Join a Meeting or an Event, download logos and Zoom backgrounds
This year, cdCon is intentionally designed around intensive learning and deep knowledge sharing in four critical areas that are actively driving the evolution of DevOps, CI/CD, and platform engineering. The way we build, deliver, and operate software is changing rapidly. CI/CD pipelines are no longer responsible for shipping application code alone; they now support complex platforms, distributed systems, and increasingly, AI and machine learning workloads. At the same time, security expectations are rising, and open source software continues to form the backbone of modern delivery. cdCon 2026 is focused on giving practitioners the clarity, skills, and shared understanding needed to navigate and lead this change.
Software supply chain security is entering a new phase. Attackers are no longer limited to exploiting weaknesses discovered during development. They are targeting what’s already running in production, often within days of a vulnerability being disclosed. As AI accelerates both vulnerability discovery and weaponization, organizations must evolve from build-time scanning to continuous post-deployment defense. SecureChainCon, hosted by the Ortelius open-source community, brings together practitioners, security leaders, platform engineers, and open-source contributors working to close the gap between vulnerability detection and real-world exposure. The conference focuses on making SBOMs operational, improving deployment visibility, and using automation and AI-assisted remediation workflows to reduce risk across live environments. This is not another conference about scanning earlier in the pipeline; it’s about Continuous Threat Exposure Management (CTEM) and Remediation for what’s already deployed.
You Can’t Manage What You Can’t See: The Role for Open Standards in the Age of AI
With the ever-increasing adoption of AI, designing and developing products securely has been still more critical, but actively managing your deployed products has become imperative. So how do you manage those vulnerabilities post-deployment?
Join this conversation with John Linford, The Open Group Security Portfolio Director, to learn more about tools, techniques, and (open) standards that can help you and your company gain visibility into your vulnerabilities and actively manage and mitigate them. John Linford is the The Open Group Security Portfolio Forum Director, responsible for facilitating the creation and delivery of standards and certification programs from the Security Forum, Open Trusted Technology Forum (OTTF), and Assured Dependability Work Group. These groups comprise the cybersecurity and supply chain security SMEs in The Open Group. The Open Group is a global consortium that enables the achievement of business objectives through technology standards. As Forum Director, John supports the leaders and participants of his Forums and Work Group in utilizing the resources of The Open Group to facilitate collaboration and follow The Open Group consensus-based Standards process to publish their deliverables.
Learn More and Submit Your Blog
Join the Ortelius community for our 5th annual BlogAThon, a celebration of ideas, learning, and open source collaboration. Whether you’re just getting started with open source or you’re a seasoned practitioner, BlogAThon is your opportunity to share knowledge, tell your story, and help shape the future of post-deployment vulnerability management.
Submit your blog between April 1st and July 31st to be considered a participant.
By participating, you’ll help advance the Ortelius mission to:
Empower new contributors to become confident, productive members of the Ortelius open source community
Accelerate adoption of the Ortelius platform by new users
Educate the broader ecosystem on software supply chain, security, and DevOps topics—especially those focused on post-deployment vulnerability management
Our BlogAThon isn’t just about writing—it’s about becoming part of the Ortelius team and contributing to a growing community that values openness, collaboration, and impact. We can’t wait to welcome you.
Episode 1 - View Now Building Your LinkedIn Personal Brand to Get Noticed, Presented by Darrin Straff, CareerStation
Episode 2 - View Now Secrets Unveiled: How Employers Find (and Hire) Top Talent, Presented by Erin Lovern and Buffie Gresh
Attend a meeting to keep up to date, or to get started as a contributor. We look forward to your help and input on the Ortelius project:
You can download different versions of the Ortelius Logo from the CD.Foundation GitHub Site: