DeveloperWeek 2025: Full Schedule

9:30am PST

OpenAPI Summit: The Third-Wave of API Management

Wednesday February 12, 2025 9:30am - 9:55am PST

Adrian Machado, Zuplo, Staff Engineer

The third-wave of API management is here. There are several trends that engineers and technical leaders need to know so they can choose the right tools and platforms for building their APIs. Trends include
1. Modernization around API gateways - The move towards GitOps over server configuration, and Edge over regional deployments
2. Centralization around OpenAPI and new tooling that's emerged
3. A strong focus on API DevX - what API-as-a-product really looks like in practice and the companies pushing the envelope. SDK generation, docs platforms, and more take center stage.

The talk will cover technology and tools engineering leaders should look to adopt and the benefits/drawbacks

Speakers

Adrian Machado

Staff Engineer, Zuplo

I am a Staff Software engineer working at Zuplo. I specialize in our open source technology and adopting emerging technologies (ex. AI) at the company. This includes our work on RateMyOpenAPI, Zudoku, Mockbin, and various other tools. I've written several blogs for Zuplo, and spoken... Read More →

Wednesday February 12, 2025 9:30am - 9:55am PST
DevExec World Stage

Dev Exec World

Tracks & Topics APIs & Microservices, API Certificate
Session Type OPEN Session
Conferences OpenAPI Summit, OPEN Session
In-Person/Virtual In Person

2:30pm PST

OpenAPI Summit: API Governance in the age of AI

Wednesday February 12, 2025 2:30pm - 2:55pm PST

DevExec World Stage

Olga Podolyako, Microsoft, Principal API Architect

API governance faces a big challenge today to balance the need for speed and innovation in API products with the assurance of their quality and security. Recently we learned that AI technologies such as AI agents can increase the productivity of knowledge workers, which include software engineers and architects, by up to 29% in industries that use them such as health care, law and finance. The purpose of today’s talk is to explore how AI technology can help with API governance.

Speakers

Olga Podolyako

Principal API Architect, Microsoft

Olga is a Principal API Architect at Microsoft. After a long career in development Olga found her passion in the architecture professions working in roles such as business, integration, and enterprise architect. Currently Olga focuses on the API architecture and governance for Microsoft... Read More →

Wednesday February 12, 2025 2:30pm - 2:55pm PST
DevExec World Stage

AI DevWorld

Tracks & Topics APIs & Microservices, API Certificate
Session Type OPEN Session
Conferences OPEN Session, OpenAPI Summit, AI DevWorld, AI Ethics (AI DevWorld), Healthcare & HealthTech AI (AI DevWorld)
In-Person/Virtual In Person

3:00pm PST

OpenAPI Summit: API Resiliency Testing

Wednesday February 12, 2025 3:00pm - 3:25pm PST

DevExec World Stage

Hari Krishnan, Specmatic, Polyglot Full Stack Developer

Are your APIs leaving you worried about data loss, data corruption, security vulnerabilities, or poor user experiences? If so, this talk is exactly what you need to address these issues. Discover how you can leverage your API specifications—like OpenAPI, AsyncAPI, and GraphQL SDLs—to test and enhance the resiliency of your APIs with a completely #NOCODE approach.

In this talk, you’ll gain insights into the importance of API resilience and how to build APIs that can gracefully handle flaky dependencies in real-world scenarios. We’ll explore the role of contract testing in ensuring resilience and demonstrate how to transform API specifications into executable contracts that can be continuously validated. You’ll see how to set up resilience tests, including those for latency, errors, and unexpected disconnections. The session features live demos on configuring tools to simulate these conditions, interpret the results, and iteratively enhance your API designs.

Speakers

Hari Krishnan

Polyglot Full Stack Developer, Specmatic

Co-creator of Specmatic and Perfiz. I also advise organisations both large and small on their transformation journey. Apart from bringing ideas to life as working software products, I coach developers, project managers, product owners and engineering leaders.

Wednesday February 12, 2025 3:00pm - 3:25pm PST
DevExec World Stage

Dev Exec World

Tracks & Topics APIs & Microservices, API Certificate, Security Certificate
Session Type OPEN Session
Conferences OPEN Session, OpenAPI Summit, Dev Exec World
In-Person/Virtual In Person

9:30am PST

[Virtual] OpenAPI Summit: The Third-Wave of API Management

Wednesday February 19, 2025 9:30am - 9:55am PST

VIRTUAL Dev Exec World

Speakers

Adrian Machado

Staff Engineer, Zuplo

Wednesday February 19, 2025 9:30am - 9:55am PST
VIRTUAL Dev Exec World

Dev Exec World

Tracks & Topics APIs & Microservices, API Certificate
Session Type OPEN Session
Conferences OpenAPI Summit, OPEN Session, Virtual
In-Person/Virtual Virtual

2:30pm PST

[Virtual] OpenAPI Summit: API Governance in the age of AI

Wednesday February 19, 2025 2:30pm - 2:55pm PST

VIRTUAL Dev Exec World

Speakers

Olga Podolyako

Principal API Architect, Microsoft

Wednesday February 19, 2025 2:30pm - 2:55pm PST
VIRTUAL Dev Exec World

AI DevWorld

Tracks & Topics APIs & Microservices, API Certificate
Session Type OPEN Session
Conferences OPEN Session, OpenAPI Summit, Virtual, AI DevWorld, AI Ethics (AI DevWorld), Healthcare & HealthTech AI (AI DevWorld)
In-Person/Virtual Virtual

2:30pm PST

[Virtual] OWASP Security Summit: API Security 101: How to Not Be Featured in a Top Ten Breaches List

Wednesday February 19, 2025 2:30pm - 2:55pm PST

VIRTUAL Dev Security World

Dan Barahona, APISec, Co-Founder

This talk will dive into the fundamentals and best practices for API Security. By understanding the 3 Pillars of API Security, encompassing governance, testing and monitoring, attendees will gain a comprehensive understanding of the essential elements required to safeguard APIs. The session will conclude with practical insights, offering best practices and valuable do's and don'ts for implementing and maintaining secure APIs.

Why are APIs under attack?
-83% of internet traffic are APIs
-APIs are under-secured

How do APIs get attacked?
Attackers look for APIs that are over-permissioned, return to much information, access unauthorized functions, and expose logic flaws. Attackers are able to bypass a web or mobile app and hit the API directly.

OWASP top 10!!
#1-#4 are the biggest issues

More compliance regulations are including testing APIs.
-PCI
-HIPPA
-GDPR
-FedRAMP

Speakers

Dan Barahona

Co-Founder, APIsec University

Dan is a 20+ year cybersecurity veteran, having held exec positions at companies including Qualys, ArcSight, Anomali and APIsec. He founded APIsec University in 2022 to offer free, non-vendor training on API security. The site has grown to over 50,000 students in its first 6 months... Read More →

Wednesday February 19, 2025 2:30pm - 2:55pm PST
VIRTUAL Dev Security World

Dev Security World

Tracks & Topics APIs & Microservices, Security Certificate, API Certificate
Session Type OPEN Session
Conferences Dev Security World, Virtual, OPEN Session, OWASP Certified
In-Person/Virtual Virtual