Training
Featured CourseView All Courses
Get a free hour of SANS training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
Cloud Security Training, Courses, and Resources
Can't find what you are looking for?

Let us help.

Contact us
Community Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely.

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk With an Expert
Talk With an Expert

SANS Surge 2026

  • Mon, Feb 23 - Sat, Feb 28, 2026
  • 19 Courses
  • 1 NetWars Tournament
  • English
San Diego Marriott La Jolla Hotel & Virtual (PDT)
4240 La Jolla Village Drive, La Jolla, CA 92037
San Diego, Boats in the Water
Jump to:

Welcome to SANS Surge: Where the Strongest Line of Defense is You

Cybersecurity is a profession defined by constant stress, shifting threats, and relentless pressure. To stand firm, defenders need more than technical skills — they need readiness, resilience, and the confidence to lead when others falter.

SANS Surge is designed to train defenders to hold steady where others shift. Inspired by San Diego’s seismic resilience, this flagship event equips you with the knowledge, tools, and mindset to thrive under pressure and radiate strength across your mission and your team.

SANS Live Training

Why Attend SANS Surge 2026?

  • Practical Cybersecurity Training: Learn from world-class SANS practitioners — experts who’ve defended systems at the highest stakes and now bring their experience to the classroom.
  • Hands-On Labs & Immersive Simulations: Test your skills in realistic labs and exercises that mimic real-world stress and pressure. Learn how to respond with clarity and confidence when it matters most.
  • Thought Leadership & Workshops: Join in-person talks, panels, and deep-dive workshops that go beyond technical skills — exploring the habits, mental strength, and leadership required to stay grounded in high-pressure situations.
  • Comprehensive Courseware & Extended Access: Walk away with premium courseware, plus four months of recorded access to your sessions for ongoing reinforcement and continuous learning.
  • GIAC Certification Opportunities: Validate your readiness with industry-recognized credentials. Most courses align with GIAC certifications that employers trust worldwide.
  • NetWars & Networking: Compete in CORE NetWars tournaments, connect with peers, and build relationships that extend your learning beyond the classroom.
  • Earn CPE Credits: Advance your professional standing by earning Continuing Professional Education credits with every course.

At SANS Surge 2026, you won’t just learn new skills. You’ll build stamina, confidence, and resilience — the qualities that turn cybersecurity practitioners into leaders.

Students Say

  • Slide 1 of 4
    SANS creates a one-of-a-kind learning experience providing world-class training and fascinating opportunities to network and gain new perspectives from your peers!
    Justin E.U.S. Federal Agency
  • Slide 2 of 4
    The instruction at SANS is top-notch. I have been to several SANS training courses and they never disappoint. The instructors bring real life experiences and show the students how the material can be applied.
    Thomas SeckJohns Hopkins APL
  • Slide 3 of 4
    The labs are giving me a chance to see the course content first hand and interact with it. It's doing a good job of letting me play with it and really seeing how the tools and methodologies work.
    Ryan MoellerEureka Strategic Consulting
  • Slide 4 of 4
    SANS training keeps individuals up-to-date with relevant cyber security information. I can now apply the skills learned towards further maturing my program.
    Nicholas MarriottPfizer
Slide 1 of 0
Early Bird Offer

Save $900 USD using the code "EarlyBirdSD" and pay for any 4-6 day course (excluding Beta Courses) by October 30, 2025.

Important Dates
Refund Deadline:
Hotel Group Discount Deadline:

Courses

Looking for Group Training? Contact Sales

GIAC Certification Exam Attempt

2 Free practice tests when you add a certification exam attempt to your course. Available for select courses below.

OnDemand Access

Add 4 months of OnDemand access to your course purchase. Only available for courses with an OnDemand option.

Netwars Tournaments

Free with purchase of a 4, 5 or 6 day in-person course. Instructions to confirm your spot will be shared on site.

Showing 9 of 19
Filter by:

SEC401: Security Essentials - Network, Endpoint, and Cloud

Essentials
SEC401Cyber Defense
SEC401: Security Essentials - Network, Endpoint, and Cloud
  • Starts 23 Feb 2026 at 8:30 AM PDT
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to register:In-PersonVirtual

SEC504: Hacker Tools, Techniques, and Incident Handling

Essentials
SEC504Offensive Operations
SEC504: Hacker Tools, Techniques, and Incident Handling
  • Starts 23 Feb 2026 at 8:30 AM PDT
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to register:In-PersonVirtual

FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics

Intermediate
FOR508Digital Forensics and Incident Response
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
  • Starts 23 Feb 2026 at 8:30 AM PDT
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to register:In-PersonVirtual

SEC560: Enterprise Penetration Testing

Intermediate
SEC560Offensive Operations
SEC560: Enterprise Penetration Testing
  • Starts 23 Feb 2026 at 8:30 AM PDT
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to register:In-PersonVirtual

FOR500: Windows Forensic Analysis

Essentials
FOR500Digital Forensics and Incident Response
FOR500: Windows Forensic Analysis
  • Starts 23 Feb 2026 at 8:30 AM PDT
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to register:In-PersonVirtual

ICS410: ICS/SCADA Security Essentials

Essentials
ICS410Industrial Control Systems Security
ICS410: ICS/SCADA Security Essentials
  • Global Industrial Cyber Security Professional
  • 6 Days
  • 36 CPEs
  • Justin Searle
  • Starts 23 Feb 2026 at 8:30 AM PDT
  • $9,230 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to register:In-PersonVirtual

FOR518: Mac and iOS Forensic Analysis and Incident Response

Intermediate
FOR518Digital Forensics and Incident Response
FOR518: Mac and iOS Forensic Analysis and Incident Response
  • Starts 23 Feb 2026 at 8:30 AM PDT
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to register:In-PersonVirtual

SEC511: Cybersecurity Engineering: Advanced Threat Detection and Monitoring

Intermediate
SEC511Cyber Defense
SEC511: Continuous Monitoring and Security Operations
  • GIAC Continuous Monitoring Certification
  • 6 Days
  • 46 CPEs
  • Tim Garcia
  • Starts 23 Feb 2026 at 8:30 AM PDT
  • $8,780 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to register:In-PersonVirtual

ICS515: ICS Visibility, Detection, and Response

Intermediate
ICS515Industrial Control Systems Security
ICS515: ICS Visibility, Detection, and Response
  • GIAC Response and Industrial Defense
  • 6 Days
  • 36 CPEs
  • Mark Bristow
  • Starts 23 Feb 2026 at 8:30 AM PDT
  • $9,230 USD (Course)
  • $999 USD (Certification)
  • *Prices exclude applicable local taxes

View course details
Log in to register:In-PersonVirtual

Featured Speakers

Mick Douglas

Mick Douglas

Managing Partner

Mick Douglas has over 10 years of experience in information security and is currently the Managing Partner for InfoSec Innovations. He specializes in PowerShell, Unix, Data Visualization, Hardware and Radio Hacking.

Learn more
John Hubbard

John Hubbard

Consultant

John redefined modern SOC operations by engineering globally adopted blue team strategies and co-creating the GSOC cert. Through the Blueprint podcast and SANS leadership, he’s unified thousands of defenders around real-world detection tactics.

Learn more
Frank Kim

Frank Kim

Venture Advisor

Frank Kim is the Founder of ThinkSec, a security consulting and CISO advisory firm. He leads the Cybersecurity Leadership and Cloud Security curricula at SANS, as well as authors and instructs multiple SANS courses.

Learn more
My-Ngoc Nguyen

My-Ngoc Nguyen

CEO/Principal Consultant

My-Ngoc Nguyen is the CEO/Principal Consultant for Secured IT Solutions. She brings 25 years of experience in information systems and technology, with over 20 years focused on cyber security for both the government and commercial sectors.

Learn more
Bryan Simon

Bryan Simon

CEO

Bryan Simon, a SANS Senior Instructor and author of SEC401, has been involved in cybersecurity since 1991. He’s the president of Xploit Security Inc., and has taught cybersecurity students from organizations like the FBI, NATO, and UN.

Learn more
Ismael Valenzuela

Ismael Valenzuela

Vice President Threat Research & Intelligence

Ismael Valenzuela, VP of Threat Research & Intelligence at Arctic Wolf, has fortified global cybersecurity by leading critical threat intelligence initiatives and pioneering defenses against AI-driven threats like deepfakes and ransomware.

Learn more

Schedule

Workshops

Join hands-on sessions solving real-world security issues.

Course Training

Daily required course training hours throughout the week.

NetWars Tournaments

Hands-on competitions to test and sharpen your cybersecurity skills.

Showing 1 of 2
Filter by:

Tournament: Core NetWars

Registration: All students who register for a 4–6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About Core NetWars: The most comprehensive of the NetWars ranges, this ultimate multi-disciplinary cyber range powers up the most diverse cyber skills. This range is ideal for advancing your cybersecurity prowess in today's dynamic threat landscape. The winning team and the top five solo players from every Core NetWars tournament throughout the year are offered a chance to compete in the annual SANS Core NetWars Tournament of Champions.

06:30PM - 09:30PM PST
In-Person

Tournament: Core NetWars

Registration: All students who register for a 4–6 day course will be eligible to play NetWars for free. Registration for this event will be through your SANS Account Dashboard the week of the event.

About Core NetWars: The most comprehensive of the NetWars ranges, this ultimate multi-disciplinary cyber range powers up the most diverse cyber skills. This range is ideal for advancing your cybersecurity prowess in today's dynamic threat landscape. The winning team and the top five solo players from every Core NetWars tournament throughout the year are offered a chance to compete in the annual SANS Core NetWars Tournament of Champions.

06:30PM - 09:30PM PST
In-Person

San Diego Marriott La Jolla Hotel

Hotel Special Rates & Reservations

A special discounted rate of $229.00 S/D plus applicable taxes will be honored based on space availability.

A limited number of Government Per Diem rooms at the prevailing rate are available with proper ID.

These rates include Internet in your room and are only available through Friday, January 30, 2026.

SANS attendees who book through the link below will receive 20% off standard breakfast menu pricing at Fresh or Starbucks.

They will also receive a discounted parking rate of $13/day for daily drive-in and a discounted parking rate of $28/overnight.

Book A Regular ReservationBook A Per Diem Government Reservation
San Diego, Marriott La Jolla Hotel

3 Reasons To Stay At The Event Venue

  • Ultimate Convenience

    Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities - all in one centralized, convenient location.

  • Seamless Networking Opportunities

    Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders - from impromptu conversations in the lobby to exclusive after-hours events.

  • All Day, All Event Access

    SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

People at laptops smiling

Travel Information

San Diego Marriott La Jolla Hotel

A cliff-top community perched on the San Diego coastline, La Jolla, or Jewel City, may technically be considered San Diego, but this is truly a destination unto itself. Marriott La Jolla invites you to put a little sparkle in your travels – to explore far and wide, and then settle into spacious rooms and suites, packed with amenities like free WiFi, luxe bedding, and flat-panel TVs to make your stay uncomplicated, unforgettable, and brilliant. Keep up with workout goals in the outdoor pool and fitness center. Start your morning with a delicious breakfast at Fresh. For lunch and dinner, dine at Amuse, featuring flavorful California cuisine and full bar service.

Hotel Key Card
View Hotel

Venue Parking Details

- Self-Parking: $39.00 daily - Valet Parking: $49.00 daily - SANS Attendees will receive a discounted parking rate of $13/day for daily drive-in and a discounted parking rate of $28/overnight. Rates listed are prevailing and subject to change. Alternative Parking Options - SANS recommends researching nearby parking facilities for more options. Some popular parking apps that can help you locate and reserve space during your training are SpotHero, ParkMobile, and ParkWhiz Distances from Nearby Airports - San Diego International Airport (SAN): Approximately 9.8 miles

Travel Arrangements and Parking
Google Maps

Save On United Flights To SANS Events

We are pleased to partner with United Airlines for air travel to our upcoming event. To make flight reservations online please book below and use discount code ZR8A247885. You may also call United Meetings Reservation Desk Monday – Friday at (800) 426-1122 for booking assistance. Booking fees are waived for Meeting reservations. International customers may contact their local United Reservation Desk.

United
Book Your FlightOnline Booking Instructions

Save on Delta Flights To Live Events

Delta Air Lines is pleased to offer special discounts for SANS Institute! You may also call Conferences and Events® at 1.800.328.1111* Monday–Friday, 8:00 a.m. – 6:30 p.m. (EST) and refer to Meeting Event Code ‘NM4QS’. *Please note there is not a service fee for reservations booked and ticketed via our reservation 800 number.

Delta