---

SO-CON is SpecterOps' annual conference focused on Adversary tradecraft, identity-based security and Attack Paths.

SO-CON 2027 features talks, trainings, and networking events focused on identity-based security and Attack Paths. It kicks off the week with a two-day main conference and ends with a selection of four-day adversary-focused training courses. The Call for Presentations (CFP) is open from October 14 through November 13, 2026.

Call for Presentations
We invite talk submissions for 50-minute sessions (~45 minutes of content and 5 minutes of Q&A) and 25-minute sessions (~20 minutes of content and 5 minutes of Q&A) that explore the offensive and defensive realities of modern identity security, Attack Paths, and the systems and relationships that make them possible.

Some suggested topics we would love to see:

• Novel Attack Path research
• BloodHound and OpenGraph use cases, research, and extensions
• AI/ML for offensive and defensive Attack Path discovery
• Agentic AI Attack Paths in enterprise environments.
• Detection and response workflows for AI-accelerated identity attacks
• Lessons learned from AI-enabled red teaming and infrastructure
• Identity provider attacks and defenses, including Active Directory, Entra ID, Okta, and others.
• Hybrid and cross-environment Attack Paths
• Federated identity and Attack Paths across multiple identity providers
• CI/CD pipeline security
• SaaS application identity and authorization models
• Cookie, token, and session theft techniques
• Anything else interesting you've discovered, built, broken, defended, or learned in the world of identity and Attack Paths

SO-CON is a technical conference. Product pitches, vendor presentations, and sales-focused submissions will not be accepted.

What makes a strong submission?
Strong proposals clearly explain what attendees will learn, why the topic matters, and what research, experience, technique, or perspective the speaker will bring. We particularly value technical depth, practical lessons, original research, and content attendees can apply in their own work.

CFP Review Process
To help reduce bias in the selection process, SO-CON anonymizes CFP submissions before they are provided to the CFP Review Board. We remove identifying information, including names, pronouns, and affiliations, from the title, description, and outline. Please avoid including identifying details in your submission wherever possible.

Reviewers compare anonymized submissions using an Elo-based comparative rating system, considering factors such as relevance to the conference, technical quality, originality, and the value the session is likely to provide attendees.

The SO-CON team uses these ratings as an input when curating the final conference agenda, alongside considerations such as topic diversity and overall program balance. The final agenda will include talks selected through the open CFP, alongside sessions from SpecterOps employees and invited speakers. We will also select a number of backup proposals in case a speaker is unable to participate.

Selected speakers will be contacted directly to confirm their participation.

Speaker Benefits
As a valued speaker at SO-CON 2027, you'll enjoy a range of benefits to enhance your experience and support your participation. These include:

• A free two-day conference ticket to SO-CON 2027 for up to two speakers.
• A fixed honorarium to help offset travel and hotel expenses for one speaker (Domestic US: $1,500 / International: $2,500).
• A free four-day training ticket to a SO-CON training course for one speaker (in-person and course selection subject to availability).
• Most meals are provided during the conference and training.
• A speaker dinner if present on the evening before the conference begins (location and time TBD).
• Access to the SO-CON Speaker Mentorship program where you can receive one-on-one coaching and feedback from seasoned security researchers as you prepare for your talk.

CFP Submission Agreements
Please be aware that by submitting to the CFP and being accepted, you agree to the following:

• The submitter(s) will review and adhere to the Code of Conduct.
• You agree to present your session in person at its scheduled date and time, except in the event of unforeseen circumstances.
• You retain ownership of the content you submit and present. SpecterOps does not claim ownership of your work.
• You grant SpecterOps the right to reproduce, distribute, advertise, and show your presentation, including on the SO-CON website, in printed and electronic advertisements, and through other media.
• Attendees may take photographs of speakers and presentation slides. Speakers may ask attendees not to photograph specific content at the beginning of their session.
• You will submit a headshot photograph (or avatar) that can be posted on the SO-CON website, social media, and any printed materials.
• You will provide a valid email address that you monitor regularly for official speaker communications.
• The speaker honorarium will be paid after the conference has ended.
• You will complete the required speaker confirmation steps by the deadline stated in the acceptance email. You are not confirmed as a speaker until these tasks are complete.
• You will bring your own presenting hardware (e.g., laptop) to present your talk. SpecterOps will provide projectors, screens, internet, and an HDMI connection.
• Please identify any additional hardware requirements in your submission.

International Speakers and Visas
International speakers are responsible for ensuring they have the documentation and authorization required to enter the United States. SpecterOps is currently unable to provide visa sponsorship. See the DHS website for more information. SpecterOps is able to provide an invitation letter to confirmed speakers upon request.

Submission Guidelines
Submit your proposal through Sessionize during the CFP submission period. You may edit your submission at any time while the CFP is open. After the CFP closes, you will only be able to view its status.

Important Dates
Below some key dates at a glance:

• CFP opens: October 14, 2026 at 00:00 ET
• CFP closes: November 13, 2026 at 23:59 ET
• Speaker notifications: December 2026
• Conference: April 26 - 27, 2027
• Training courses: April 28 - May 1, 2027

Contact
If you have any questions, please feel free to email us at socon@specterops.io.

---

See "Speaker Privileges" for a complete list of benefits and honorarium details

---

Submit a session