World-Class, Expert-Led Cybersecurity Training. Purpose-Built for the AI Era.

The Exposure Gap: From Vulnerability Management to AI-Driven Attack Surface Control

Attack surfaces are expanding while attackers move faster than ever. Traditional vulnerability management can’t keep up. Learn how AI-driven exposure management improves visibility, prioritization, and reduces real-world risk.

Breaking the Black Box: An Introduction to Adversarial AI

It’s no secret that artificial intelligence now plays a critical role in most modern enterprises. It does everything from screening resumes to triaging security alerts to even generating code, often without human oversight.

AI/ML: Defend and Attack

We'll discuss the current state of operational deployment in security operations, worthwhile use and implementation scenarios, and guide you on the risks and potential exposures by talking through current attack vectors in AI/ML workflows and agentic applications.

2026 SANS SOC Survey Insights: A Decade of Evolution in Cyber Defense

Over the past few years, the cyber threat landscape has been defined by supply chain compromises, the targeting of cloud and SaaS environments, and the growing use of AI by both defenders and adversaries.

Bridging the Gap Between Threat Intelligence and Business Risk

Join Kevin Garvey and Andy Grayland as they explore practical approaches for engaging senior stakeholders and connecting threat intelligence to business risk.

Securing the Next 250: ICS Threats, Practical Defense, and the Skills Gap We Need to Close

In this webcast, SANS CEO James Lyne and SANS Certified Instructor Jason D. Christopher break down the current ICS threat landscape, what defenders are up against, and what practical steps organizations can take to start closing the gap.

AI-Driven DevSecOps: Observing Microservices with OpenTelemetry and Grafana

Microservices and AI workloads demand deeper visibility. In Part 4, learn how to use OpenTelemetry and Kong Gateway to collect metrics, logs, and traces in Kubernetes - build dashboards, monitor traffic, and detect attacks in real time.

Defending Industrial Control Systems Under Advanced Threat Conditions

In times of conflict, industrial control systems face rapidly evolving cyber and physical threats. This talk explores how to leverage OT-focused intelligence to understand adversary activity and assess exposure.

Reengineering the SOC: A Roadmap to AI-Enhanced Cyber Defense

AI won't fix a broken SOC, but deployed right, it changes everything.

Going Beyond the Proxy: Cloud Secure Web Gateway

Endpoint Detection and Response (EDR) has become the backbone of modern security programs—and for good reason.

Win Contracts & Build a Stronger Cyber Workforce

How SANS Institute Supports Government Contractors

Defending at the Speed of AI: Outpacing Tomorrow's Attackers

This talk explores the emerging landscape of AI-driven cyber threats and argues that organizations must defend at the speed of AI to survive.

Defending Critical Infrastructure Under Elevated Threat Conditions

Join SANS ICS expert Dean Parsons for practical guidance on strengthening defenses, improving visibility, and maintaining operational integrity across industrial environments. This session will focus on real-world approaches to reducing risk while keeping safety and availability front and center.

SANS Demo Day 2026

SANS 2026 Demo Day showcases the latest innovations, tools, and techniques shaping the future of cybersecurity across defense, detection, automation, and cloud security

Inside the 2026 Cyber Workforce: Key Trends, Talent Gaps, Strategic Shifts, and the AI Revolution

In this webcast, industry leaders bring the report to life—translating research findings into actionable insights on hiring, skill development, and workforce strategy.

Agentic CTI Automation For Fun and Profit

This hands-on technical session focuses on how to build and deploy modern AI-backed agents inside real CTI workflows - systems that continuously ingest, reason, and take action, including automatically opening and enriching tickets tied to real exposure.

AI Assisted Web Application Pentesting

The demo will move through reconnaissance, vulnerability scanning, Burp Suite integration, data import into DefectDojo, and AI-assisted report writing—providing a complete, modern pentesting workflow.

GIAC Insider: Demo of Hands-On, CyberLive Exams

GIAC's CyberLive exams put you inside realistic lab environments where you prove you can do the work, not just recognize the right answer. See the environment, question types, and what to expect on exam day.

Endpoint Security Bypass

Attackers are constantly finding new ways to evade endpoint defenses. Join Bryce Galbraith on 8 July, 5–6 PM, to learn how these techniques work and how to defend against them.

AI Beyond Prompts: Agentic AI for Cloud Security

Move beyond chat-based AI. This session shows how agentic AI can automate cloud security workflows, mapping Copilot CLI concepts to real use cases like Terraform compliance, CIS benchmarks, and detection validation.