Security teams don't always have enterprise budgets but they still need to know where they stand. In this practical, demo-driven session, Emmanuel Vagneur and Jeremy Chapeau will explore free, open-source tools that any organization can use to understand and improve its security posture, and share what these tools can (and can't) realistically do for you.
The conversation covers an honest look at relying on open-source tooling for security: the transparency and zero cost on one side, the lack of vendor support and the burden of interpretation on the other. Through live examples, we'll look at how to assess cloud and SaaS environments against recognized benchmarks like the CIS Foundations Benchmarks, walk through the findings that matter most for smaller organizations, and dig into a theme every auditor will recognize: why a scanner's severity rating isn't the same as real risk, and why the tools find the gaps but the professional makes the call. From there we move from knowing your misconfigurations to understanding how an attacker could chain them together mapping the attack paths that turn a list of findings into a defensible security story.
Together, we'll show a complete, no-budget-required workflow: find what's exposed, then understand how it could be exploited.
As always, this Coffee Talk is free, open to the public, and qualifying participants can earn 1 CPE.
ATTENDEE TAKEAWAYS:
A realistic understanding of what open-source security tools can do and their limits
Practical familiarity with assessing cloud and SaaS security posture
An introduction to attack-path mapping
The knowledge to try these tools in their own environments
SPEAKERS:
Emmanuel Vagneur, Security Engineer at Faro
Emmanuel began his career as a software engineer with the French Navy, working on complex technical systems in high-stakes environments and collaborating closely with allied and international partners on interoperability experiments
These experiences naturally led him to transition into cybersecurity, where he now focuses on protecting small and medium-sized businesses, strengthening system resilience, and continuously expanding his expertise in security and technology.
Visit Emmanuel on LinkedIn: https://www.linkedin.com/in/emmanuel-vagneur/
Jeremy Chapeau, Founding Engineer at SubImage
Jeremy is a security engineer specializing in cloud security, attack-path analysis, and large-scale graph systems. He previously led offensive security operations for the French government and later managed security, infrastructure, and reliability teams.
At SubImage, he builds cloud-scale security systems that model identity, permissions, and attack paths across AWS, GCP, Azure, and Okta, operating on graphs with millions of nodes and relationships. Jeremy is also a core maintainer of Cartography, the CNCF open-source project for graph-based cloud security analysis. His work focuses on turning complex infrastructure and security data into practical ways to understand how attackers can move through real-world environments.
Visit Jeremy on LinkedIn: https://www.linkedin.com/in/jchapeau/
DETAILS:
Date: Friday, September 25th
Time: 12:00 - 1:15 p.m.
Location: Online via Zoom
CPE: 1
ONLINE
Online access is available via the chapter’s Zoom account (registration below).
Attendance capacity is 500