic security ### [Panel: Developer Trends and Cybersecurity Challenges in a Rapidly Changing Landscape with GenAI](/speaking/talks/panel-developer-trends-and-cybersecurity-challenges-in-a-rapidly-changing-landscape-with-genai) Delivered once, at Infobip Shift · 2024 · Conference Watch * Software supply chain ### [Security for Maintainers](/speaking/talks/security-for-maintainers) Delivered once, at Eddie Jaoude's YouTube channel · 2024 · Webinar Watch * Secure coding & AppSec ### [Capture the Flag 101](/speaking/talks/capture-the-flag-101) Delivered once, at DEFCON 32 · 2024 · Conference Details * DevRel & community ### [Ashdod Tech Meetups: Career in High-Tech panel](/speaking/talks/ashdod-tech-meetups-career-in-high-tech-panel) Delivered once, at Career in High-Tech · 2024 · Meetup Details * Node.js & web security ### [Permit.io: Node.js Security Masterclass](/speaking/talks/permit-io-node-js-security-masterclass) Delivered once, at Node.js Security: Frameworks, Access Control, and Best Practices · 2024 · Meetup Watch * AI & agentic security ### [The Monthly Dev #37 - AI development](/speaking/talks/the-monthly-dev-37-ai-development) Delivered once, at Can Machines Dream of Secure Code? · 2024 · Webinar Watch * AI & agentic security Signature talk ### [Can Machines Dream of Secure Code?](/speaking/talks/can-machines-dream-of-secure-code) Delivered 3× · 2023–2024 · Meetup, Conference Watch * AI & agentic security ### [AI Hallucinations and Manipulation: How to Use AI Coding Tools Securely](/speaking/talks/ai-hallucinations-and-manipulation-how-to-use-ai-coding-tools-securely) Delivered 2× · 2023 · Webinar Watch * Software supply chain ### [Powering Communities with Open Source Software](/speaking/talks/powering-communities-with-open-source-software) Delivered once, at Commina · 2023 · Conference Details * AI & agentic security ### [AI Hallucinations & Manipulation: How to Use AI Coding Tools Securely](/speaking/talks/ai-hallucinations-and-manipulation-how-to-use-ai-coding-tools-securely-2) Delivered once, at Snyk Webinar · 2023 · Webinar Watch * Node.js & web security Signature talk ### [Char Wars: The Path Traversal Strikes Back](/speaking/talks/char-wars-the-path-traversal-strikes-back) Delivered 6× · 2022–2023 · Conference Watch * AI & agentic security ### [From AI's Hallucinations to Software Vulnerabilities: Can Machines Dream of Secure Code?](/speaking/talks/from-ais-hallucinations-to-software-vulnerabilities-can-machines-dream-of-secure-code) Delivered once, at מפתחים מחוץ לקופסה · 2023 · Meetup Watch * Secure coding & AppSec ### [Your app is only as secure as your weakest line of code](/speaking/talks/your-app-is-only-as-secure-as-your-weakest-line-of-code) Delivered once, at Imperva's Cyber Security Meetup for Developers · 2023 · Meetup Details * Secure coding & AppSec ### [Developer Security Essentials with Snyk](/speaking/talks/developer-security-essentials-with-snyk) Delivered 2× · 2022–2023 · Workshop Details * DevRel & community Signature talk ### [The Secret Life of Developer Advocates](/speaking/talks/the-secret-life-of-developer-advocates) Delivered 5× · 2021–2023 · Meetup, Conference Watch * Node.js & web security ### [Hack-Proof The Node.js runtime: The Mechanics and Defense of Path Traversal Attacks](/speaking/talks/hack-proof-the-node-js-runtime-the-mechanics-and-defense-of-path-traversal-attacks) Delivered once, at Codemotion · 2023 · Meetup Details * Node.js & web security ### [React and Web Security Essentials](/speaking/talks/react-and-web-security-essentials) Delivered once, at DIVX Study Group · 2023 · Meetup Details * Software supply chain Signature talk ### [The Unexpected Demise of Open Source Libraries](/speaking/talks/the-unexpected-demise-of-open-source-libraries) Delivered 3× · 2022–2023 · Conference Watch * Containers & cloud ### [Master production-grade best practices to build your Node.js Docker images](/speaking/talks/master-production-grade-best-practices-to-build-your-node-js-docker-images) Delivered once, at DevOps fwdays'23 · 2023 · Conference Watch * Software supply chain ### [Open Source Security panel](/speaking/talks/open-source-security-panel) Delivered once, at Securing Your Open Source Workflow with GitHub Security Lab and Snyk · 2023 · Webinar Details * DevRel & community ### [The Big Fix: Coding Isn't the Only Way to Contribute, Liran Tal](/speaking/talks/the-big-fix-coding-isnt-the-only-way-to-contribute-liran-tal) Delivered 2× · 2023 · Meetup, Workshop Details * DevRel & community ### [Fireside Chat with Thomas Dohmke, CEO at GitHub, hosted by GitHub Stars Eyar Zilberman & Liran Tal](/speaking/talks/fireside-chat-with-thomas-dohmke-ceo-at-github-hosted-by-github-stars-eyar-zilberman-and-liran-tal) Delivered once, at Fireside chat with Thomas Dohmke, GitHub CEO and an AI summit · 2023 · Meetup Details * Node.js & web security ### [Path Traversal attacks](/speaking/talks/path-traversal-attacks) Delivered once, at Snyk's The Big Fix · 2023 · Webinar Details * Software supply chain ### [Why You Should Care About Open Source Security](/speaking/talks/why-you-should-care-about-open-source-security) Delivered 2× · 2022 · Meetup, Conference Watch * Node.js & web security Signature talk ### [Let me show you how React applications get hacked in the real world](/speaking/talks/let-me-show-you-how-react-applications-get-hacked-in-the-real-world) Delivered 6× · 2021–2022 · Conference Watch * Node.js & web security Signature talk ### [Stranger Danger: Your Node.js Attack Surface Just Got Bigger](/speaking/talks/stranger-danger-your-node-js-attack-surface-just-got-bigger) Delivered 5× · 2021–2022 · Workshop, Meetup, Conference, Webinar Watch * Node.js & web security ### [Node.js Collaborator Summit](/speaking/talks/node-js-collaborator-summit) Delivered once, at Node.js Collaborator Summit · 2022 · Workshop Watch * Software supply chain ### [5 Things you should know to secure your software supply chain](/speaking/talks/5-things-you-should-know-to-secure-your-software-supply-chain) Delivered once, at ScribeSecurity · 2022 · Webinar Watch * Secure coding & AppSec ### [OpenSSF and Developer Security Essentials](/speaking/talks/openssf-and-developer-security-essentials) Delivered once, at OpenSSF Day · 2022 · Conference Watch * Software supply chain ### [Security Controls in the JavaScript Supply Chain](/speaking/talks/security-controls-in-the-javascript-supply-chain) Delivered 2× · 2022 · Meetup, Conference Watch * Node.js & web security ### [Why React applications get hacked in the real-world](/speaking/talks/why-react-applications-get-hacked-in-the-real-world) Delivered once, at Hack in Paris 2022 · 2022 · Conference Watch * Software supply chain ### [GitBurger Track: GitHub and Open-Source & startup story](/speaking/talks/gitburger-track-github-and-open-source-and-startup-story) Delivered 2× · 2022 · Meetup Details * DevRel & community ### [Keynote Session: Awards Recognition](/speaking/talks/keynote-session-awards-recognition) Delivered once, at OpenJS Foundation · 2022 · Conference Watch * Node.js & web security ### [How React applications get hacked in the real-world](/speaking/talks/how-react-applications-get-hacked-in-the-real-world) Delivered 2× · 2022 · Conference, Meetup Details * Node.js & web security ### [Hack a vulnerable OWASP Node.js app](/speaking/talks/hack-a-vulnerable-owasp-node-js-app) Delivered once, at SnykLIVE · 2022 · Webinar Watch * Node.js & web security ### [JavaScript Live Trivia](/speaking/talks/javascript-live-trivia) Delivered once, at Snyk Webinar · 2022 · Webinar Watch * Software supply chain ### [Weaponizing NPM Packages for Protest and Malware](/speaking/talks/weaponizing-npm-packages-for-protest-and-malware) Delivered once, at Cloud Native Computing Switzerland · 2022 · Meetup Watch * Node.js & web security ### [Hands on Node.js and JavaScript security workshop: How safe is your application?](/speaking/talks/hands-on-node-js-and-javascript-security-workshop-how-safe-is-your-application) Delivered once, at JSDay Canarias · 2022 · Workshop Watch * Secure coding & AppSec ### [Managing Projects on top of the GitHub Platform](/speaking/talks/managing-projects-on-top-of-the-github-platform) Delivered once, at Gitburger - Manage Projects with GitHub · 2022 · Meetup Details * Node.js & web security ### [Hacking React Applications in the Real-World](/speaking/talks/hacking-react-applications-in-the-real-world) Delivered once, at React Israel · 2022 · Meetup Watch * Software supply chain ### [Cybersecurity and Weaponizing Open Source Software in the face of Geopolitical weather](/speaking/talks/cybersecurity-and-weaponizing-open-source-software-in-the-face-of-geopolitical-weather) Delivered once, at AshdodTech · 2022 · Meetup Details * Software supply chain ### [Vue.js developers are victims of weaponized NPM packages for protest and malware](/speaking/talks/vue-js-developers-are-victims-of-weaponized-npm-packages-for-protest-and-malware) Delivered once, at VueJS Israel · 2022 · Meetup Watch * Software supply chain ### [Open Source Workshop](/speaking/talks/open-source-workshop) Delivered once, at Ready Code Push · 2022 · Workshop Details * Secure coding & AppSec ### [The Big Fix](/speaking/talks/the-big-fix) Delivered once, at Hacking & Patching Node.js Security Vulnerabilities · 2022 · Webinar Watch * Node.js & web security ### [Node.js Security with Liran Tal](/speaking/talks/node-js-security-with-liran-tal) Delivered once, at This Is Learning · 2022 · Webinar Watch * Node.js & web security ### [Application Security for Node.js](/speaking/talks/application-security-for-node-js) Delivered once, at SLIIT FOSS Community · 2022 · Webinar Watch * Node.js & web security ### [SheHacks Kenya invites Liran Tal to a Node.js security session](/speaking/talks/shehacks-kenya-invites-liran-tal-to-a-node-js-security-session) Delivered once, at Node.js Security · 2022 · Webinar Details * DevRel & community ### [MCing the event](/speaking/talks/mcing-the-event) Delivered once, at Snyk All Hands 2022 · 2022 · Conference Details * Secure coding & AppSec ### [How Snyk’s approach to application security remedies shift-left shortcomings](/speaking/talks/how-snyks-approach-to-application-security-remedies-shift-left-shortcomings) Delivered once, at AWS Startup Showcase Season 2 Episode 1 | CUBE Conversation · 2022 · Webinar Watch * Node.js & web security ### [You thought your React application is secure? Think again](/speaking/talks/you-thought-your-react-application-is-secure-think-again) Delivered 2× · 2021 · Conference Watch * Containers & cloud ### [I can hack your container faster than you can build it](/speaking/talks/i-can-hack-your-container-faster-than-you-can-build-it) Delivered once, at DevOpsDays Tel Aviv 2021 · 2021 · Conference Details * Software supply chain Signature talk ### [Are We Forever Doomed By Software Supply Chain Risks?](/speaking/talks/are-we-forever-doomed-by-software-supply-chain-risks) Delivered 4× · 2021 · Conference Watch * Software supply chain ### [Are We Forever Doomed to Software Supply Chain Security?](/speaking/talks/are-we-forever-doomed-to-software-supply-chain-security) Delivered 2× · 2021 · Conference Details * Containers & cloud ### [Mastering Production-grade Best Practices to Build your Node.js Docker Images](/speaking/talks/mastering-production-grade-best-practices-to-build-your-node-js-docker-images) Delivered once, at NodeTLV · 2021 · Conference Watch * Software supply chain ### [Hacking your infra from the outside by exploiting npm Dependency Confusion attacks](/speaking/talks/hacking-your-infra-from-the-outside-by-exploiting-npm-dependency-confusion-attacks) Delivered once, at SnykCon 2021 · 2021 · Conference Watch * Software supply chain ### [Proactive controls for supply chain security](/speaking/talks/proactive-controls-for-supply-chain-security) Delivered once, at O'Reilly Infrastructure & Ops conference · 2021 · Conference Details * Secure coding & AppSec Signature talk ### [Stranger Danger: Finding vulnerabilities before they find you!](/speaking/talks/stranger-danger-finding-vulnerabilities-before-they-find-you) Delivered 3× · 2019–2021 · Conference, Meetup Watch * DevRel & community ### [GitHub Stars Special Edition: The Monthly Dev #9](/speaking/talks/github-stars-special-edition-the-monthly-dev-9) Delivered once, at The Monthly Dev · 2021 · Meetup Watch * Node.js & web security ### [Live Hacking Session - Your app is only as secure as your weakest line of code. Shall we hack it?](/speaking/talks/live-hacking-session-your-app-is-only-as-secure-as-your-weakest-line-of-code-shall-we-hack-it) Delivered once, at SANS.org Webcast · 2021 · Webinar Details * Node.js & web security ### [Bughunting your React web applications using DevTools](/speaking/talks/bughunting-your-react-web-applications-using-devtools) Delivered once, at Snyk Webinar · 2021 · Webinar Watch * Containers & cloud ### [Cloud Native Application Security: Embracing Developer-First Security for the Cloud Era](/speaking/talks/cloud-native-application-security-embracing-developer-first-security-for-the-cloud-era) Delivered once, at Black Haat USA 2021 · 2021 · Webinar Details * Node.js & web security ### [Security wins by starting out with Static Code Analysis for JavaScript projects](/speaking/talks/security-wins-by-starting-out-with-static-code-analysis-for-javascript-projects) Delivered once, at Snyk Webinar · 2021 · Webinar Watch * DevRel & community ### [SaaStock Local SG: Community-led Growth in Dev Tools](/speaking/talks/saastock-local-sg-community-led-growth-in-dev-tools) Delivered once, at SaaStock · 2021 · Webinar Details * Containers & cloud Signature talk ### [Securing Containers by Breaking In](/speaking/talks/securing-containers-by-breaking-in) Delivered 4× · 2019–2021 · Conference, Meetup Watch * Secure coding & AppSec ### [Stranger Danger! Your App is Only as Secure as your Weakest Line of Code](/speaking/talks/stranger-danger-your-app-is-only-as-secure-as-your-weakest-line-of-code) Delivered once, at Snyk Webinar · 2021 · Webinar Watch * Node.js & web security ### [I can use VS Code to hack into your development environment](/speaking/talks/i-can-use-vs-code-to-hack-into-your-development-environment) Delivered once, at Snyk Webinar · 2021 · Webinar Watch * Containers & cloud ### [How to Secure Docker Containers | Liran Tal](/speaking/talks/how-to-secure-docker-containers-or-liran-tal) Delivered once, at Francesco Ciulla's YouTube channel · 2021 · Webinar Watch * Containers & cloud ### [Mastering Node.js best practices for Docker-based applications](/speaking/talks/mastering-node-js-best-practices-for-docker-based-applications) Delivered once, at OpenJS World 2021 · 2021 · Conference Watch * Secure coding & AppSec ### [LIVE Panel on Security (moderated by Peter McKee)](/speaking/talks/live-panel-on-security-moderated-by-peter-mckee) Delivered once, at DockerCon 2021 · 2021 · Conference Watch * Secure coding & AppSec ### [Harnessing security expertise to power SAST and Code Security](/speaking/talks/harnessing-security-expertise-to-power-sast-and-code-security) Delivered once, at Snyk Webinar · 2021 · Webinar Watch * Software supply chain Signature talk ### [Are We Forever Doomed By Software Supply Chain Security?](/speaking/talks/are-we-forever-doomed-by-software-supply-chain-security) Delivered 5× · 2021 · Conference Watch * Software supply chain ### [Securing the Open Source supply chain](/speaking/talks/securing-the-open-source-supply-chain) Delivered once, at apidays Singapore · 2021 · Conference Details * Secure coding & AppSec Signature talk ### [Stranger Danger: Finding Security Vulnerabilities Before They Find You!](/speaking/talks/stranger-danger-finding-security-vulnerabilities-before-they-find-you) Delivered 10× · 2019–2021 · Conference, Meetup Watch * Software supply chain ### [Packages for mass consumption: the mechanics of npm dependencies](/speaking/talks/packages-for-mass-consumption-the-mechanics-of-npm-dependencies) Delivered once, at Codemotion Italy · 2021 · Conference Details * Containers & cloud ### [Docker Build: Securing Node.js containers](/speaking/talks/docker-build-securing-node-js-containers) Delivered once, at Docker Build · 2021 · Webinar Watch * Node.js & web security ### [Securing Node Applications with Automated Security Testing in CI/CD](/speaking/talks/securing-node-applications-with-automated-security-testing-in-ci-cd) Delivered 2× · 2021 · Meetup, Conference Watch * Containers & cloud ### [Docker Build: Creating Secure Node.js images with Liran Tal](/speaking/talks/docker-build-creating-secure-node-js-images-with-liran-tal) Delivered once, at Docker Build · 2021 · Webinar Watch * Secure coding & AppSec ### [Application Security Testing](/speaking/talks/application-security-testing) Delivered once, at TestJS Summit · 2021 · Conference Watch * Secure coding & AppSec ### [Next Generation Vulnerability Assessment Using Datadog and Snyk](/speaking/talks/next-generation-vulnerability-assessment-using-datadog-and-snyk) Delivered once, at DevOps.com · 2021 · Webinar Watch * Software supply chain ### [Trick or Treat, Hello Dependency Defeat](/speaking/talks/trick-or-treat-hello-dependency-defeat) Delivered once, at Community Summit TLV · 2020 · Conference Watch * Software supply chain Signature talk ### [Packages for Mass Consumption](/speaking/talks/packages-for-mass-consumption) Delivered 3× · 2020 · Conference Watch * Software supply chain Signature talk ### [The State of Open Source Security](/speaking/talks/the-state-of-open-source-security) Delivered 4× · 2019–2020 · Conference Watch * Node.js & web security ### [Securing Front-end Attack Surfaces](/speaking/talks/securing-front-end-attack-surfaces) Delivered once, at SnykCon · 2020 · Conference Watch * DevRel & community ### [Turn a weekend side-project into a 1500 stars GitHub project](/speaking/talks/turn-a-weekend-side-project-into-a-1500-stars-github-project) Delivered once, at Vonage Developer Hacktoberfest event 2020 · 2020 · Meetup Watch * Software supply chain ### [Malicious Modules on npm: a serious of unforunate events](/speaking/talks/malicious-modules-on-npm-a-serious-of-unforunate-events) Delivered once, at Technion Cyber-CYBERDAY 2020 · 2020 · Webinar Watch * Node.js & web security ### [Node.js Q&A with Gadi Raymond, Sanne Peters and Liran Tal](/speaking/talks/node-js-q-and-a-with-gadi-raymond-sanne-peters-and-liran-tal) Delivered once, at Geekle Node.js Summit · 2020 · Conference Watch * Containers & cloud Signature talk ### [Black Clouds and Silver Linings in Node.js Security](/speaking/talks/black-clouds-and-silver-linings-in-node-js-security) Delivered 7× · 2018–2020 · Conference, Meetup Watch * Secure coding & AppSec ### [Advancing DevSecOps in 2020 with Pete Cheslock, Liran Tal and Alyssa Miller](/speaking/talks/advancing-devsecops-in-2020-with-pete-cheslock-liran-tal-and-alyssa-miller) Delivered once, at Snyk Webinar · 2020 · Webinar Watch * Secure coding & AppSec ### [Practical DevSecOps](/speaking/talks/practical-devsecops) Delivered once, at MyDevSecOps · 2019 · Webinar Watch * Node.js & web security ### [Node.js Security WG Overview](/speaking/talks/node-js-security-wg-overview) Delivered once, at NODE+JS INTERACTIVE · 2019 · Conference Watch * Node.js & web security ### [¿Tu servidor con NodeJS es vulnerable?](/speaking/talks/tu-servidor-con-nodejs-es-vulnerable) Delivered once, at JSDay Canarias · 2019 · Conference Watch * Node.js & web security ### [Learning by Hacking OWASP's NodeGoat](/speaking/talks/learning-by-hacking-owasps-nodegoat) Delivered once, at Women of InfoSec · 2019 · Webinar Watch * Node.js & web security ### [Hacking Java and Node.js Apps](/speaking/talks/hacking-java-and-node-js-apps) Delivered once, at DevSecCon Seattle · 2019 · Workshop Details * Developer tooling & testing ### [Consumer-Driven Contracts: A better approach for API Testing](/speaking/talks/consumer-driven-contracts-a-better-approach-for-api-testing) Delivered once, at APIdays Barcelona · 2019 · Conference Watch * Secure coding & AppSec ### [From Zero to Hero Deploying HTTPS with Scott Helme](/speaking/talks/from-zero-to-hero-deploying-https-with-scott-helme) Delivered once, at The Secure Developer · 2019 · Webinar Details * Software supply chain ### [Securing Open Source Libraries](/speaking/talks/securing-open-source-libraries) Delivered once, at Snyk Webinar · 2019 · Webinar Watch * DevRel & community ### [So you want to engage with developers?](/speaking/talks/so-you-want-to-engage-with-developers) Delivered once, at DevRel IL · 2019 · Meetup Details * Secure coding & AppSec ### [The Three Faces of DevSecOps](/speaking/talks/the-three-faces-of-devsecops) Delivered once, at The Secure Developer · 2019 · Webinar Details * Node.js & web security ### [Web Security Workshop for Frontend Engineers](/speaking/talks/web-security-workshop-for-frontend-engineers) Delivered once, at JSHeroes · 2019 · Workshop Details * Software supply chain ### [Let's talk about Open Source Security](/speaking/talks/lets-talk-about-open-source-security) Delivered once, at JSHeroes Meetup · 2019 · Meetup Details * Software supply chain ### [Panel: The State of Open Source Security](/speaking/talks/panel-the-state-of-open-source-security) Delivered once, at DevSecCon · 2019 · Webinar Watch * Software supply chain ### [Open Source Security](/speaking/talks/open-source-security) Delivered once, at Ono Academic College · 2019 · Meetup Details * Software supply chain ### [OpenShift Commons Briefing: State of Open Source Security Report Review](/speaking/talks/openshift-commons-briefing-state-of-open-source-security-report-review) Delivered once, at OpenShift Commons · 2019 · Webinar Watch * Secure coding & AppSec ### [CTF Challenge](/speaking/talks/ctf-challenge) Delivered once, at Magshimim Cyber Education Center · 2019 · Conference Details * Node.js & web security ### [The Node.js Security WG Session](/speaking/talks/the-node-js-security-wg-session) Delivered once, at Node.js Collab Summit · 2018 · Meetup Details * Node.js & web security ### [Panel: Building A Secure Ecosystem for Node.js](/speaking/talks/panel-building-a-secure-ecosystem-for-node-js) Delivered once, at Node+JS Interactive · 2018 · Conference Watch * Developer tooling & testing ### [Jest Testing Patterns](/speaking/talks/jest-testing-patterns) Delivered 2× · 2018 · Conference Watch * Node.js & web security Signature talk ### [Node.js Security: Breaking The Loop](/speaking/talks/node-js-security-breaking-the-loop) Delivered 3× · 2017–2018 · Conference Watch * Developer tooling & testing ### [Making The Terminal Great Again](/speaking/talks/making-the-terminal-great-again) Delivered once, at JSHeroes · 2018 · Conference Watch * Node.js & web security ### [Essential Node.js & JavaScript Web Security](/speaking/talks/essential-node-js-and-javascript-web-security) Delivered once, at Node.js Web Security Workshop · 2017 · Workshop Details * Secure coding & AppSec ### [Effective Git Workflows](/speaking/talks/effective-git-workflows) Delivered once, at Codecamp · 2017 · Workshop Details * Secure coding & AppSec ### [Clean Code and & Design Patterns](/speaking/talks/clean-code-and-and-design-patterns) Delivered once, at Cluj JavaScripters · 2017 · Meetup Details * Node.js & web security ### [Demystifying Node.js Security](/speaking/talks/demystifying-node-js-security) Delivered 2× · 2017 · Meetup, Conference Details * Node.js & web security ### [Seamless SecOps for Node.js](/speaking/talks/seamless-secops-for-node-js) Delivered once, at DevSecOps IL · 2017 · Meetup Details * Node.js & web security ### [Node.js Security Done Right](/speaking/talks/node-js-security-done-right) Delivered once, at OWASP AppSec Israel · 2016 · Conference Watch * Node.js & web security ### [Node.js Security & SecurityOps](/speaking/talks/node-js-security-and-securityops) Delivered once, at HPE Software Meetup · 2016 · Meetup Details * Node.js & web security ### [קוד פתוח וחבילת MEAN: עלייתן של תשתיות פיתוח מבוססות JavaScript](/speaking/talks/mean-javascript) Delivered once, at August Penguin 2016 · 2016 · Conference Watch * Software supply chain ### [HPE Open Source Hackathon Meetup](/speaking/talks/hpe-open-source-hackathon-meetup) Delivered once, at HPE Open Source Hackathon · 2016 · Meetup Details * Software supply chain ### [HPE Open Source Day with GitHub](/speaking/talks/hpe-open-source-day-with-github) Delivered once, at HPE Open Source Day · 2016 · Meetup Details * Software supply chain ### [The Rise of Open Source && MEAN Stack in the Enterprise](/speaking/talks/the-rise-of-open-source-and-and-mean-stack-in-the-enterprise) Delivered once, at helloJS · 2016 · Conference Watch * Software supply chain ### [Welcome to Open Source and GitHub](/speaking/talks/welcome-to-open-source-and-github) Delivered once, at HPE Internal Meetup · 2016 · Meetup Watch * Developer tooling & testing ### [Drupal 7 Media](/speaking/talks/drupal-7-media) Delivered once, at Drupal Camp Israel · 2013 · Conference Watch No talks match these filters. ## Next up [Full schedule](/speaking/events) * [🇮🇱 Tel Aviv, Israel LLMDay + Data TLV Nov 17](/speaking/events/2026-11-17-llmday-data-tlv) ## Been there * [🇮🇱 Israel](/speaking/events?country=IL) 56 * [🇷🇴 Romania](/speaking/events?country=RO) 15 * [🇪🇸 Spain](/speaking/events?country=ES) 10 * [🇺🇸 United States](/speaking/events?country=US) 7 * [🇬🇧 United Kingdom](/speaking/events?country=GB) 6 * [🇳🇱 Netherlands](/speaking/events?country=NL) 5 * [🇮🇹 Italy](/speaking/events?country=IT) 5 * [🇮🇪 Ireland](/speaking/events?country=IE) 5 * [🇨🇦 Canada](/speaking/events?country=CA) 5 * [🇭🇷 Croatia](/speaking/events?country=HR) 3 * [🇨🇭 Switzerland](/speaking/events?country=CH) 3 * [🇩🇪 Germany](/speaking/events?country=DE) 2 * [🇫🇮 Finland](/speaking/events?country=FI) 2 * [🇫🇷 France](/speaking/events?country=FR) 2 * [🇺🇦 Ukraine](/speaking/events?country=UA) 2 * [🇸🇪 Sweden](/speaking/events?country=SE) 1 * [🇨🇿 Czech Republic](/speaking/events?country=CZ) 1 * [🇭🇺 Hungary](/speaking/events?country=HU) 1 * [🇱🇹 Lithuania](/speaking/events?country=LT) 1 * [🇵🇱 Poland](/speaking/events?country=PL) 1 * [🇧🇬 Bulgaria](/speaking/events?country=BG) 1 Booking 2027 ## Tell me about your event. Conference keynote, meetup talk, workshop or podcast: send me the audience, the format and the dates, and I'll tailor a session to fit. [Invite me to speak](https://www.linkedin.com/in/talliran) [Message me on X](https://x.com/liran_tal) [Browse the talks](/speaking/talks)