Our 2027 Event Sponsors
FIRST would like to gratefully acknowledge the following organizations and individuals for their support!
Co-Host
Co-Host
CVE
The mission of the CVE® Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. There is one CVE Record for each vulnerability in the catalog. The vulnerabilities are discovered then assigned and published by organizations from around the world that have partnered with the CVE Program. Partners publish CVE Records to communicate consistent descriptions of vulnerabilities. Information technology and cybersecurity professionals use CVE Records to ensure they are discussing the same issue, and to coordinate their efforts to prioritize and address the vulnerabilities.
Co-Host
FIRST
FIRST is the premier organization and recognized global leader in incident response. Membership in FIRST enables incident response teams to more effectively respond to security incidents - reactive as well as proactive. FIRST brings together a variety of computer security incident response teams from government, commercial, and educational organizations. FIRST aims to foster cooperation and coordination in incident prevention, to stimulate rapid reaction to incidents, and to promote information sharing among members and the community at large.
Diamond
Diamond
Hinoki
Hinoki (noun), the self-driving exposure management platform for turning findings into fixes. We detect CVEs across cloud and on-premises, relentlessly AI-pentest apps for complex business logic issues, and prioritize using the data already living in your systems. Our agents are outcome-driven, following through on remediations until the fix or compensating control is verified. Attackers don't sleep because they use AI. So should you.
Platinum Sponsor
Platinum
Astelia
Astelia is an AI-native exposure management platform built by former leaders of the Israeli National Red Team. It maps real network topology through read-only integrations and applies agentic AI to analyze what each exploit actually requires, correlating exploit conditions against the live topology to identify the ~1% of findings that are genuinely reachable and exploitable. For each one, Astelia drives agentic remediation beyond patching, giving teams practical paths to close real exposure.
Platinum
Empirical Security
Most risk assessment tools rely on global models and external threat intelligence. These generalized tools capture the world outside our window, but they're blind to how an organization’s infrastructure, assets, and exposures actually change day to day.
Without that context, security teams chase vulnerability volumes instead of focusing on mitigating the risk that’s unique to their particular environment – everything from cloud misconfigurations to application code flaw to obscure, rarely exploited CVEs.
Using localized models changes everything.
The right application of data science and AI makes local models possible. The result? 95% of noise is eliminated, and true-risk issues are found that were previously missed. Security teams can punch way above their weight class, because they’re working less to have maximum impact.
Empirical Security enables the creation of local models at scale.
Platinum
Socket
Socket blocks malicious and vulnerable open source packages before they reach your code. Its AI Threat Engine analyzes package behavior in real time across npm, PyPI, Go, Rust, Ruby, and PHP, catching supply chain attacks that vulnerability scanners miss.