fwd:cloudsec Europe 2026

fwd:cloudsec Europe 2026: what to expect

fwd:cloudsec is the vendor-neutral conference built by cloud security practitioners, for cloud security practitioners. The Europe edition returns to London on September 7-8, 2026, running independently of - but timed near - AWS re:Inforce-style conversations, with a program built entirely from community talks rather than product pitches.

Themes to watch

• Cloud attack and defense research across AWS, Azure, and GCP, presented by the practitioners who found the issues.
• Limitations of native cloud security features, and where teams still need to close the gap themselves.
• IAM, identity, and misconfiguration as the recurring root cause behind most cloud breaches.
• Practical defense strategies teams can take home and implement the same week.

Where container security fits into the conversation

A theme that shows up at every fwd:cloudsec is how much cloud risk starts upstream, in the container images running on that infrastructure long before an identity or network control ever gets tested. A misconfigured IAM role is easier to fix than an image full of unpatched CVEs that's already been promoted to production.

That's the gap Echo closes. Every image Echo ships is CVE-free, FIPS-validated using a CMVP-validated cryptographic module, and pre-hardened against DISA STIG requirements from the start, so cloud security teams spend less time triaging vulnerabilities in images they didn't build and more time on the identity and architecture problems fwd:cloudsec talks are actually about. Full SBOM transparency in SPDX and CycloneDX formats, plus signed provenance via cosign and sigstore, gives teams the same intelligence-driven visibility they'll hear championed on stage.

See you at fwd:cloudsec Europe?

If your team is rethinking where container security fits into your cloud security strategy, get in touch - we're happy to show you exactly how Echo changes the picture for vulnerability management and compliance reporting.