CYBERSEC NETHERLANDS · 9–10 SEPTEMBER 2026 · JAARBEURS UTRECHT

Your last penetration test was true for exactly one day.

Crimson7 brings two theatre sessions to Utrecht on what replaces it. Continuous validation on the attack side, continuous hunting on the defence side, both running against live defences and both producing evidence you can hand to an auditor.

WHAT WE ARE PRESENTING

Two sessions. Two angles on one platform.

Wednesday works the attack side: run real adversary behaviour against your live defences and prove whether your detections actually fire. Thursday works the defence side: take a CTI lead and turn it into an executable hunt in minutes. Same platform, same evidence trail, opposite ends of the same loop. Joey Verleg presents both, joined by Atilla Balin on Thursday.

WED 9 SEP · 12:30–13:00Masterclass Theater 2
THE ATTACK SIDE

Always Under Attack: Turning Purple Teaming into Continuous Security Validation

In this session, Crimson7 tackles one operational question head-on: do our detections actually catch real attacks, right now? We'll show how we use HackerFlow to answer that without waiting for the annual red/purple team cycle.…

Joey Verleg · Head of Managed Services, Crimson7
THU 10 SEP · 12:30–13:00Masterclass Theater 2
THE DEFENCE SIDE

Never Hunt Alone: A Threat Hunting Companion for the SOC

In this session Crimson7 will show how to turn threat hunting from “tribal knowledge” into a repeatable, measurable workflow using 7Hunter.…

Joey Verleg · Head of Managed Services, Crimson7 | Atilla Balin · Defensive Security Consultant, Crimson7
THE PLATFORM

One platform, both ends of the loop

Validation that runs once is a snapshot. Validation that stops at the finding is a to-do list. So the platform wraps adversarial exposure validation at both ends: continuous in front, remediation at the back, delivered as detection-as-code and response-as-code. We call it CAEVR, Continuous Adversarial Exposure Validation and Remediation.

The two sessions in Utrecht are the two halves of that loop in practice. Neither is a separate product to choose between. They are the same evidence trail, read from opposite ends.

Hall 11 · Stand 11.C015

Bring your hardest question

Find us at Hall 11 · Stand 11.C015 across both days. We are there to talk about offensive security, detection engineering, threat hunting, and how continuous validation actually runs in production rather than in a slide.

The useful conversations at these events are the ones where someone tells us what is not working.

Red TeamPurple TeamDetection EngineeringThreat HuntingManaged SecurityContinuous validationDetection- & Response-as-Code
ABOUT

Crimson7 in one paragraph

Crimson7 is an offensive security firm based in Brussels. We do red team, purple team, detection engineering, and threat hunting work for enterprises and partners, and we built a platform to run that work continuously rather than once a year, because the market did not have one that operators actually wanted to use.