Web-conference for Java developers focused on hands-on strategies for building high-performance containers, eliminating CVEs, and detecting security issues before production.
Patrick Baumgartner - 42talents, Java ChampionSpring Boot and Paketo Buildpacks make containerizing Java apps easy. But what really happens inside that build image?
In this talk, we'll open the box and get our hands dirty extending the buildpack pipeline ourselves. You'll see how Buildpacks detect, compile, and launch Spring Boot applications, and how to hook into that flow to add your own features.
As a real-world example, we'll build something that's missing today: an AOT (Ahead-of-Time) caching layer that cuts startup and image build time. We'll inject it into a custom buildpack, rebuild the classic Spring Petclinic app, and benchmark the impact together.
This session is for developers who already use Spring Boot but want to understand, customize, and optimize the container build process. Expect a mix of live coding, real metrics, and a few "aha!" moments.
Grigorii Liullin - JetBrains, Security Tooling Team LeadIn this talk, we'll explore integrating security into development workflows right inside your IDE. Using a shift-left approach, developers can detect and fix security issues early in the development process.
We'll review JetBrains IDE tools for security purposes, including identifying security flaws through taint analysis, pattern matching, inspections, and managing vulnerable and malicious dependencies. For the talk, we'll focus on Java and Kotlin languages and related technologies and frameworks.
This session is for developers and security engineers wanting to improve application security with hands-on, developer-focused techniques.
Catherine Edelveis - BellSoft, Developer AdvocateThe biggest security risk is not the application code, but the base image you ship it with as it contains most CVEs. But fixing vulns in situ is a road to nowhere: you will waste engineering time, delay deploys, and race against the clock as new CVEs emerge constantly. The only viable solution is to harden the container image from the start.
This session explores what hardened images are and how this approach cuts the CVEs to almost zero, reduces MTTP, scanner noise, and operational toil. We will walk through containerizing a Java service on a hardened base with best security practices in place and compare the CVE numbers before and after. The outcome: lean, transparent, deterministic container image that is secure by design, not by word.
Extend Paketo buildpacks with custom AOT caching layers
Benchmark real performance gains with hands-on examples
Software Crafter for 42talents
@patbaumgartner
Patrick Baumgartner is a Java Champion, passionate software crafter, and technical agile coach at 42talents. He helps teams build elegant, simple, and robust solutions, specializing in cloud software with Java, the Spring ecosystem, and other open-source technologies.
Patrick is an active member of the Software Craft, Java, and Agile communities in Switzerland. As a trainer and coach, he focuses on making a real impact by sharing knowledge, experimenting, and fostering continuous improvement. He enjoys learning with and from others.
Security Tooling Team Lead at JetBrains
@grigorii-liullin
I’m a Security Tooling Team Lead at JetBrains, working on tools to detect and prevent vulnerabilities in our products. Previously, I was a Security Engineer at Wrike and a Software Developer at T-Systems, gaining knowledge about both building and securing software. I’m interested in application security automation, SAST and SCA tooling, and practical security approaches.
Developer advocate for Liberica JDK
@cat_edelveis
Catherine Edelveis is a Developer Advocate at BellSoft and the co-host of CyberJAR, a YouTube channel dedicated to practical, state-of-the-art Java. She is focused on the JVM ecosystem and helps teams ship performant and secure cloud-native Java applications using modern OpenJDK capabilities and proven open-source tools. Passionate about sharing knowledge, she is a conference speaker, an active technical writer, and a host of regular livestreams with leaders from across the Java community.
A series of free online seminars on Java development and all the latest trends of the industry.
We aim to provide no-nonsense compact interactive speakings with valuable insights. All the data, including the presentations and code snippets, are available for download.
The event is free for all subscribers.
Access to all previous videos, presentations, and data; an opportunity to take part in future live events.
Click the button, fill the form, share your email.
We invite people from all over the world, and we like to give them equal participation opportunities, so we made JRush an online-only event with interactive tools for submitting your commentaries and questions.
We guarantee the privacy of your information. We will never collect or share it with third parties.
Leave your details to get a broadcast link before JRush and a recording after the conference ends.
You will automatically join the BellSoft community and get a subscription to the JRush series.
Copyright © 2025 All rights reserved BellSoft LTD