SANS Cloud Security Exchange Summit & Training 2026

Mon, Aug 17 - Sun, Aug 23, 2026
3 Courses
12 CPEs (Summit Only)
English

Hyatt Regency San Francisco Downtown SOMA & Virtual (PT)

50 Third Street, San Francisco, CA 94103

SANS Cloud Security Exchange Summit & Training 2026

Jump to:

Event Highlights
Courses
Speakers
Sponsors
Schedule
Location

In Partnership with Microsoft, Google and ASW

Summit: August 17-18 | Training: August 19-23 | Summit Co-Chairs: Frank Kim & Eric Johnson | In-Person CPE Credits: 12

What’s Next in AI and Cloud Security

Slide 1 of 2
Slide 2 of 2

As we celebrate the fifth year of the SANS Cloud Security Exchange, we're bringing it together with our SANS CloudSecNext Summit for the first time — live in San Francisco.

Hear from Anthropic, AWS, Google Cloud, Microsoft, SANS, and the security community as they explore the governance, security, and operational realities of deploying and securing AI in the cloud. Through keynote presentations, technical talks, hands-on workshops, and a featured discussion bringing AWS, Google Cloud, and Microsoft together on stage, attendees will gain practical insight into AI governance, machine identities, Zero Trust, autonomous systems, and the evolving challenges of securing modern cloud environments.

Designed for practitioners, architects, engineers, managers, and security leaders alike, the Summit delivers actionable guidance, forward-looking discussions, and opportunities to learn directly from the organizations and practitioners helping shape the future of AI and cloud security.

Choose Your Experience

In-Person | All-Access

Day 1

SANS Cloud Security Exchange sessions, live on stage, delivering high-impact technical talks, a panel discussion, live Q&A, and multi-cloud perspectives
Hands-on workshops
Leadership and New to Cyber breakout sessions
Networking with Summit Chairs, speakers, and peers, including meals and an evening reception

Day 2

Summit talks focused on AI and cloud security
Hands-on workshops
Continued networking with speakers and peers

Live Online | Select Talks

Day 1: SANS Cloud Security Exchange | Separate registration is required to attend Cloud Security Exchange sessions virtually on Day 1. Register here. *Registration for these sessions opens soon—stay tuned!
Day 2: Summit Talks

Who Should Attend

Security professionals who are responsible for securing public cloud infrastructure and services
Cloud security analysts, engineers, architects, and managers
Tech and security leaders advising on cloud risks and strategies
Practitioners seeking insights on cloud security, automation, threat detection, and GenAI
Don't miss this opportunity to connect, learn, and level up your cloud security game with some of the brightest minds in the industry!

Enhance your Summit experience by pairing it with a hands-on, immersive course taught by SANS instructors and course authors, offered immediately after the event.

What Attendees Say

Slide 1 of 4
Great way to step back from day-to-day security controls to see the transformational themes our industry is facing. There was a good combination of technical talks with actionable tips for the next 30 days, mixed with themes our org will see over the next 30 days, mixed with themes our org will see over the next 3-5 years.
Will C.
Slide 2 of 4
The Summit is great for those who have direct use/control of Cloud infrastructure. A wealth of information and experiences for those getting into the field and as always, there were great networking opportunities.
Chris S.
Slide 3 of 4
I find the real-life experiences and lessons-learned to be extremely valuable.
Roger W.
Slide 4 of 4
The Summit provided valuable insight from colleagues in security regarding process tooling, and opportunities that can be encountered in the cloud. The time to network and discuss challenges was invaluable.
Johnny R.

Summit Highlights

Cloud Security Exchange Sessions

The world's leading cloud providers come together with today's top cybersecurity minds. Expect world-class technical sessions, live Q&A with industry experts, proven strategies for multi-cloud, Zero Trust, and AI-driven defense. Can’t make it to San Francisco? Register to catch the sessions free online.

Technical Talks, Interactive Sessions and Hands-On Workshops

The industry's top practitioners will share their latest cloud security insights, research, solutions, tools, and case studies.

One-Of-A-Kind Networking with The Top Minds In Cloud Security

You’ll have the chance to engage with Summit Chairs, speakers, and your peers in the community for deep-dive discussions, and casual chats over breaks, meals, and evening receptions.

Summit Night Out

The days will be filled with the latest in cloud security, but the fun goes up a notch at night for those joining us in San Francisco.

Solutions Expo Hall

Explore new cloud security technologies and solutions and connect with service providers supporting today’s cloud environments.

World-Class SANS Courses

Enhance your knowledge base and add to your toolkit by bundling your Summit experience with a hands-on, immersive course taught by SANS instructors and course authors.

Jason Lam: Teacher Talking in Front of a Classroom

Register

Summit and Course Registration

$8,260 USD

In personIncludes

Course: Live Instructor Training with Hands-On Exercises
Summit: 6 CPE Credits - When You Attend Day 2 Talks Live
Summit: Cloud Security Exchange Sessions
Summit: Talks, Break Out Sessions, and Hands-On Workshops
Summit: Unmatched Networking
Summit: Evening Reception
Summit: Access to Summit Exhibit Hall
Summit: Lunch and light refreshments will be provided during the event and scheduled breaks

Select course to Enroll

Live onlineIncludes

Course: Virtual Live Instructor Training with Hands-on Exercises
Summit: Access to Select Summit Talks on Day 2
Summit: Interactive Chat on Slack
First Access to Approved Recordings and Decks

Select course to Enroll

Summit Registration Only

Free

$250 USD*Prices exclude applicable local taxes

In personIncludes

Cloud Security Exchange Sessions
Talks, Break Out Sessions, and Hands-On Workshops
Unmatched Networking
Evening Reception
Access to Summit Exhibit Hall
Lunch and light refreshments will be provided during the event and scheduled breaks
First Access to Approved Recordings and Decks
12 CPE Credits, 6 Per Day

Attend In PersonLogin to register

Free

Live onlineIncludes

Access to Select Summit Talks on Day 2
Interactive Chat on Slack
First Access to Approved Recordings and Decks
6 Summit CPE Credits - When You Attend Day 2 Talks Live

Important Dates

Refund Deadline:: July 31, 2026
Hotel Group Discount Deadline:: July 24, 2026

Courses

Looking for Group Purchasing? Contact Us

Showing 3 of 3

Filter by:

SEC540: Cloud Native Security and DevSecOps Automation

SEC540Cloud Security, Artificial Intelligence

SEC540: Cloud Security and DevSecOps Automation

GIAC Cloud Security Automation
5 Days
38 CPEs
Dakota Riley

Starts 19 Aug 2026 at 8:30 AM PT
$8,780 USD (Course)
$999 USD (Certification)
*Prices exclude applicable local taxes

Starts 19 Aug 2026 at 8:30 AM PT
$8,780 USD (Course)
$999 USD (Certification)
*Prices exclude applicable local taxes

View course details

SEC510: Cloud Security Engineering and Controls

SEC510Cloud Security, Artificial Intelligence

SEC510: Cloud Security Controls and Mitigations

GIAC Public Cloud Security
5 Days
38 CPEs
Simon Vernon

Starts 19 Aug 2026 at 8:30 AM PT
$8,780 USD (Course)
$999 USD (Certification)
*Prices exclude applicable local taxes

Starts 19 Aug 2026 at 8:30 AM PT
$8,780 USD (Course)
$999 USD (Certification)
*Prices exclude applicable local taxes

View course details

SEC545: GenAI and LLM Application Security

SEC545Cloud Security, Artificial Intelligence

GIAC AI Platform Security
5 Days
30 CPEs
Jon Zeolla

Starts 19 Aug 2026 at 8:30 AM PT
$8,260 USD (Course)
$999 USD (Certification)
*Prices exclude applicable local taxes

Starts 19 Aug 2026 at 8:30 AM PT
$8,260 USD (Course)
$999 USD (Certification)
*Prices exclude applicable local taxes

View course details

Featured Speakers

Dr. Anton Chuvakin

Senior Security Advisor at Google Security

Dr. Anton Chuvakin is a security advisor in Google Cloud’s Office of the CISO, helping shape global cloud security strategy.

Learn more

Jason Clinton

Deputy CISO at Anthropic

Jason joined Anthropic in April 2023 as its first CISO after more than a decade at Google, where he most recently led Chrome infrastructure security working on defense against advanced persistent threats.

Learn more

Chris Cochran

Field CISO and Vice President of AI Security at SANS Institute

Chris Cochran is a Marine Corps veteran, cybersecurity leader, and strategist with deep expertise in threat intelligence, security operations, emerging technology, and executive leadership.

Learn more

Eric Johnson

Principal Security Engineer at Puma Security

Eric Johnson is a Fellow at the SANS Institute and Principal Security Engineer at Puma Security. He leads hands-on training in SEC540: Cloud Native Security and DevSecOps Automation, co-authors SEC549 and SEC510, and develops open-source tools to help practitioners secure cloud pipelines.

Learn more

Frank Kim

Venture Advisor at YL Ventures

SANS Fellow Frank Kim helps to develop the next generation of CISOs and cyber leaders while teaching LDR512 and LDR514.

Learn more

Wesley Kuzma

Sr. Director Security Architecture at Microsoft

Wesley Kuzma has over 17 years of experience in cybersecurity and currently serves as the Sr. Director Security Architecture within Microsoft's Engineering & Architecture Group.

Learn more

Thank You To Our Sponsors

Schedule

Summit Dates

August 17-18

Training Dates

August 19-23

Showing 13 of 30

Filter by:

Select day:

Breakfast & Credential Pick Up

08:00AM - 09:00AM PDT

In-Person

Opening Remarks

09:00AM - 09:15AM PDT

In-Person & Virtual

Presented by

Frank Kim

Venture Advisor at YL Ventures

Eric Johnson

Principal Security Engineer at Puma Security

AWS | Agentic Security: Detection and Response at Machine Speed

Organizations are deploying autonomous AI agents into production at scale: agents that authenticate, execute multi-step workflows, and make decisions across cloud infrastructure. These agents operate at machine speed, which means security operations must too.

When agents behave unexpectedly, the pattern closely resembles an insider threat, but traditional detection and response cycles were designed for human-speed investigation. In this session, we'll share what we're seeing across enterprise environments as agentic workloads go into production: where the detection gaps are, why observability and security telemetry must converge at the application layer, and how organizations are building response capabilities that contain and remediate autonomously in seconds, not hours. We'll walk through practical patterns for calibrating automated response: when to contain, when to escalate, and when to let the system close the loop. The goal is to make security as fast and autonomous as the workloads it protects.

09:15AM - 10:00AM PDT

In-Person & Virtual

Presented by

Gee Rittenhouse

Vice President, Security Services at AWS

Eric Johnson

Principal Security Engineer at Puma Security

GOOGLE | Never Trust an Algorithm: Applying Zero Trust Principles to Secure AI and Agent Infrastructures

The rapid shift to autonomous AI agents in the cloud is accelerating security concerns. Traditional, human-centric systems are overwhelmed by the millions of new digital identities agents create, exacerbating issues like compromised identities (the source of over 70% of cloud breaches) and sophisticated agent hijacking attacks.

This talk argues for the urgent application of Zero Trust architecture to AI infrastructure. We present a hybrid framework that anchors on three core, non-negotiable principles for securing AI agents: Human Oversight for governance and critical actions, Innovation with Control through dynamically limited privileges, and Transparency via centralized logging and auditability.

10:00AM - 10:45AM PDT

In-Person & Virtual

Presented by

Dr. Anton Chuvakin

Senior Security Advisor at Google Security

Dave Shackleford

Founder at Voodoo Security

Break & Solutions Expo

10:45AM - 11:15AM PDT

In-Person & Virtual

MICROSOFT | Governing the Agentic Enterprise: A Security Architecture Imperative for Autonomous AI Systems

Agentic AI represents a structural shift in enterprise software, not an incremental improvement. For decades, organizations built security frameworks around a foundational assumption: humans make decisions, machines execute them. Agentic systems invert that model. They reason, plan, and act autonomously across identities, data stores, tools, and other agents, operating at machine speed in environments designed for human-paced decisions.

The security architecture most enterprises have in place was not built for this. Perimeter controls, identity governance frameworks, data classification policies, and audit mechanisms were designed for stateless, deterministic workloads. Agentic systems are stateful, adaptive, and capable of lateral tool invocation across an organization's most sensitive systems in a single workflow. The gap between existing controls and the actual risk surface of a production agentic deployment is not a configuration problem. It is an architectural one.

Secure agentic deployment requires six foundational governance primitives, applicable regardless of platform or vendor: agent identification and inventory, data labeling and policy enforcement, agent security posture management, conditional access for agentic workflows, runtime threat detection and remediation, and compliance reporting. These primitives are not new products to be purchased. They are the deliberate extension of Zero Trust principles to a new class of non-human actor, and they must be architected into agentic systems from day one rather than retrofitted after the first incident.

The organizations that adopt agentic AI safely will not be the ones with the most policies. They will be the ones that treat identity as the foundational control plane, govern the data agentic systems can reach before they govern what those systems generate, and build continuous adversarial testing into their security posture from the start. That window is open now, and it is the defining cloud security decision of this generation.

11:15AM - 12:00PM PDT

In-Person & Virtual

Presented by

Wesley Kuzma

Sr. Director Security Architecture at Microsoft

Chris Cochran

Field CISO and Vice President of AI Security at SANS Institute

Fireside Chat | Building Agentic Security Capabilities: Five Years of Cloud Security Evolution

As autonomous AI agents move into production across cloud environments, security teams face a fundamental mismatch: agents authenticate, execute, and make decisions at machine speed, while many security architectures were designed for human-paced, deterministic workloads.

Frank Kim leads a discussion with security leaders from AWS, Google Cloud, and Microsoft on the realities of securing AI-driven cloud environments. Marking the fifth year of Cloud Security Exchange, the panel will explore how cloud security has evolved over the past five years and what comes next as organizations embrace increasingly autonomous systems.

12:00PM - 12:45PM PDT

In-Person & Virtual

Panelists

Dr. Anton Chuvakin

Senior Security Advisor at Google Security

Wesley Kuzma

Sr. Director Security Architecture at Microsoft

Gee Rittenhouse

Vice President, Security Services at AWS

Moderated by

Frank Kim

Venture Advisor at YL Ventures

Summit Chair Commentary & Morning Wrap-Up

12:45PM - 12:50PM PDT

In-Person & Virtual

Presented by

Frank Kim

Venture Advisor at YL Ventures

Eric Johnson

Principal Security Engineer at Puma Security

Lunch & Solutions Expo

12:50PM - 02:00PM PDT

In-Person & Virtual

WORKSHOP | Google Cloud | Agentic SOC Workshop

Agentic Capture The Flag with Google SecOps

Step into the future of cyber defense. This hands-on experience is designed for security practitioners ready to move beyond AI hype into real-world application.

Learn how AI agents can help you investigate, triage, and respond to threats at machine speed through practical exercises, real-world scenarios, and an interactive CTF challenge.

Target Audience: Security practitioners, but decision makers and executives are welcome to join as well.

02:00PM - 04:00PM PDT

In-Person

Presented by

Raj Goodrich

Security Customer Engineer at Google Cloud

Travis Newshott

Regional Security Architect at Google Cloud

Jonathan Paykoc

Security Architect at Google Cloud

Brian Young

Security Engineering Manager at Google Cloud

WORKSHOP | Microsoft | Your New Tier-1 Analyst Isn't Human: Lessons from Building an Autonomous SOC

Security teams have spent years automating repetitive work, but recent advances in agentic AI are enabling something different: autonomous analysts capable of investigating alerts, gathering evidence, making decisions, and taking action with minimal human involvement.

This session shares the blood, sweat, and tears of building autonomous security operations capabilities in the real world. We'll explore what worked, what surprised us, where autonomous agents excel, and where human judgment remains essential. As organizations increasingly deploy agents across security and IT functions, visibility and governance become just as important as automation. Attendees will leave with practical lessons for evaluating autonomous systems, understanding their operational risks, and maintaining control as AI-powered teammates become part of the SOC.

02:00PM - 04:00PM PDT

In-Person

Presented by

Angelica Faber

Chief Architect ISD EAG Security at Microsoft

Wesley Kuzma

Sr. Director Security Architecture at Microsoft

WORKSHOP | AWS | Investigating AI Threats: Extending Incident Response to the Generative AI Layer

As organizations adopt generative AI on AWS, security teams need to extend their investigation capabilities into the AI layer. In this hands-on workshop, participants work through a realistic multi-phase incident — tracing a compromised credential from initial exposure through privilege escalation into Amazon Bedrock knowledge bases and AI agents.

Using Amazon GuardDuty, AWS Security Hub, Amazon CloudTrail, and Amazon Athena, you'll reconstruct the full attack chain and walk away with the skills to detect, investigate, and respond when threat actors pivot from traditional cloud resources into generative AI workloads.

02:00PM - 04:00PM PDT

In-Person

Presented by

Kyle Shields

Security Specialist Solutions Architect at AWS

Chirag Mehta

Senior Security Engineer at AWS

Summit Social - Happy Hour

Wrap up the day at the SANS Social, our evening networking event where great conversations continue after the day's presentations and workshops are over. Enjoy drinks, delicious food, and a relaxed atmosphere while connecting with fellow attendees, sharing ideas, and building new professional relationships. Whether you are catching up with colleagues or meeting someone new, the SANS Social is the perfect way to end the day.

04:00PM - 06:00PM PDT

In-Person

Breakfast & Solutions Expo

08:00AM - 08:45AM PDT

In-Person

Opening Remarks

08:45AM - 09:00AM PDT

In-Person & Virtual

Presented by

Frank Kim

Venture Advisor at YL Ventures

Eric Johnson

Principal Security Engineer at Puma Security

KEYNOTE: An Update from the Scaling Laws Frontier

We'll cover the latest on AI-enabled nation state activity from Anthropic's view, including Mythos-class models; frontier model cyber capabilities to help defenders succeed against AI-augmented attacks; and what the future of model scaling has in store for cyber, engineering, and SDLC right around the corner.

09:00AM - 09:40AM PDT

In-Person & Virtual

Presented by

Jason Clinton

Deputy CISO at Anthropic

Who's Really Calling? Decoding Identity Context to Catch Service Principal and Managed Identity Abuse

Machine identities now vastly outnumber humans in most Azure tenants, and they are routinely over-permissioned, long-lived, and sparsely monitored. When a service principal deletes diagnostic settings or a managed identity writes to a storage account, the analyst staring at the Activity Log has to answer a deceptively hard question: which identity actually did this, and on whose behalf?

The same operation can come from a human in the Portal, a human running az CLI commands, a custom OAuth app acting on a user's behalf, a service principal with a leaked secret, or a system- or user-assigned managed identity — and in the raw JSON these scenarios look far more alike than they should. Misreading that context is exactly how OAuth consent abuse, leaked SP credentials, and over-privileged managed identities slip past detections written for a human-centric world.

This session presents hands-on research mapping six concrete Azure identity scenarios — user via CLI, user via Portal, service principal with application permissions, service principal with delegated permissions, system-assigned managed identity, and user-assigned managed identity — to the exact claims each emits. The result is a three-layer identity-context model that separates human from non-human actors, distinguishes credentialed service principals from Azure-managed identities (flagging impossible combinations as anomalies), and pinpoints the parent resource behind a managed identity so legitimate automation can be whitelisted with precision.

Attendees leave with an annotated identity claims matrix, a SIEM-agnostic decision tree, and a tiered starter ruleset they can deploy against their own tenants the week they get home.

09:45AM - 10:10AM PDT

In-Person & Virtual

Presented by

Lydia Graslie

Senior Threat Research Engineer at Sysdig

Securing AI/LLM Workloads in CI/CD: Automated Risk Mapping and Attack Simulation in Cloud Pipelines

Most teams integrating LLMs into cloud applications are flying blind in their pipelines. They have added scanners and perhaps some guardrails, but they do not actually know whether those controls hold up against real attacks. This session explores a practical approach to closing that gap.

The idea is simple: treat AI/LLM security like any other part of the pipeline, something that can be measured, tested, and broken before it reaches production.

Attendees will see a working setup that ingests CI/CD configurations (GitHub Actions, GitLab CI) and builds a basic risk picture: what controls are missing, where data could leak, and how exposed the LLM layer actually is. It is not perfect. Mapping pipelines to meaningful risk is messy, and there is a fair amount of noise, but it is enough to surface the problems most teams are not seeing.

From there, attack simulation is layered into the process. Instead of assuming prompt filtering or guardrails work, the controls are actively tested during the pipeline. Prompt injection, data exfiltration, and system prompt leakage are evaluated as part of the build. In many cases, the first run fails, which is the point.

Once controls are added or tightened, the same tests are re-run and used as the signal for whether a build should pass. This shifts security from a checklist-based exercise to a validation-driven process.

This is not a silver bullet. LLM behavior is inconsistent, false positives occur, and scaling this approach across multiple pipelines takes effort. However, it provides a practical way to move from "we think it is secure" to "we have actually tested it." Attendees will leave with a concrete pattern they can adapt: how to map pipeline risk, how to simulate real LLM attacks, and how to integrate both into CI/CD workflows without slowing teams down.

10:15AM - 10:40AM PDT

In-Person & Virtual

Presented by

Alejandro Aucestovar

Security Architect at First Databank

Break

10:45AM - 11:00AM PDT

In-Person & Virtual

When AI and Cloud Collide: Real-World Integration Failures

11:00AM - 11:25AM PDT

In-Person & Virtual

Presented by

Jason Kao

Founder at Fog Security

Beyond the Prompt: Infrastructure Hardening for Scalable Agentic AI

While the security community remains hyper-focused on LLM-specific threats like prompt injection, real-world enterprise deployments reveal that the most critical vulnerabilities often lie in the underlying architecture. This session explores hard-learned lessons from several Generative AI (GenAI) deployments, moving past theoretical risks to address the infrastructure failures that break production environments.

Three primary architectural pillars will be deconstructed:

The Compute Layer: How under-provisioned containerized backends create self-inflicted Denial of Service (DoS) conditions and how to implement auto-scaling guardrails.

The Networking Layer: Navigating the "VPC Lockout" phenomenon, where aggressive data exfiltration controls break Retrieval-Augmented Generation (RAG) workflows.

The IAM Layer: Solving the "God-Mode" dilemma in Agentic AI by implementing automated least-privilege for service accounts with broad agency.

Attendees will leave with a technical blueprint for securing RAG and Agentic workflows, including specific strategies for Layer 7 filtering, VPC Service Control tuning, and Infrastructure-as-Code (IaC) patterns to remediate over-privileged AI service accounts.

Key Takeaways for Attendees:

Root-Cause Methodology: Techniques for using cloud-native monitoring to distinguish between model hallucinations and infrastructure-induced latency.

Network Policy Tuning: How to design allow-lists for AI agents and external vector databases without compromising data exfiltration boundaries.

Agentic IAM Governance: Practical application of IAM recommenders and IaC to strip "God-Mode" permissions from AI service accounts.

Defense-in-Depth: Implementing Layer 7 filtering to block malicious inputs before they reach the model endpoint.

11:30AM - 11:55AM PDT

In-Person & Virtual

Presented by

Zach Schramm

Technical Account Manager at Google Cloud Public Sector

Breaking BOTS II: Trusting Agentic AI in the Cloud SOC

When an AI is 70% accurate at automating each task of a 10-task investigation, 97% of cases end up incomplete, and that is the optimistic scenario. This session explores efforts to close that gap for cloud and SOC investigations.

Using CTFs as one of the challenge sets, the work achieved the first public agentic speed-run of Splunk Boss of the SOC. Along the way, an unexpected challenge emerged: frontier AI models were breaking the evaluation framework itself. This session examines what it takes to make agentic investigations perform measurably well and how to gain confidence that the results are meaningful.

The first half of the session systematically walks through how to push AI investigators from barely passing to achieving 96%+ performance. Starting with accessible off-the-shelf tools such as Claude Code as a baseline, the discussion layers on the methods that effectively tackle cloud investigation tasks in BOTS, including leaky S3 buckets, identity pivots, and the types of multi-source correlation that real cloud SOCs perform daily. Topics include the impact of model selection, semantic layers over log data, agent harness design, MCP server choices, and prompting patterns that materially improve results. The session also highlights which established best practices have become obsolete, what is now viable with open-source models and modern agent harnesses, and the cost and latency tradeoffs associated with each approach. More fundamentally, the discussion zooms out to the organizational implications and how teams should structure rollout and iteration.

Measurement is foundational, so the second half focuses on evaluation frameworks for investigations. An emerging theme driven by advances in frontier models is that modern evaluations must now be treated adversarially. Frontier agents are increasingly capable of returning correct answers without ever touching the logs, effectively learning how to bypass the intended evaluation process. By understanding how agents circumvent evaluations, teams can build stronger measurement frameworks and, through them, more reliably improve their automations.

Attendees will leave with a practitioner's playbook for deploying agentic AI investigators in cloud environments that perform reliably, a framework for comparing techniques at a more fundamental level, and botsbench.com as an open resource for benchmarking and detecting contamination in their own pipelines.

12:00PM - 12:25PM PDT

In-Person & Virtual

Presented by

Leo Meyerovich

CEO at Graphistry, Inc.

Lunch

12:30PM - 01:30PM PDT

In-Person & Virtual

AI Security at Warp Speed: Securing Autonomous Systems When Impulse Power Won't Cut It

Your AI systems are traveling at Warp 9. Your security defenses are stuck at impulse power. By 2026, enterprises face 109 autonomous agents for every human, threats evolving monthly, 3-6 month technology refresh cycles. Traditional security planning (18-24 month cycles) can't keep up.

Based on real-world experience securing AI systems at scale at Salesforce, this talk addresses both the technical patterns that work AND the organizational transformation required to operate at AI speed.

Technical: Why three-layer defense (IAM + Perimeter + Guardrails) is mandatory. How API-layer enforcement blocks exfiltration from authenticated agents. Real attack patterns: prompt injection (68.8% violation rate) and supply chain attacks. Which frameworks matter: NIST AI RMF, CSA AI Controls Matrix, OWASP LLM Top 10.

Leadership: How to enable safe experimentation through risk-tiered environments. Why engineers should only do new things (repetitive work becomes shared skills). Moving from activity metrics to outcome metrics. Scaling from managing 50 people to supervising 200+ agents. Implementing weekly deployment cadence.

Attendees leave with actionable frameworks: three-layer architecture, risk-based experimentation, 60-day fail-fast cycles, outcome metrics, and weekly deployment roadmaps.

01:30PM - 01:55PM PDT

In-Person & Virtual

Presented by

Haekeem Oseni

Director of Security Operations at Salesforce

Summit Chair Commentary & Wrap-Up

02:00PM - 02:05PM PDT

In-Person & Virtual

Presented by

Frank Kim

Venture Advisor at YL Ventures

Eric Johnson

Principal Security Engineer at Puma Security

Break & Transition to Workshops

02:05PM - 02:15PM PDT

In-Person & Virtual

WORKSHOP | Google Cloud | Agentic SOC Workshop

Agentic Capture The Flag with Google SecOps

Step into the future of cyber defense. This hands-on experience is designed for security practitioners ready to move beyond AI hype into real-world application.

Learn how AI agents can help you investigate, triage, and respond to threats at machine speed through practical exercises, real-world scenarios, and an interactive CTF challenge.

Target Audience: Security practitioners, but decision makers and executives are welcome to join as well.

02:15PM - 04:15PM PDT

In-Person

Presented by

Raj Goodrich

Security Customer Engineer at Google Cloud

Jonathan Paykoc

Security Architect at Google Cloud

Brian Young

Security Engineering Manager at Google Cloud

Travis Newshott

Regional Security Architect at Google Cloud

WORKSHOP | Microsoft | Your New Tier-1 Analyst Isn't Human: Lessons from Building an Autonomous SOC

02:15PM - 04:15PM PDT

In-Person

Presented by

Angelica Faber

Chief Architect ISD EAG Security at Microsoft

Wesley Kuzma

Sr. Director Security Architecture at Microsoft

WORKSHOP | AWS | Investigating AI Threats: Extending Incident Response to the Generative AI Layer

02:15PM - 04:15PM PDT

In-Person

Presented by

Kyle Shields

Security Specialist Solutions Architect at AWS

Chirag Mehta

Senior Security Engineer at AWS

SANS@Night: Guardrails for AI Coding

Generative AI is quickly becoming a default part of the software development lifecycle. Faster delivery can also increase security risk, operational fragility, and decisions that are difficult to review or audit after the fact.

This session focuses on AI coding guardrails: practical, developer-friendly controls that help teams adopt coding assistants with confidence while maintaining strong security, governance, and assurance. We will walk through four maturity levels for agentic coding controls.

Level 1 uses built-in steering mechanisms in modern agentic IDEs, including project context files, rules, and instruction layers. These establish consistent expectations for architecture, security patterns, data handling, logging, and “how we do things here,” so teams reduce variability and improve repeatability.

Level 2 adds context-injection agents that deliver guidance at the right time. They provide the relevant requirements, approved patterns, and constraints based on what is changing, the type of work underway, and where the developer is in the workflow.

Level 3 adds deterministic, policy-as-code guardrails in pull requests and CI/CD to enforce security, quality, and compliance requirements with measurable outcomes and audit-ready evidence.

Finally, we hit level 4, where everything implemented in levels 1 through 4 continuously improves to strengthen controls over time.

06:00PM - 07:00PM PDT

In-Person & Virtual

Presented by

Jon Zeolla

Founder and CEO at Zenable

Live-Online Registration

Hyatt Regency San Francisco Downtown SOMA

Hotel Special Rates and Reservations

A special discounted rate of $269.00 S/D plus applicable taxes will be honored based on space availability. A limited number of Government Per Diem rooms at the prevailing rate are available with proper ID.

There currently is a daily destination fee of $35. This is waived for all SANS attendees who book through the links below.

These rates include Internet in your room and are only available through Friday, July 31, 2026.

The cut off date has passed, please reach out to bnix@sans.org for assistance in booking a reservation.

Hyatt Regency San Francisco Downtown SOMA

3 Reasons To Stay At The Event Venue

Ultimate Convenience
Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities - all in one centralized, convenient location.
Seamless Networking Opportunities
Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders - from impromptu conversations in the lobby to exclusive after-hours events.
All Day, All Event Access
SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

Business People Shaking Hands and Smiling

More Information

Stay at this Downtown San Francisco Hotel on Market Street in SoMa In SoMa, San Francisco’s arts district, the city’s cutting-edge creative scene is alive and well. Here, California’s contemporary art museums sit shoulder to shoulder with the renowned Yerba Buena Center for the Arts, SF Museum of Modern Art (SFMOMA), fine dining restaurants and artisanal coffee shops. Located on the south of Market Street, Hyatt Regency San Francisco Downtown SoMa is a sophisticated destination hotel close to Salesforce Tower, the Moscone Center and some of the city’s most innovative and stimulating sights.

SEC536: Adversarial AI - Penetration Testing AI Systems

SANS Cloud Security Exchange Summit & Training 2026

Share

What’s Next in AI and Cloud Security

Choose Your Experience

In-Person | All-Access

Live Online | Select Talks

Who Should Attend

What Attendees Say

Summit Highlights

Cloud Security Exchange Sessions

Technical Talks, Interactive Sessions and Hands-On Workshops

One-Of-A-Kind Networking with The Top Minds In Cloud Security

Summit Night Out

Solutions Expo Hall

World-Class SANS Courses

Register

Summit and Course Registration

Summit Registration Only

Courses

GIAC Certification

Extra 4 Months of Course Access

SEC540: Cloud Native Security and DevSecOps Automation

Quick view

SEC510: Cloud Security Engineering and Controls

Quick view

SEC545: GenAI and LLM Application Security

Quick view

Featured Speakers

Dr. Anton Chuvakin

Jason Clinton

Chris Cochran

Eric Johnson

Frank Kim

Wesley Kuzma

Thank You To Our Sponsors

Schedule

Summit Dates

Training Dates

Breakfast & Credential Pick Up

Opening Remarks

AWS | Agentic Security: Detection and Response at Machine Speed

GOOGLE | Never Trust an Algorithm: Applying Zero Trust Principles to Secure AI and Agent Infrastructures

Break & Solutions Expo

MICROSOFT | Governing the Agentic Enterprise: A Security Architecture Imperative for Autonomous AI Systems

Fireside Chat | Building Agentic Security Capabilities: Five Years of Cloud Security Evolution

Summit Chair Commentary & Morning Wrap-Up

Lunch & Solutions Expo

WORKSHOP | Google Cloud | Agentic SOC Workshop

WORKSHOP | Microsoft | Your New Tier-1 Analyst Isn't Human: Lessons from Building an Autonomous SOC

WORKSHOP | AWS | Investigating AI Threats: Extending Incident Response to the Generative AI Layer

Summit Social - Happy Hour

Breakfast & Solutions Expo

Opening Remarks

KEYNOTE: An Update from the Scaling Laws Frontier

Who's Really Calling? Decoding Identity Context to Catch Service Principal and Managed Identity Abuse

Securing AI/LLM Workloads in CI/CD: Automated Risk Mapping and Attack Simulation in Cloud Pipelines

Break

When AI and Cloud Collide: Real-World Integration Failures

Beyond the Prompt: Infrastructure Hardening for Scalable Agentic AI

Breaking BOTS II: Trusting Agentic AI in the Cloud SOC

Lunch

AI Security at Warp Speed: Securing Autonomous Systems When Impulse Power Won't Cut It

Summit Chair Commentary & Wrap-Up

Break & Transition to Workshops

WORKSHOP | Google Cloud | Agentic SOC Workshop

WORKSHOP | Microsoft | Your New Tier-1 Analyst Isn't Human: Lessons from Building an Autonomous SOC

WORKSHOP | AWS | Investigating AI Threats: Extending Incident Response to the Generative AI Layer

SANS@Night: Guardrails for AI Coding

Hyatt Regency San Francisco Downtown SOMA

3 Reasons To Stay At The Event Venue

Ultimate Convenience

Seamless Networking Opportunities

All Day, All Event Access

More Information

Hyatt Regency San Francisco Downtown SOMA

Travel Arrangements and Directions

Save On United Flights To SANS Events

Save on Delta Flights to SANS Events

SANS North America Summits Volunteer Program