Join us for VulnCon 2027, March 30-April 2, 2027, in Scottsdale, Arizona.
Hosted by FIRST and the CVE Program, VulnCon is a focused forum for the people building, operating, and improving vulnerability programs. Join practitioners, researchers, CVE Numbering Authorities (CNAs), and industry leaders from around the world to share knowledge, strengthen collaboration, and advance the global vulnerability ecosystem.
Check out content from the previous VulnCons! VulnCon26, VulnCon25 & VulnCon24
-
"Security professionals have many conference options in today's market; however, Red Hat continues to get more value out of the presentations and topics at VulnCon than any other conference. Topics are vetted very well and are almost always relevant to the work we do as a software manufacturer to both proactively and reactively address vulnerabilities.”
-
"What keeps us coming back to VulnCon year after year is the community. The conversations are collaborative, highly technical, and centered around the real challenges vulnerability management teams are facing every day. It's one of the few events where vendors, practitioners, researchers, and industry leaders come together with a genuine focus on improving the ecosystem as a whole.”
Co-Host
CVE
The mission of the CVE® Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. There is one CVE Record for each vulnerability in the catalog. The vulnerabilities are discovered then assigned and published by organizations from around the world that have partnered with the CVE Program. Partners publish CVE Records to communicate consistent descriptions of vulnerabilities. Information technology and cybersecurity professionals use CVE Records to ensure they are discussing the same issue, and to coordinate their efforts to prioritize and address the vulnerabilities.
Co-Host
FIRST
FIRST is the premier organization and recognized global leader in incident response. Membership in FIRST enables incident response teams to more effectively respond to security incidents - reactive as well as proactive. FIRST brings together a variety of computer security incident response teams from government, commercial, and educational organizations. FIRST aims to foster cooperation and coordination in incident prevention, to stimulate rapid reaction to incidents, and to promote information sharing among members and the community at large.
Diamond
Hinoki
Hinoki (noun), the self-driving exposure management platform for turning findings into fixes. We detect CVEs across cloud and on-premises, relentlessly AI-pentest apps for complex business logic issues, and prioritize using the data already living in your systems. Our agents are outcome-driven, following through on remediations until the fix or compensating control is verified. Attackers don't sleep because they use AI. So should you.