On May 22nd, we held a new cybersecurity event in Logroño, attended by numerous professionals and enthusiasts from the security field.

Taking advantage of the upcoming OWASP Global AppSec EU 2025 in Barcelona, several international speakers graciously came to Logroño to present their talks.

We enjoyed three top-tier technical talks:

# From Burp to DFD: Using Threat Modeling to Strengthen API Security

Takaharu Ogasa is a prominent Japanese cybersecurity professional, specializing in penetration testing (pentesting) and threat modeling. He is the founder and current leader of the OWASP Sendai chapter, a local initiative of the Open Web Application Security Project (OWASP) in Japan.

In his presentation, he discussed API Pentesting, the limitations of automatic scanners, and the importance of threat modeling in analyses.

# Introduction to ZAP

Pablo Gómez, co-founder of Redsauce and co-leader of OWASP Logroño, shared several practical use cases for the ZAP analysis tool.

And it doesn’t end here, because it’s not all about showing slides; we’ll soon be organizing a practical workshop to delve deeper into its use.

# How I reduced my AppSec workload (by 70%)

Spyros Gasteratos, currently based in London, is the founder and CEO of Smithy.security, a company that develops open-source products to simplify security in software development.

Spyros presented his tool, Smithy, which aims to help orchestrate workflows. With simple configuration, it allows for integrating multiple tools, reducing repetitive manual tasks, standardizing security in DevSecOps environments, and thus significantly reducing the effort spent on application security.

The day didn’t conclude with the technical talks; it extended into a relaxed atmosphere where we had the opportunity to continue conversing with the speakers and other attendees while enjoying some wine.

Thanks to everyone who attended, because without you, it wouldn’t make any sense, and to SDi for lending us their facilities for the occasion.

📆 See you at the next event!