Loading…
GraphQLConf 2026 has ended
May 19 - 20 | In-Person Only
GraphQLConf 2026 website

The Sched app allows you to build your schedule but you must also be registered for GraphQLConf 2026 to participate in the sessions.

Please note: This schedule is automatically displayed in Pacific Daylight Time (UTC-7). To see the schedule in your preferred timezone, please select from the drop-down located at the bottom of the menu to the right.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.
Type: Security clear filter
arrow_back View All Dates
Tuesday, May 19
 

3:20pm PDT

The Invisible Fortress: Embedding Zero-Trust Governance in the Supergraph - Gaurav Singh & Sulbigar Shanawaz, Capital One
Tuesday May 19, 2026 3:20pm - 3:45pm PDT
In high-stakes industries, a GraphQL schema is more than a technical contract—it is a live map of your enterprise’s risk surface. For security teams, schema modifications are often "black box" events that threaten data integrity. To scale safely, we must move beyond manual gatekeeping to a Zero-Trust Supergraph where security is an invisible, automated fortress.

We will present a framework for Embedded Governance to bridge engineering and enterprise risk. Learn how to transform your graph's technical "menu" into a transparent Data Marketplace with radical observability, ensuring built-in security and compliance.

Attendees will learn to:
- Navigate the Risk Primer: Translate GraphQL features (types, fields, directives) into risk language to build organizational trust.
- Shift Security Left: Automate security with secure frameworks & replacing manual reviews.
- Architect for Data Isolation: Use of fine grained access to manage entitlements and prevent unauthorized data exposure.
- Harden the Control Plane: Reduce attack surface using technical strategies like disabling introspection and enforcing persisted query ownership.
Speakers
avatar for Gaurav Singh

Gaurav Singh

Distinguished Engineer, Capital One
Gaurav Singh serves as a Distinguished Engineer and Cybersecurity Architect at Capital One. His contributions were pivotal in the enablement of GraphQL Federation throughout the enterprise, which involved the introduction of open-source GraphQL federation products , a dedicated GraphQL... Read More →
avatar for Sulbigar Shanawaz

Sulbigar Shanawaz

Distinguished Engineer, Capital One
Sulbigar Shanawaz is a Distinguished Engineer at Capital One, where he leads architectural strategy for the Enterprise Entitlements platform. He specializes in centralizing customer data security by engineering robust validation frameworks for regulatory, compliance, and audit requirements across hig... Read More →
Tuesday May 19, 2026 3:20pm - 3:45pm PDT
Boardroom
  Security
  • Audience Level Any
  • Presentation Slides Attached Yes
 
  • Filter By Date
  • Filter By Venue
  • Filter By Type
  • Audience Level
  • Presentation Slides Attached
  • Timezone

Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.
Filtered by Date -