If you use Zeek in production, have built something useful with it, or have a story about how it helped you solve a real problem, we want to hear from you.

This workshop is practitioner-focused. We’re not looking for product presentations or polished keynotes. We’re looking for honest talks about real deployments, real incidents, and real workflows. The best talks at events like this are the ones where someone in the audience thinks “I’ve been dealing with that exact problem!”

We’re particularly interested in:

• How you use Zeek at scale or in a constrained environment
• Integration stories (Zeek as part of a broader detection or response stack)
• Scripts, packages, or tools you’ve built that others could use
• Post-mortems or hunting workflows where Zeek made the difference
• Unexpected or creative uses of Zeek outside traditional NSM
• The basics done really well (deployment decisions, logging practices, tuning)

Presentation materials will be shared with the community after the workshop.

No product presentations, product marketing, or vendor pitches. This is a community event.

Format

We’re planning a mix of talk formats:

Standard talks (30 minutes including Q&A): The core of the program. Focused and practical with time for questions.

Lightning talks (5 minutes): A lower-stakes format for first-time speakers, works in progress, quick tool demos, or one interesting thing you want to share with the room. 

How to submit

Fill out the submission form with:

• Your name and email
• Talk title
• Abstract (what you’ll cover and why it’s useful to practitioners)
• Short bio
• Preferred format (standard talk or lightning talk)
• Confirmation that you can travel to Berkeley, CA

Submit your talk here.

Important dates

Submissions close: July 1, 2026

Notifications sent by: July 18, 2026

We review submissions on a rolling basis. Earlier submissions have a better chance of acceptance and will be notified sooner.

Questions? Email events@zeek.org.