OWASP Phoenix: Beyond the Web App, What the OWASP Top 10 Means for SDKs

Beyond the Web App: What the OWASP Top 10 Means for SDKs (\~30 min) The OWASP Top 10 is written primarily for web applications—but what does it mean when your product is an SDK embedded inside someone else’s software? This talk examines which risks fall directly under the SDK vendor’s control, which belong to the integrator, and where responsibility is shared. We will explore the infrastructure Datalogics Enterprise Software created around a curated Conan Center Index to keep C/C++ open-source dependencies current and secure without sacrificing repeatability, testing, or release confidence.