BSides Vancouver 2026

Machine-speed output + Human-speed oversight. That's the structural mismatch defining application security in 2026. Security budgets are at record highs, 100% tooling coverage is our never-ending future state, but many organizations are experiencing worse security outcomes. 

Our industry's popular narrative says AI-generated code demands more aggressive scanning. This is the wrong framing. The bottleneck isn't coverage, it's organizational context. Traditional tools audit binary nodes (Is MFA on? Is there a hard coded secret?) while ignoring the paths that actually create risk (remember ASPM?). The result is a wall of noise that users have learned to ignore.

In this talk, I will describe the need for the shift from Pipeline Enforcement, which breaks at velocity, to Contextual Intelligence, which scales with it. By applying Graph Neural Network (GNN) principles as an enrichment layer, we replace binary gates with a relational foundation that surfaces what actually matters.