June 24, 2026
10:00 AM – 11:00 AM PT
San Francisco, CA

Mandalay Bay Penthouse | 62nd Floor | August 4–5

Sus-picious Activity Detected at the Penthouse


While everyone else is wandering the show floor trying to figure out who's the Impostor, the real action is happening upstairs. Tanium has taken over the penthouse suite at Mandalay Bay for two full days — live demos, hands-on Tanium Atlas labs, and short-form sessions from practitioners who actually know the platform.


Walk-ins welcome. Pre-registration required for scheduled sessions and Wednesday's networking happy hour.


No registration needed

Just want to stop by?

Drop by anytime on August 4 (10 AM - 7 PM) or August 5 (7 AM - 4 PM). Demo stations and Tanium Atlas hands-on labs will be available all day, and walk-ins are always welcome.

View the schedule ↓

    

Spots are limited

Register for sessions or the happy hour

Speaker sessions and Wednesday's networking reception require pre-registration. Spots fill up fast.

Reserve your spot →

Session Topics

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Session Title

Speaker Name

Register now

SPEAKERS

Featured Speakers

Savanah Leonardo

Co-Founder, Inc.

Savanah Leonardo

Co-Founder, Inc.

Savanah Leonardo

Co-Founder, Inc.

Savanah Leonardo

Co-Founder, Inc.

Three Reasons To Make it Up to the 62nd Floor


Win prizes

Complete the Crewmate Task List.

Pick up your passport at the suite, complete challenges across both days, and be entered into a raffle for the grand prize!

 

Hands-on lab

Drive Tanium Atlas yourself.

Real environment. Real workflows. No slides, no walkthrough — just you and the platform. Available both days, no appointment needed.

View the schedule ↓
 

Wed Aug 5 · 6–9 PM

Don't get ejected from the best party at Black Hat.

Mix with Tanium SMEs, cash in your completed passport, and compete for prizes. Pre-registration required — spots fill up.

Register for the happy hour ↑

Savanah Leonardo

Co-Founder, Inc.

Savanah Leonardo

Co-Founder, Inc.

Savanah Leonardo

Co-Founder, Inc.

AGENDA

Suite Schedule


TUESDAY, AUGUST 4TH

Length Session Speaker

Alex McGrath

VP of Product, Acme Corp

10:00 AM – 7:00 PM

Suite open

Demo stations, Atlas hands-on labs, 1:1s and walk-ins welcome

Alex McGrath

VP of Product, Acme Corp

1:00 PM – 4:00 PM

Midday Reception

No room key? Stash the bags, grab a bite and a drink. Demo stations, Atlas hands-on labs, scheduled 1:1s and walk-ins welcome

Alex McGrath

VP of Product, Acme Corp

★ 1:00 PM

15-min Session

Map the Path, Break the Chain: AI-Contextualized Exposure Across the Hybrid Attack Surface


CVSS tells you how bad a vulnerability looks in isolation. It doesn't tell you which one actually matters in your environment. See how Tanium's Atlas maps your hybrid attack surface the way an adversary would — chaining internet-facing exposures through endpoints, cloud, and identity to reach your Crown Jewels — then surfaces the one fix that breaks the most paths at once. This is exposure management built for how attacks actually happen, not how dashboards are organized.

Speaker: David SooHoo, Director, Product Management
Solution: Exposure Management

Pre-registration Required

Alex McGrath

VP of Product, Acme Corp

★ 3:00 PM

15-min Session

Hunt Faster. Find More. Let Atlas Lead.


The classic hunt works: query, pivot, repeat, refine but this takes time and bandwidth from your team. Now watch Tanium Atlas speed this up - agentic threat hunting in action: Atlas picks the right tool, Threat Navigator runs the hunt, and live endpoint data closes the loop automatically. Same threat, a fraction of the time. Come see the before and after for yourself.

Speaker: Brent Midwood, Sr. Director, Product Management
Solution: Security Operations

Pre-registration Required

Alex McGrath

VP of Product, Acme Corp

★ 4:30 PM

15-min Session

The SOC That Never Sleeps


Threat hunting. Alert Triage. Forensics Analysis. Detection Engineering. Now picture all of it running continuously — no analyst pulled in until a decision actually needs a human judgment call. In this session, we fire a real attack cycle against a live tenant and watch a mesh of Tanium Atlas background agents work the full security operations workflow end to end, live, in real time. This isn't a roadmap demo. This is what your SOC looks like when the agents never clock out.

Speaker: Aaron Smith, Head of Threat Hunting
Solution: Tanium Atlas

Pre-registration Required

Alex McGrath

VP of Product, Acme Corp

7:00 PM onward

Crewmate Council Dinners

Dinners across the Cosmopolitan (pre-registration required)

Alex McGrath

VP of Product, Acme Corp

WEDNESDAY, AUGUST 5TH

Alex McGrath

VP of Product, Acme Corp

7:00 AM – 9:00 AM

Suite open

Suite open. Demo stations, Tanium Atlas hands-on labs, scheduled 1:1s and walk-ins welcome

Alex McGrath

VP of Product, Acme Corp

9:00 AM – 4:00 PM

Suite open

Demo stations, Tanium Atlas hands-on labs, scheduled 1:1s and walk-ins welcome

Alex McGrath

VP of Product, Acme Corp

★ 11:30 AM

15-min Session

Hunt Faster. Find More. Let Atlas Lead.


The classic hunt works: query, pivot, repeat, refine but this takes time and bandwidth from your team. Now watch Tanium Atlas speed this up - agentic threat hunting in action: Atlas picks the right tool, Threat Navigator runs the hunt, and live endpoint data closes the loop automatically. Same threat, a fraction of the time. Come see the before and after for yourself.

Speaker: Brent Midwood, Sr. Director, Product Management
Solution: Security Operations

Pre-registration Required

Alex McGrath

VP of Product, Acme Corp

★ 3:00 PM

15-min Session

The SOC That Never Sleeps


Threat hunting. Alert Triage. Forensics Analysis. Detection Engineering. Now picture all of it running continuously — no analyst pulled in until a decision actually needs a human judgment call. In this session, we fire a real attack cycle against a live tenant and watch a mesh of Tanium Atlas background agents work the full security operations workflow end to end, live, in real time. This isn't a roadmap demo. This is what your SOC looks like when the agents never clock out.

Speaker: Aaron Smith, Head of Threat Hunting
Solution: Tanium Atlas

Pre-registration Required

Alex McGrath

VP of Product, Acme Corp

4:00 PM – 6:00 PM

Meetings

Pre-booked meetings only

Alex McGrath

VP of Product, Acme Corp

6:00 PM – 9:00 PM

the headline event

Networking Happy Hour

Alex McGrath

VP of Product, Acme Corp

★ 8:00 PM

15-min Session

Map the Path, Break the Chain: AI-Contextualized Exposure Across the Hybrid Attack Surface


CVSS tells you how bad a vulnerability looks in isolation. It doesn't tell you which one actually matters in your environment. See how Tanium's Atlas maps your hybrid attack surface the way an adversary would — chaining internet-facing exposures through endpoints, cloud, and identity to reach your Crown Jewels — then surfaces the one fix that breaks the most paths at once. This is exposure management built for how attacks actually happen, not how dashboards are organized.

Speaker: David SooHoo, Director, Product Management
Solution: Exposure Management


Pre-registration Required

Alex McGrath

VP of Product, Acme Corp

Tanium Penthouse Suite

Mandalay Bay

3950 Las Vegas Blvd S, Las Vegas, NV 89119

The penthouse is where real conversations happen. Come for the demos, stay for the prizes, leave knowing exactly how Tanium can fortify your stack.

FAQ

Still have questions?

Find answers to the most common questions, or reach out to our team for personalized guidance.

What is the format of this event?

This is an in-person event with virtual attendance options available.

Is there a cost to attend?

No, this event is complimentary for qualified attendees.

Will sessions be recorded?

Yes, all sessions will be recorded and made available within 48 hours.

How do I get CPE credits?

CPE credit instructions will be emailed to registered attendees prior to the event.

Who should attend?

This event is designed for IT security and operations leaders at enterprise organizations.