Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

SANS Rocky Mountain 2027

  • Mon, Jul 26 - Sat, Jul 31, 2027
  • 15 Courses
  • English
Grand Hyatt Denver & Virtual (MT)
1750 Welton Street, Denver, CO 80202
Denver, City View
  • Courses are 3-6 Days Long

    Monday, July 26 – Saturday, July 31

  • 15 Courses

    11 GIAC Certifications

  • All Cybersecurity Focus Areas

    AI Security, Offensive Operations, Cyber Defense, Cloud Security, DFIR, Cybersecurity Leadership and more.

  • Training Formats
Jump to:

Build a Whole SOC's Worth of Skills in One Week

SANS Rocky Mountain 2027 is a cybersecurity training event running July 26-31 at the Grand Hyatt Denver, in-person and online. Courses cover network monitoring, detection engineering, incident response, red team operations, SOC leadership, and both offensive and adversarial AI, with GIAC certification options available for select courses.

SANS Live Training

A Lineup Built Around the Detection Pipeline

Each of the courses offered at this training event aligns with the roles of an actual security operations team. There's network monitoring for the tier-one analyst, detection engineering for the person writing the rules, incident response and threat hunting for the responder, and two leadership courses covering how to build a SOC and how to run the room during a live incident. A team could send four people and have each one land in the right seat.

The Grand Hyatt is a block off 16th Street, and its rooftop Skycourt has a jogging track and a tennis court, which is a genuinely unusual thing to find on a downtown hotel roof.

Course Highlights:

  • Read packets and spot intrusion the way analysts do in Network Monitoring and Threat Detection In-Depth.
  • Write and tune the detection content your SIEM actually runs in Detection Engineering and SIEM Analytics.
  • Learn to lead the room, not the keyboard, during a live breach in Cyber Incident Management.
  • Attack production AI systems the way real adversaries do in Adversarial AI: Penetration Testing AI Systems.

Students Say

  • Slide 1 of 4
    SANS creates a one-of-a-kind learning experience providing world-class training and fascinating opportunities to network and gain new perspectives from your peers!
    Justin E.U.S. Federal Agency
  • Slide 2 of 4
    The instruction at SANS is top-notch. I have been to several SANS training courses and they never disappoint. The instructors bring real life experiences and show the students how the material can be applied.
    Thomas SeckJohns Hopkins APL
  • Slide 3 of 4
    The labs are giving me a chance to see the course content first hand and interact with it. It's doing a good job of letting me play with it and really seeing how the tools and methodologies work.
    Ryan MoellerEureka Strategic Consulting
  • Slide 4 of 4
    SANS training keeps individuals up-to-date with relevant cyber security information. I can now apply the skills learned towards further maturing my program.
    Nicholas MarriottPfizer
Slide 1 of 0
Early Bird Offer

Save $900 USD using the code "EarlyBirdNA" and pay for any 4-6 day course (excluding Beta Courses and 300 Level Courses) by January 6, 2027.

Important Dates
Refund Deadline:
Hotel Group Discount Deadline:

Courses

Looking for Group Purchasing? Contact Sales

GIAC Certification Exam Attempt

2 free practice tests when you add a certification exam attempt to your course. Available for select courses below.

Extra 120 Days of Course Access

Add OnDemand Extended Access for 120 days to help you prepare for your GIAC exam. Available for select courses below.

Schedule

Keynotes & Talks

Learn from industry leaders sharing key security insights.

Workshops

Join hands-on sessions solving real-world security issues.

Grand Hyatt Denver

Hotel Special Rates and Reservations

A special discounted rate of $289.00 S/D plus applicable taxes will be honored based on space availability. A limited number of Government Per Diem rooms at the prevailing rate are available with proper ID.

These rates include Internet in your room, complimentary access to the fitness center and are only available through 5:00 PM Mountain Time on Friday, July 2, 2027.

Book a Regular ReservationBook a Government Per Diem Reservation
Grand Hyatt Denver

3 Reasons To Stay At The Event Venue

  • Ultimate Convenience

    Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities - all in one centralized, convenient location.

  • Seamless Networking Opportunities

    Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders - from impromptu conversations in the lobby to exclusive after-hours events.

  • All Day, All Event Access

    SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

Two People Looking at a Laptop

Travel Information

Grand Hyatt Denver

Stay in the heart of downtown Denver at Grand Hyatt Denver, steps from Union Station, Coors Field, Ball Arena, and the newly reopened 16th Street. Recently ranked #11 Hotel in Colorado by Condé Nast Traveler, this hotel features modern guestrooms with mountain or city views, a rooftop jogging track and tennis court, a heated indoor pool, and a 24-hour Fitness Center. Enjoy fresh, local fare and craft cocktails at Courier. market | bar | kitchen or relax fireside in the newly redesigned lobby in partnership with Restoration Hardware.

Hotel Clerk Smiling at Guest
View Hotel

Travel Arrangements and Directions

Venue Parking Details: Valet Parking - Daily valet: $30, including up to two hours of parking - Each additional hour: $5 - Overnight valet: $67 - Oversized vehicle overnight valet: $69 Self-Parking - Overnight self-parking: $55 - Garage clearance: 6 feet 9 inches - In-and-out privileges are available for guests who charge parking to their hotel room. Parking rates are prevailing and subject to change. Alternative Parking Options - SANS recommends researching nearby parking facilities for more options. Popular parking apps that can help you locate and reserve space during your training: SpotHero, ParkMobile, and ParkWhiz. Distance from Nearby Airport - Denver International Airport (DEN): Approximately 24 miles

Travel Arrangements and Parking
Venue Parking and Transportation

Save on Delta Flights to SANS Events

Delta Air Lines is pleased to offer special discounts for SANS Institute! Save 8% on Delta One/Delta First, 5% on Delta Premium Select/Comfort+, and 3% on Delta Main fares. Does not apply to Delta Main Basic. Book online using Meeting Code NM5CP, or call Conferences and Events® at 1.800.328.1111* Monday–Friday, 8:00 a.m. – 6:30 p.m. (EST) and refer to Meeting Event Code 'NM5CP'. *Please note there is not a service fee for reservations booked and ticketed via the reservation 800 number.

Delta
Book Your Flight

Save On United Flights To SANS Events

We are pleased to partner with United Airlines for air travel to our upcoming event. To make flight reservations online please book below and use discount code ZSZ5778017. You may also call United Meetings Reservation Desk Monday – Friday at (800) 426-1122 for booking assistance. Booking fees are waived for Meeting reservations. International customers may contact their local United Reservation Desk.

United
Book Your FlightOnline Booking Instructions

Frequently Asked Questions

Check-in times, classroom locations, and bonus sessions for SANS Rocky Mountain 2027 (July 26-31, 2027) will be in the Event Guide at the top of this page a couple of weeks before event start.

Digital course materials open in your SANS Account seven days before class, so download them and confirm your laptop meets the course requirements before you travel.

Day-one classes start at 8:30 a.m. For everything else, from recordings to transfers, see the SANS Live Training FAQ or email support@sans.org.

The lineup maps onto a SOC: SEC503 for tier-one analysts, SEC555 for detection engineers, SEC504 and FOR508 for responders, and LDR551 and LDR553 for the people who build the SOC and run a live incident. Red teamers have SEC565 and SEC665, and AI-focused staff can take SEC535 Offensive AI or SEC536 Adversarial AI, both three days.

Yes. Courses run in person at the Grand Hyatt Denver or Live Online in Mountain Time, with the option to switch during the week.

The Grand Hyatt Denver at 1750 Welton Street, a block off 16th Street downtown and about 24 miles from DEN. The SANS rate is $289 a night and includes fitness center access, with limited government per diem rooms. The hotel has a rooftop jogging track and a heated indoor pool.

One CPE per course hour. Five-day courses typically earn 30 CPEs and six-day courses 36 or more, while three-day courses such as SEC535 and SEC536 earn fewer; the exact total is listed on each course card. SANS course CPEs count toward renewing a GIAC certification.