BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-tallinn-2026//speaker//3AUNGN
BEGIN:VTIMEZONE
TZID:Europe/Helsinki
BEGIN:DAYLIGHT
DTSTART:20250925T000000
TZNAME:EEST
TZOFFSETFROM:+0300
TZOFFSETTO:+0300
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T040000
RDATE:20261025T040000
TZNAME:EET
TZOFFSETFROM:+0300
TZOFFSETTO:+0200
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T040000
RDATE:20270328T040000
TZNAME:EEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0300
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:We have Mythos at home - Andres Jõgi\, Dadash
DTSTART;TZID=Europe/Helsinki:20260925T173000
DTEND;TZID=Europe/Helsinki:20260925T181500
DTSTAMP:20260926T112200Z
UID:pretalx-bsides-tallinn-2026-88YHPJ@pretalx.com
DESCRIPTION:Bolt's product security team secures applications for over 200
  million customers and 4.5 million partners across 600+ cities in 50 count
 ries.\n\nDespite this scale\, our request to gain access to Mythos-class m
 odels was left on read. So we decided to build our own tooling around mode
 ls we already had to figure out whether we should feel scared or empowered
  due to the rise of AI-powered vulnerability finders.\n\nThis talk is a st
 ory of what happens when you duct-tape "good enough" models into a securit
 y reviewer for a codebase serving more than 5 billion requests per day. We
  will share our experience of building layers  of deterministic scaffoldin
 g and multi-agent cross-checking to keep the TP to FP ratio under control.
 \n\n**Attendees will gain insights into:**\n* **Architecture on a budget:*
 * Why "deterministic pipeline first\, LLM last" beats throwing a whole cod
 ebase at a model and praying.\n* **Multi-agent QA:** How worker agents plu
 s a validator agent cut false positives\, assign vibes-based severity rati
 ngs and where that pattern still falls apart.\n* **Wins and misses:** Conc
 rete findings our tool caught that humans missed - and why vice versa migh
 t not matter.\n* **Prompting for security:** Why narrow\, focused scopes p
 roduce accurate findings and generic "find the vulns" prompts produce find
 ing-shaped garbage.
LOCATION:Stage A
URL:https://pretalx.com/bsides-tallinn-2026/talk/88YHPJ/
END:VEVENT
END:VCALENDAR