CEE Tech Dōjō 2026

3-4 November 2026 | Krakow, Poland

Secure your place.

Trend Micro respects your privacy. Read our privacy policy.

Detailed agenda

Day 1 (November 3, 2026)

Time	PLENARY \| Main Room \| All Attendees
09:00	Doors open — Registration & Coffee
09:30	Why We're Here \| Mihai Sari & Bogdan Vigaru \| 60 min Event kick-off covering the Tech DOJO concept and the current CEE threat landscape. Mihai and Bogdan set the energy, framing, and partner context for the three days ahead.
10:30	AI is the New Attack Surface \| Filip Marvan \| 40 min Filip Marvan on Trend's AI security offering — shadow AI, model poisoning, AI API abuse, ZTNA for AI workloads, governance & visibility, pipeline protection. Live demo. The flagship session of the event.
11:10	The single agent progress \| Matija Mandarić \| 20 min A sneak peak at what we already have, how to get it, and what is about to come soon.
11:30	Coffee break \| 20 min Track Split. Participants move to their chosen room

TRACK 1 \| System Integrations \| Main Room
11:50	ZTNA: From Zero to POC\| Bojan Milovanovic \| 30 min Practical deployment walkthrough of ZTNA in TrendAI Vision One™ architecture, connector setup, policy config, and how to structure a partner-led POC. What customers ask and how to answer.
12:20	Room reset before lunch
12:30	Lunch break \| 60 min
13:30	Agentic SIEM in Practice: From Configuration to Investigation \| Tomáš Váchal \| 30 min A console-led walkthrough of TrendAI Vision One™ Agentic SIEM, from data-source and repository configuration to detection and investigation. Using Fortinet FortiGate as the main example, we will examine collection, ingestion and retention, validate parsed logs, and connect detection filters and models to a Workbench alert. We will then compare the Palo Alto Networks configuration, and briefly show how Vision One shares selected intelligence back to a firewall for use in its local policy.
14:00	Locking Down AI \| Filip Marvan \| 30 min Doubling down on AI with a deep-dive: ZTNA for AI services, AI Guard, shadow AI enforcement, and what TrendAI Vision One™ sees when AI tools go unmanaged in a customer environment.
14:30	Cloud Risk, Made Visible \| Tamás Barna \| 40 min CNAPP in TrendAI Vision One™ you will experience misconfiguration detection, compliance mapping, remediation workflows. Framed around real partner deployment scenarios.
15:10	Identity Under Attack \| Andreea Grafu \| 20 min Identity is the new perimeter – long hanging fruits connecting IP and immediately get user risk scoring, privileged account monitoring, IdP integration in TrendAI Vision One™. How to position and demo identity risk for buyers leading with identity.
15:30	Short break \| 15 min
15:45	Real Cases, Real Fixes \| Attila Gömbös \| 45 min Our greatest Technical Account Managers (TAMs) will walk you through actual field escalation cases diagnosis methodology, log collection, common failure patterns, and how to engage support effectively. Bring your hardest questions.
16:30	Demo That Wins \| Andrzej Sawicki \| 30 min Learn from the best how to structure a compelling TrendAI Vision One™ demo what to lead with, how to tailor the narrative by audience, how to handle live environments and recover when things go sideways.
17:00	Open Floor \| Mihai Sari \| 30 min Roundtable with Trend engineers and CSMs. What is blocking deals, what customers are asking for, what is on the roadmap. No slides.

TRACK 2 \| SOC & Incident Response \| Lab Room (tables, 30 seats)
11:50	Workflow Foundations \| Marc Lanzendorfer \| 40 min IR and Threat Hunting Basics: alerts, telemetry pivoting, timeline building. Gets every participant to the same baseline before scenarios begin.
12:30	Lunch break \| 60 min
13:30	XDR-driven Incident Response Scenario (Part 1) \| Marc Lanzendorfer \| 75 min Investigating from Scratch: Build Threat Hunting Hypothesis, identify patient zero, map lateral movement, contain.
14:45	Short break \| 15 min
15:00	XDR-driven Incident Response Scenario (Part 2) \| Marc Lanzendorfer \| 90 min Long-dwell actor, living-off-the-land techniques: hunting queries, XDR telemetry pivoting, forensic analysis.
16:30	Short break \| 15 min
16:45	Debrief & Lessons Learned and AMA \| Marc Lanzendorfer \| 30 min Group post-mortem: what was missed, what surprised, what to do differently next time. Honest format — no right answers.
JOINT SESSION \| Main Room \| Both Tracks Together
17:30	Building Your MSSP Practice \| Bogdan Vigaru \| 30 min Services and operations model for partners — how to structure and position managed security services using TrendAI™ tooling. Key considerations for MSSP partners in the CEE region.
Side event
20:00	Dinner at Forum Fun & Food

Day 2 (November 4, 2026)

Time	CTF & CLOSING \| Main Room \| All Participants
09:30	Night Before Report: Key Takeaways from Day 1 \| Mihai Sari & Bogdan Vigaru \| 30 min Quick synthesis across both tracks — key themes, standout questions, anything that needs a moment before the CTF begins.
10:00	Break the Bot \| Filip Marvan \| 90 min Everyone competes. Participants face an AI-powered security assistant and must break it — prompt injection, context manipulation, filter bypass, trust chain abuse. Opening CTF challenge for the full room.
11:30	Hunt or Be Hunted \| Marc Lanzendorfer \| 90 min Pre-loaded environment with real-world TTPs. Participants write queries, pivot through telemetry, document findings. Scored on accuracy and completeness — the write-up matters.
13:00	CTF Closes Live Scoreboard Finalised
13:15	Champions Crowned \| Mihai Sari \| 15 min Winners announced by category plus overall champion.
13:30	Closing Lunch & Safe Travels \| Mihai Sari Bilateral conversations, open networking, departures throughout the afternoon.

Section Headline

Add your content here.

Learn more

Accordion 1 Section Title

Accordion 1 Content Heading

Accordion 1 content goes here. This is a single full-width rich text area — add paragraphs, headings, lists, links, images, or any HTML supported by the Marketo editor. To display content in columns, use an lp-table — add a table in the editor and apply the class lp-table to the <table> element; each <td> becomes a column. See the Tables guide card for the full snippet.

Accordion 2 Section Title

Accordion 2 Content Heading

Accordion 2 content goes here. This is a single full-width rich text area — add paragraphs, headings, lists, links, images, or any HTML supported by the Marketo editor. To display content in columns, use an lp-table — add a table in the editor and apply the class lp-table to the <table> element; each <td> becomes a column. See the Tables guide card for the full snippet.

Accordion 3 Section Title

Accordion 3 Content Heading

Accordion 3 content goes here. This is a single full-width rich text area — add paragraphs, headings, lists, links, images, or any HTML supported by the Marketo editor. To display content in columns, use an lp-table — add a table in the editor and apply the class lp-table to the <table> element; each <td> becomes a column. See the Tables guide card for the full snippet.

Accordion 4 Section Title

Accordion 4 Content Heading

Accordion 4 content goes here. This is a single full-width rich text area — add paragraphs, headings, lists, links, images, or any HTML supported by the Marketo editor. To display content in columns, use an lp-table — add a table in the editor and apply the class lp-table to the <table> element; each <td> becomes a column. See the Tables guide card for the full snippet.

Accordion 5 Section Title

Accordion 5 Content Heading

Accordion 5 content goes here. This is a single full-width rich text area — add paragraphs, headings, lists, links, images, or any HTML supported by the Marketo editor. To display content in columns, use an lp-table — add a table in the editor and apply the class lp-table to the <table> element; each <td> becomes a column. See the Tables guide card for the full snippet.

Accordion 6 Section Title

Accordion 6 Content Heading

Accordion 6 content goes here. This is a single full-width rich text area — add paragraphs, headings, lists, links, images, or any HTML supported by the Marketo editor. To display content in columns, use an lp-table — add a table in the editor and apply the class lp-table to the <table> element; each <td> becomes a column. See the Tables guide card for the full snippet.

Accordion 7 Section Title

Accordion 7 Content Heading

Accordion 7 content goes here. This is a single full-width rich text area — add paragraphs, headings, lists, links, images, or any HTML supported by the Marketo editor. To display content in columns, use an lp-table — add a table in the editor and apply the class lp-table to the <table> element; each <td> becomes a column. See the Tables guide card for the full snippet.

Accordion 8 Section Title

Accordion 8 Content Heading

Accordion 8 content goes here. This is a single full-width rich text area — add paragraphs, headings, lists, links, images, or any HTML supported by the Marketo editor. To display content in columns, use an lp-table — add a table in the editor and apply the class lp-table to the <table> element; each <td> becomes a column. See the Tables guide card for the full snippet.

Event sponsors

Arrow

Clico

Comtrade

Exclusive Networks

SecTec

Speaker Name

Job Title

Company

Speaker Name

Job Title

Company

Speaker Name

Job Title

Company

Speaker Name

Job Title

Company

Speaker Name

Job Title

Company

Speaker Name

Job Title

Company

Speaker Name

Job Title

Company

Speaker Name

Job Title

Company

Speaker Name

Job Title

Company

Speaker Name

Job Title

Company

TRAIN · CONNECT · DEFEND

60 seats. No more.
Hand-picked engineers from our best partners and distributors.
Two days built entirely around what matters:
♦ live labs,
♦ real scenarios,
♦ and a Capture the Flag competition with actual stakes.

No slideware. No pitch.
Just training, connection, and a chance to compete for top-notch prizes.

What to Expect

DAY 1

Day 1 kicks off with a full day of content designed to be dense, practical, and immediately useful. We open together with a clear view of where TrendAI™ is heading — the TrendAI™ strategy, where the investment is going, and why AI security is the most important conversation you will be having with customers in the next 12 months. From there we move into how TrendAI Vision One™ positions you to help your customers navigate an AI-saturated threat landscape.

| TRACK 1 |

After the morning plenary, we split into two tracks. If you are on the integration and pre-sales side, Track 1 is built for you — our Solution Engineers will run live demos and practical sessions covering ZTNA deployment, the benefits of a connected security infrastructure, how identities drive risk calculation, cloud posture management, and how to master a TrendAI Vision One™ demo and POC conversation. No theory — field experience and working examples throughout.

| TRACK 2 |

If you live in the SOC or handle incident response, Track 2 is your track. You will get your hands dirty in a lab environment guided by our IR team, including a special guest bringing real experience straight from the incident response trenches. Expect scenarios, not slideshows.

DAY 2

On Day 2 we come back together — and we compete. Four CTF challenges covering AI, integrations, and threat hunting, with real prizes for the winners. Bring your laptop.

Column 2.

Column 3.

Column 4.

Event Details

Hotel Information

Qubus Hotel Krakow, Poland
4-star hotel with pool and parking
Underground parking (70 spaces)
Ground parking (10 spaces)
Both are complimentary for hotel guests
Address: Nadwiślańska 6, 30-527 Krakow
Directions: Google Maps

What's Included

Two days of training and networking
All meals and refreshments (Days 1 and 2)
An event T-shirt
CTF prizes for winners

Questions?

If you have any questions about accommodation,
please contact us at: anna.kozielska@startafire.pl

For questions about the event or special requests,
please contact us at: karolina.kus@startafire.pl

Hotel accommodation

Double room (510 PLN/night)
Single room (430 PLN/night)
All hotel costs will be charged to participants individually.
Rooms can be reserved through our agency (select the appropriate option on the form).

Qubus Hotel Krakow is a modern, 4-star hotel. Located right on the banks of the Vistula River, it is the perfect base for exploring the city, with the historic Kazimierz district just a short walk away via the nearby footbridge.

One of the hotel's most unique features is the indoor pool and hot tub on the top floor. Its glass walls offer panoramic views of the Vistula River and the Old Town.

Column 4.

Dinner venue

Forum Fun & Food
Address: Marii Konopnickiej 28, Krakow

Situated within the iconic brutalist structure of the former Hotel Forum, Forum Fun & Food is an expansive 3,000 m² entertainment complex that seamlessly combines mouth-watering global cuisine with exhilarating activities and unbeatable nightlife!

Event sponsors

Arrow

CLICO

Comtrade

Exclusive Networks

CEE Tech DŌJŌ 2026

Enter subtitle