Skip to main content

I speak at conferences and industry events about software supply chain security — SBOMs, the EU Cyber Resilience Act, DevSecOps, and what it actually takes to ship secure software. The material comes out of running Screenly and sbomify, and out of co-leading one of CISA's SBOM tiger teams.

Keynotes, conference talks, workshops and panels — plus the occasional stint as MC. If you're putting a programme together and one of those would be useful, get in touch.

40
Talks & Panels
19
Cities
13
Years on Stage

Where to find me next

talk Upcoming 2026

Nordic Software Security Summit Fall '26

Stockholm, Sweden
panel Upcoming 2026

You're STILL not ready for the CRA

London, UK

Article 14 in practice

Previous appearances

2026
panel

44CON

London, UK

Being a CISO in 2026 - panel with Wendy Nather

host

44CON

London, UK

MC for Hacker Jeopardy

talk

FOSDEM

Brussels, Belgium

CRA-Ready SBOMs: A Practical Blueprint for High-Quality Generation

talk

QCon London

London, UK

From Chaos to Clarity: Modern SBOM Practices That Actually Work

panel

Digital Signage Summit Europe

Munich, Germany

Cybersecurity in Digital Signage - Unpatched, Unsecured, Unprotected

panel

Digital Signage Summit Europe

Munich, Germany

AI Spotlight

panel

Digital Signage Summit Europe

Munich, Germany

Security Reality Check: 90% of Signage Software Is Not Secure

2025
panel

Digital Signage Summit Europe

Munich, Germany

AI & Trust / Cybersecurity / Challenges

talk

DevOps Exchange

London, UK

Securing Your Software Supply Chain: Why SBOMs Are Essential for DevOps and Compliance

talk

Dependency Track Community Meeting

sbomify @ Dependency Track Community Meeting (2025-11-05)

2024
talk

State of Open Con

London, UK

Screenly’s Journey: Raspberry Pi to x86, BIOS, Coreboot, RISC-V

talk

BSides

Bristol, UK

Navigating The SBOM Landscape: Formats, Relevance, And Tooling In 2024

talk

SBOM-a-Rama

Denver, US
talk

London DevOps #85

London, UK

The Essential Role of SBOMs

talk

Canonical (Ubuntu) Engineering Sprint

The Hague, Netherlands
talk

CycloneDX / Transparency Exchange API (TEA)'s KoalaCon

2023
talk

Ubuntu Summit

Riga, Latvia

From Pets to Cattle: Revolutionizing Edge Computing with Screenly’s Edge Apps

talk

#QSRNext

Virtual

Beyond Just a Menu Display

2022
talk

Ubuntu Summit

Prague, Czech Republic

Five Years of Ubuntu Core

2020
talk

Cloud Native London

London, UK

The DevSecOps Iceberg

2019
talk

Docker London

London, UK
talk

Open Source Summit Europe

Lyon, France

The ‘S’ in IoT Stands for Security

talk

Kubernetes London

London, UK
talk

InfoSecurity Europe

London, UK
2018
talk

Open Source Summit North America

Vancouver, Canada

The ‘S’ in IoT Stands for Security

talk

Container Camp

Melbourne, Australia

The ‘S’ in IoT Stands for Security

talk

Ansible London

London, UK
2016
panel

CloudExpo Europe

London, UK
talk

IoT London

London, UK
2015
talk

IoT Day @ BBVA Innovation Center

Madrid, Spain
talk

Open Cloud Day

Bern, Switzerland
talk

ApacheCon North America

Austin, TX
talk

CloudExpo Europe

London, UK
panel

CloudExpo Europe

London, UK
2014
talk

Zadara Summit

Las Vegas, NV
2013
talk

Pi And More 3

Trier, Germany
talk

gSocial 2

Sunnyvale, CA
2012
talk

NoSQL Road Show

Basel, Switzerland

Looking for press coverage, interviews and podcast appearances instead? Those live on the about page.