Group Purchasing
Group Purchasing

SANS Rockville 2027

  • Mon, Feb 22 - Sat, Feb 27, 2027
  • 22 Courses
  • 1 NetWars Tournament
  • English
Hilton Washington DC/Rockville Hotel and Executive Meeting Ctr & Virtual (ET)
1750 Rockville Pike, Rockville, MD 20852
Rockville, City Center
  • Courses are 3-6 Days Long

    Monday, February 22 – Saturday, February 27

  • 22 Courses

    20 GIAC Certifications

  • All Cybersecurity Focus Areas

    AI Security, Offensive Operations, Cyber Defense, Cloud Security, ICS Security, Cybersecurity Leadership and more.

  • Training Formats

Cybersecurity Training in the Nation’s Capital

SANS Rockville 2027 is a cybersecurity training event running February 22-27 at the Hilton Washington DC/Rockville Hotel, in-person and online. Courses span offensive operations, cyber defense, and security leadership, pairing lectures with hands-on labs and most leading to a GIAC certification exam.

A Broad Course Lineup, Minutes From D.C. by Metro

Courses at SANS Rockville 2027 cover such a wide range of cybersecurity topics that a whole team can attend, and each person can pick the direction that fits their role rather than follow a single prescribed track. The mix suits people early in their careers and those deepening an existing specialty.

The Hilton sits directly across from the Twinbrook Metro station, close enough that attendees without a car can skip the rental and still reach Washington, D.C. in minutes.

Course Highlights

  • Reverse engineer malware in Reverse-Engineering Malware: Malware Analysis in the Age of AI
  • Build AI-assisted detection and investigation workflows in AI-Enabled Security Operations.
  • Build cloud-native security pipelines in Cloud Native Security and DevSecOps Automation.
Early Bird Offer

Save $500 USD using the code "EarlyBirdNA" and pay for any 4-6 day course (excluding Beta Courses and 300 Level Courses) by January 7, 2027.

Important Dates
Refund Deadline:
Hotel Group Discount Deadline:

Courses

Looking for Group Purchasing? Contact Sales

Featured Speakers

Schedule

Social and Community Events

Keynotes & Talks

Learn from industry leaders sharing key security insights.

NetWars Tournaments

Hands-on competitions to test and sharpen your cybersecurity skills.

Not attending a course? Standalone registration is also available. See the Schedule section below for details.

Hilton Washington DC/Rockville Hotel and Executive Meeting Ctr

Hotel Special Rates and Reservations

A special discounted rate of $169.00 S/D plus applicable taxes will be honored based on space availability. The group rate is lower than the Government Per Diem rate.

These rates include Internet in your room and are only available through Monday, February 1, 2027.

SANS attendees will receive discounted parking at $6 per day for daily drive-ins. SANS attendees who book in the room block will receive discounted parking at $20 per overnight.

Rockville, Hilton

3 Reasons To Stay At The Event Venue

  • Ultimate Convenience

    Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities—all in one centralized, convenient location.

  • Seamless Networking Opportunities

    Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders—from impromptu conversations in the lobby to exclusive after-hours events.

  • All Day, All Event Access

    SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

Three people smiling during a meeting in an office

Travel Information

Frequently Asked Questions

Check-in times, classroom locations, and bonus sessions for SANS Rockville 2027 (February 22-27, 2027) will be in the Event Guide at the top of this page a couple of weeks before event start.

Digital course materials open in your SANS Account seven days before class, so download them and confirm your laptop meets the course requirements before you travel.

Day-one classes start at 8:30 a.m. For everything else, from recordings to transfers, see the SANS Live Training FAQ or email support@sans.org.

Rockville's lineup is wide enough for a whole team to split up: SEC401 or SEC504 for foundations, SEC560 Enterprise Penetration Testing, FOR610 malware analysis with Lenny Zeltser, three cloud security courses, ICS410 for industrial systems, and LDR414 for CISSP preparation. It also runs Offensive AI (SEC535) and Adversarial AI (SEC536) as three-day courses.

Yes. Courses run in person or Live Online in Eastern Time, and in-person students can switch during the week. ICS456 Essentials for NERC Critical Infrastructure Protection is Live Online only at this event.

The Hilton Washington DC/Rockville sits directly across from the Twinbrook Metro station, so you can reach Washington, D.C. by train. The SANS rate is $169 a night, below government per diem; book through the Location section before the group deadline shown in Important Dates.

Yes. A Core NetWars tournament runs over two evenings and is free with any course registration; people not taking a course can register for it separately. It covers cyber defense, penetration testing, forensics, incident response, and cloud, and active players earn 6 CPEs.