Academic
US$150
For students, researchers and teaching staff registering with a university email.
- Both summit days
- Workshops, while seats last
- Lunch and refreshments
- Slides and recordings after the event
Defending systems in the age of AI.
AI now writes phishing emails, finds vulnerable code and answers customers. It also makes mistakes attackers can steer. Security teams are being asked to defend systems they didn't build, against tools that improve every month.
The summit brings defenders, attackers, researchers and regulators into one room for two days. We keep sessions practical: what broke, what worked, and what you can change when you're back at your desk.
“The region is digitising fast, and attackers know it. We want everyone who leaves this summit to defend their organization a little better on Monday morning.”
A few highlights from the programme. The full agenda has every session and speaker.
Day 1, 09:15
Keynote
Maya Lindqvist, Ninefold Security
Day 1, 09:45
Panel
Temuulen Odbayar, Ridgeline Payments; Bilguun Tsend, Altan Data Systems; Amara Okafor, Digital Trust Forum
Day 1, 11:15
Talk
Dr. Priya Raman, Sky Lattice Research
Day 1, 13:00
Workshop
Maya Lindqvist, Ninefold Security; Nomin Erdene, Gobi Cloud Works
Day 2, 09:00
Keynote
Kenji Morita, Harborline Response Team
Day 2, 09:30
Panel
Amara Okafor, Digital Trust Forum; Dr. Lukas Brenner, Harbor Point University; Bilguun Tsend, Altan Data Systems
AI writes convincing phishing in any language and finds weak code faster than most teams can patch it.
Chatbots, copilots and agents add prompt injection, data leakage and model theft to the risk register.
Data protection and AI regulation are tightening. Security teams need to know what will be required of them.
Banks, telcos and public services in fast-digitising economies attract attackers because defences are still maturing.
The region needs more defenders, and the defenders it has need AI skills to keep up.
Used well, AI triages alerts, hunts threats and drafts detections. Used carelessly, it adds risk.
Every session belongs to one of these streams.
CISOs, heads of security and risk owners setting strategy and budgets.
SOC analysts, penetration testers and security engineers doing the work.
People building and deploying models who need to ship them safely.
Public servants drafting and enforcing digital and AI rules.
Academics and students working on security and machine learning.
People building and funding the next generation of security companies.
Prices are per person. Payment is due within 5 working days of registering.
US$150
For students, researchers and teaching staff registering with a university email.
US$300
For public servants and regulators registering with a government email.
US$450US$600
Early bird until 20 November 2026
For everyone else. Any email address works.
Standard passes for the 2026 summit cost US$450 until 20 November, then US$600. Academic and government rates stay the same.
CyberSec AI
Red teamers, incident responders, researchers and policymakers from seven countries will speak in Ulaanbaatar this December.
CyberSec AI
Bring a laptop: one workshop attacks an LLM assistant, the other walks through threat modelling for AI products.
CyberSec AI
18 March 2027 in Ulaanbaatar
A one-day, lab-based workshop for security engineers who want to test chatbots, copilots and agents the way attackers do.
14–15 October 2027 in Ulaanbaatar
The third edition of the summit returns to Ulaanbaatar. Speakers and passes will be announced in spring 2027.