Skip to content

We'll See You at RSA 2026: Let’s Talk Stopping Mobile API Abuse at the Source

RSA conference 2026

RSAC is one of those weeks where the cybersecurity community actually gets in the same room, to compare notes, pressure-test ideas, and leave with a clearer view of what’s working in the real world.That’s why I’m excited that Approov will be attending RSA Conference 2026 (March 23–26) at the Moscone Center in San Francisco.

Approov will be represented by:

  • Ted Miracco (CEO) will be on site meeting with customers, partners, and industry leaders
  • Mark Mazur (Field CTO) will be there for deep technical conversations, architecture, integrations, and practical rollout strategies
  • And I’ll be there as well, focused on connecting with teams who want to reduce mobile fraud and API abuse without adding friction for real users

If you’ll be at RSAC, whether you’re a prospective partner, new prospect, existing customers, a customer of our partner Cloudflare, or if you’re interested to learn more about Approov’s technology, I’d genuinely love to meet.

RSAC’s theme this year is The Power of Community Starts with You, and it’s a good reminder that the best defenses aren’t built in isolation.

A Quick Look Back: What we Brought to RSAC Last Year

At RSAC 2025, Ted joined Dark Reading for a News Desk conversation about what he bluntly called the mobile app security “cesspool.” The message directly addressed what Approov has long championed: stop hard-coded credentials, prioritize over-the-air updates, and don’t assume an app store listing equals security vetting.

One stat from that discussion that continues to resonate: Ted cited a study where 92% of examined mobile apps had API keys hardcoded inside them, where attackers can exploit via static or dynamic analysis.

These vulnerabilities are exactly what Approov’s cloud-based attestation technology prevents, and it’s a big part of what we’ll be talking about at RSAC 2026.

What I’m Hoping to Discuss at RSAC 2026

This year, we’re excited to share some new updates to Approov, and what we’re working on to extend our cloud-based defense systems, and stronger integration with Cloudflare.

At RSA, I’m looking forward to the panelists and discussing topics including:

  • Stopping bots and scripted traffic that “looks” like your app
  • Blocking fake, repackaged, or tampered apps from reaching your backend
  • Protecting APIs when the client must be treated as hostile
  • Reducing exposure from secrets in mobile apps
  • Preventing man-in-the-middle interception and replay in mobile-to-API traffic flows
  • Practical paths to enforcement

Cloudflare/ Prospective Cloudflare Customers: Let’s Connect

If your perimeter/edge strategy includes Cloudflare, we’re excited our partners will be joining the event as well. Approov and Cloudflare are great complements to one another. Approov verifies the legitimacy and integrity of the mobile app + device at runtime, and Cloudflare enforces policy at the edge, blocking unwanted traffic before it burns backend resources.

If that aligns with what you’re building (or what you wish your current stack could do), Mark and I would love to dive into it with you.

Meet us at the booth or at Cloudflare After Dark. It’s a great, low-pressure place to connect.

If you’re going, say hello. I’ll be there with Ted and Mark.

Who We’d Love to Meet

If you’re attending RSA 2026 and any of these sound familiar, let’s grab time:

Prospective customers

  • You’re seeing API abuse, scraping, automated fraud, or traffic that bypasses your app entirely
  • You’ve found “legitimate” traffic patterns aren’t the same as “legitimate app instances”

Existing customers

  • You want to expand coverage, tighten enforcement safely, or align mobile security with broader Zero Trust goals

Prospective partners

  • You build or deliver API security, fraud prevention, identity, mobile app security, or observability solutions—and want to explore a joint story

Cloudflare customers

  • You’re using Cloudflare for WAF/Bot/API controls and want stronger assurance about what is calling your APIs, not just how the traffic behaves

Want to Meet at RSAC? Here’s the Easiest Way

If you’d like to meet during RSAC week, reach out and I’ll coordinate a time with the right person on our team (Ted for executive/strategy, Mark for technical deep dives, me for use cases, rollout planning, and commercial alignment).

See you in San Francisco!