Speaking · Booking 2027
Security talks, hacked live on stage.
Talks, workshops and podcasts about AI and agentic security, software supply chain attacks and Node.js secure coding. Most sessions break a real application in front of the audience and then fix it. Every talk is adapted to its audience, in English or Hebrew.
- talks delivered
- 225 talks delivered · conferences, meetups, webinars
- countries
- 21 countries · 42 cities
- recordings
- 136 recordings · talks and podcasts on video
- on stage since
- 2013 on stage since · 3 languages
-
🇮🇱 LLMDay + Data TLV
Tel Aviv, Israel · Talk: From Second Brain to AI Chief-of-Staff: Engineering an Assistant That Runs Your Workweek
Upcoming Meetup -
🇺🇸 AGNTCon + MCPCon North America 2026
San Jose, California, United States · Talk: Your AI Agent Installed Malware Because a SKILL.md Told It To
Recently Conference -
🇺🇸 AI Security Summit
San Francisco, California, United States · Talk: Open Source at the Inflection Point: A Fireside Chat with Anthropic on AI-Powered Defense
Recently Conference -
🇳🇱 AGNTCon + MCPCon Europe 2026
Amsterdam, Netherlands · Talk: Giving Your Agentic Coding AI a Security Brain
Recently Conference
Things I talk about.
-
41 talks · 63 deliveries
Node.js & web security
Live hacking of Node.js, React and TypeScript applications: path traversal, prototype pollution, injection and how to fix them.
Most requested: Char Wars: The Path Traversal Strikes Back
-
33 talks · 51 deliveries
Software supply chain
Malicious npm packages, typosquatting, lockfile injection and the state of open source security, told through real incidents.
Most requested: Are We Forever Doomed By Software Supply Chain Security?
-
25 talks · 37 deliveries
Secure coding & AppSec
Security testing, secure coding practices and building security into the development workflow.
Most requested: Stranger Danger: Finding Security Vulnerabilities Before They Find You!
-
23 talks · 32 deliveries
AI & agentic security
How LLMs, coding agents and MCP servers get tricked into shipping vulnerable code or running malware, and the guardrails that stop them.
Most requested: Your AI Agent Installed Malware Because a SKILL.md Told It To
-
10 talks · 19 deliveries
Containers & cloud
Breaking into Docker images and serverless functions to show what attackers find there.
Most requested: Black Clouds and Silver Linings in Node.js Security
-
12 talks · 17 deliveries
DevRel & community
Developer advocacy, open source contribution and growing developer communities.
Most requested: The Secret Life of Developer Advocates
-
5 talks · 6 deliveries
Developer tooling & testing
Testing patterns, API contracts, CLI craft and the developer tooling that ships with them.
Most requested: Jest Testing Patterns
Recordings
Watch a recent talk.
Formats
- 119
- Conference talks
Main-stage and track sessions at developer and security conferences.
- 55
- Meetup talks
Community evenings: more conversational, more questions, more pizza.
- 41
- Webinars & livestreams
Virtual sessions and livestreams with live Q&A.
- 11
- Workshops
Hands-on sessions where attendees hack, then fix, real applications.
- 44
- Podcast episodes
Guest appearances on developer and security podcasts.
- 3
- Guest articles
Guest posts written for partner and vendor blogs.
Year by year
Been there
From the audience
What people say.
-
“After being in a workshop by @liran_tal and realizing that RegExps can be exploited fairly easily, I decided to use a validation library. I even contributed to the @DefinitelyTyped definition of it :D”
Fernando Carrascosa · Tech Lead -
“Thanks Liran! The island tech community is wonderful and we're proud to be part of it. Your presentation was fantastic and spurred discussion at our firm about how to be more deliberate about web security.”
Sebastian Good · Co-founder of @experoinc -
“Being part of @canariasjs staff gives me the privilege to attend and record @liran_tal workshop. Wonderful professional and better person. #JSDayCAN2022”
Goyo Regalado · Software Engineer -
“Excellent talk by @liran_tal at @devseccon TLV. We know that open source packages are dangerous - containers contain lots of them and are VERY dangerous!”
Ethan Schorer · AppSec Team Leader, Monday.com -
“Convinced I gotta get @snyksec into my projects after seeing @liran_tal's talk on security. @VoxxedFrontend”
Vlad Durnea · CEO @madapes
Booking 2027
Tell me about your event.
Conference keynote, meetup talk, workshop or podcast: send me the audience, the format and the dates, and I'll tailor a session to fit.