Confidential Computing Summit 2026: Full Schedule

Over the past decade, Microsoft has helped move confidential computing from research into real-world cloud infrastructure, platforms, and services. In this keynote, Mark will trace that evolution through the expanding promises of confidential computing, from protecting individual workloads to enabling verifiable trust across entire systems. He will share examples from Microsoft’s adoption journey and discuss the next frontier: confidential sovereignty, where organizations can verify code, enforce policy, and retain control across compute, networking, and software supply chains.

Speakers

Mark Russinovich

CTO, Deputy CISO and Technical Fellow, Microsoft Azure, Microsoft

Mark Russinovich is CTO, Deputy CISO, and Technical Fellow for Microsoft Azure, Microsoft’s global enterprise-grade cloud platform. A widely recognized expert in distributed systems, operating systems and cybersecurity, Mark earned a Ph.D. in computer engineering from Carnegie Mellon... Read More →

Mark Russinovich Confidential Computing Summit 2026 v2 pdf

Tuesday June 23, 2026 9:20am - 9:40am PDT
Courtyard

Keynote Sessions

Slides Attached Yes

9:40am PDT

Keynote: Future-Proofing Confidential AI - Nelly Porter, Director of Product Management, GCP Confidential Computing and Encryption, Google & Anand Pashupathy, VP /& GM, Intel Product Assurance & Security, Intel

Tuesday June 23, 2026 9:40am - 10:00am PDT

Courtyard

As confidential computing becomes the baseline for secure AI, the focus shifts to defending against emerging threats and accelerating complex, hardware-intensive workloads. This session details Google Cloud’s latest architectural advancements in Confidential AI. We will explore the technical integration of post-quantum cryptography (PQC) key management and the expansion of trusted execution environments (TEEs) across both CPUs and GPUs. Join us to understand the underlying infrastructure that enables the processing of highly sensitive data and the training of proprietary models with cryptographic assurance, protecting high-value AI assets against both current and horizon attack vectors.

Speakers

Anand Pashupathy

Vice President and General Manager Intel Product Assurance and Security, Intel

Anand Pashupathy is an Intel Vice President and Intel Product Assurance and Security General Manager responsible for the Intel’s Product Security and Confidential Compute roadmaps, implementation and operationalization of proactive security and risk-prioritized measures, security... Read More →

Nelly Porter

Director of Product Management, GCP Confidential Computing and Encryption, Google

Tuesday June 23, 2026 9:40am - 10:00am PDT
Courtyard

Keynote Sessions

10:00am PDT

Keynote: Protecting Data in The Agentic AI Era - Hugo Romero, Corporate Vice President, Product Security, AMD

Tuesday June 23, 2026 10:00am - 10:20am PDT

Courtyard

As AI shifts from answering chat questions to acting across sensitive data, tools, APIs, and workflows, we are entering the Agentic AI era, where confidential computing becomes essential to establishing trust at runtime. This keynote explores how AMD is advancing hardware-rooted protection for agentic AI through AMD SEV, enabling protected and attestable execution in production cloud infrastructure. The session will examine how runtime evidence, policy enforcement, and ecosystem deployment patterns can help make agentic AI practical for sensitive enterprise and cloud environments. It will also look ahead to how confidential AI continues to evolve across platforms, accelerators, and open standards.

Speakers

Hugo Romero

Corporate Vice President, Product Security, AMD

Hugo Romero is Corporate Vice President of the Product Security Office at AMD, where he leads AMD’s end-to-end product security strategy across hardware and software. In this role, he drives security across SoC Security Architecture, Confidential Computing, Root of Trust, Security... Read More →

Tuesday June 23, 2026 10:00am - 10:20am PDT
Courtyard

Keynote Sessions

10:35am PDT

Keynote: Agentic AI Is Running Your Infrastructure. Who's Accountable When It Goes Wrong? - Mike Bursell, Executive Director, Confidential Computing Consortium

Tuesday June 23, 2026 10:35am - 10:55am PDT

Courtyard

Agentic AI is already inside every enterprise. It's making decisions, accessing tools, and touching sensitive infrastructure autonomously, and most organizations have no idea whether their security posture was built to handle it.
This keynote cuts through the noise to give enterprise leaders a clear picture of what's actually at risk when AI agents operate at scale: the threat surfaces that emerge, the gaps in traditional defenses that vulnerabilities in the latest tools have already exposed, and the architectural shift required to stay ahead.
You'll leave with a concrete understanding of where your current security stack is likely falling short, why Confidential Computing's hardware-rooted trust model is becoming the standard for agentic AI deployment, and what your organization needs to prioritize before speed of adoption becomes a liability.
Hosted by the Confidential Computing Consortium, this session is designed for executives who are done waiting for security to catch up and ready to build AI infrastructure that's secure by design, from silicon to cloud.

Speakers

Mike Bursell

Executive Director, Confidential Computing Consortium

ike Bursell is the Executive Director of the Confidential Computing Consortium. He is one of the co-founders of the Enarx project (https://enarx.dev), and was CEO and co-founder of Profian, a start-up based on Enarx. He has previously served on the Governing Boards of the CCC and... Read More →

Tuesday June 23, 2026 10:35am - 10:55am PDT
Courtyard

Keynote Sessions

10:55am PDT

Keynote: Trustworthy AI with Confidential Computing - Dr. Najwa Aaraj, CEO, Technology Innovation Institute (TII)

Tuesday June 23, 2026 10:55am - 11:15am PDT

Courtyard

Speakers

Dr. Najwa Aaraj

CEO, Technology Innovation Institute (TII)

Dr. Najwa Aaraj is the Chief Executive Officer (CEO) at the Technology Innovation Institute (TII), the applied research pillar of the Advanced Technology Research Council (ATRC), the overarching advanced technology body in Abu Dhabi responsible for driving research and development... Read More →

Tuesday June 23, 2026 10:55am - 11:15am PDT
Courtyard

Keynote Sessions

11:15am PDT

Keynote Panel: The Sovereign Stack: Nations, Enterprises & the Demand for Verifiable AI - Hugo Romero, AMD; Najwa Aaraj, TII; Mark Russinovich, Microsoft; Nelly Porter, Google; Mike Bursell, CCC

Tuesday June 23, 2026 11:15am - 11:45am PDT

Courtyard

The race to deploy AI agents has exposed a fundamental gap in what “sovereign AI” actually means. Localized hosting and domestic ownership are no longer enough for true sovereignty. As nations and enterprises deploy AI at scale across sensitive infrastructure and distributed systems, the question is no longer whether they want sovereign AI, but whether they can prove it. True sovereignty requires verifiable answers to four questions: what code ran, where it ran, who operated it, and what rules were enforced. This keynote panel convenes leaders across the full sovereign stack, including silicon, cloud, and frontier model labs, to examine why hardware-enforced verifiability has become the cornerstone of production-grade sovereign AI deployments. The conversation will explore how hyperscalers, frontier model labs, and sovereign platforms are shaping trusted AI infrastructure, and why Confidential AI is now the foundational layer for compliance, IP protection, governance, and verifiable sovereignty. Because without proof of sovereignty, you have nothing.

Moderators

Frederic Lardinois

Sr. Editor, AI, The New Stack

Speakers

Nelly Porter

Director of Product Management, GCP Confidential Computing and Encryption, Google

Mike Bursell

Executive Director, Confidential Computing Consortium

Mark Russinovich

CTO, Deputy CISO and Technical Fellow, Microsoft Azure, Microsoft

Hugo Romero

Corporate Vice President, Product Security, AMD

Dr. Najwa Aaraj

CEO, Technology Innovation Institute (TII)

Tuesday June 23, 2026 11:15am - 11:45am PDT
Courtyard

Keynote Sessions

12:45pm PDT

Securing the Future with Azure Confidential Computing - Run Cai & Ashutosh Chickerur, Microsoft

Tuesday June 23, 2026 12:45pm - 1:10pm PDT

Courtyard

Confidential computing is becoming a critical foundation for cloud security in an era defined by AI acceleration, data sovereignty requirements, and rising expectations for end-to-end protection of sensitive workloads. Azure is advancing this space with new infrastructure, stronger platform protections, and innovations designed to make confidential workloads more resilient, scalable, and production ready. This session will highlight the latest Azure Confidential Computing developments, including v6 confidential VMs on AMD and Intel, expanded Azure regional availability, and continued progress in production readiness. We will also look ahead to live migration for confidential VMs, including a live demo, and discuss how this capability improves workload continuity during planned security updates and unexpected hardware events. In addition, we will explore future investments acrossenclaves, platform attestation, and confidential AI. Topics include nested virtualization to enable confidential enclaves, stronger platform attestation with recovery capabilities, protection of Azure trusted computing base services, and the growing need for confidential GPUs to secure prompts, model weights, and distributed inference workloads for modern AI applications at scale.

Speakers

Run Cai

Principal PM Manager, Microsoft

Run Cai is a Principal TPM Manager at Microsoft, leading large-scale Azure infrastructure and focusing on confidential computing programs. She is shaping future generations of Azure confidential computing platforms, driving product scale-out and elasticity while championing new initiatives... Read More →

Ashutosh Chickerur

Principal Engineering Manager, Microsoft

Ashutosh Chickerur is a Principal Software Engineering Manager at Microsoft, leading Azure confidential computing and cloud infrastructure efforts, with deep expertise in multi-cloud platforms, security, and large-scale distributed systems.

Tuesday June 23, 2026 12:45pm - 1:10pm PDT
Courtyard

Breakout Sessions

1:15pm PDT

Strictly Confidential: Use Cases & Demos of AI Workflows in TEEs - Sam Lugani & Ranjit Narjala, Google

Tuesday June 23, 2026 1:15pm - 1:40pm PDT

Courtyard

This session dives deeper into practical implementation and use cases for confidential computing. As complex AI models demand robust cryptographic roots of trust, we will demonstrate precisely how to architect and execute these environments in the real world. Through a series of live, hands-on demonstrations, we will showcase the latest confidential platforms in action, seamlessly extending trusted execution environments (TEEs) from model training all the way through to inference. Join us to look under the hood at the exact mechanisms and architectures that allow leading Google Cloud customers to secure complex AI workflows and keep active processing encrypted at scale.

Speakers

Sam Lugani

Product Lead, Confidential Computing, Google Cloud

Sam Lugani is the product lead for Confidential Computing and Confidential AI at Google. Sam started his professional career working as a software engineer at Cisco before venturing into product centric roles at FireEye, Synack and later at Google. He completed his MS in Computer... Read More →

Ranjit Narjala

Google Cloud, Engineering Lead, Confidential Computing,

Tuesday June 23, 2026 1:15pm - 1:40pm PDT
Courtyard

Breakout Sessions

1:45pm PDT

Panel Discussion: Proof in Production: Customer Lessons from Confidential AI - Reshma Shetty, ServiceNow; Shyam Menon, Mitek Systems; Nikhil Gulati, Johnson & Johnson; & James Edwards, Midland Credit Management

Tuesday June 23, 2026 1:45pm - 2:10pm PDT

Courtyard

Enterprises in regulated sectors face a stark reality: AI agents offer transformative potential, but the risk of sensitive data bleeding beyond governed boundaries remains unacceptable for many compliance and security teams. Organizations can no longer rely on black-box AI systems or accept the risk of uncontrolled data exposure, unverifiable execution, or AI workflows that outpace governance. As AI adoption accelerates, trust has become the bottleneck, and auditors are demanding verifiable proof. This panel brings together enterprise leaders navigating the real-world challenge of deploying AI in environments where compliance is non-negotiable. Panelists will share how they are balancing innovation with operational control, meeting the demands of governance teams and regulators, and building the verifiable guardrails needed to move from pilot to production. The discussion will explore why Confidential AI is becoming foundational for enterprises that need to operationalize AI without compromising governance, auditability, or trust.

Moderators

Aaron Fulkerson

OPAQUE, CEO

Speakers

Shyam Menon

Senior Director of Product- Machine Learning & Fraud, Mitek Systems

Nikhil Gulati

Global Head, Engineering & AI, Polyphonic, Johnson & Johnson

James Edwards

Senior Director, IT, Midland Credit Management

Reshma Shetty

Senior Director of Engineering, ServiceNow

Tuesday June 23, 2026 1:45pm - 2:10pm PDT
Courtyard

Breakout Sessions

2:15pm PDT

Panel Discussion: State of the Union: Confidential AI From the Field - Moderated by Aaron Fulkerson, OPAQUE

Tuesday June 23, 2026 2:15pm - 2:45pm PDT

Courtyard

Confidential AI is moving rapidly from experimentation to production. Across industries, enterprises are demanding secure, verifiable AI infrastructure for sensitive workloads, regulated data, and autonomous agents. Leaders from across the ecosystem share a State of the Union from the field: where Confidential AI is gaining traction, what's driving demand, emerging use cases, deployment challenges, and the infrastructure requirements shaping the next wave — plus what it actually takes to move from pilot to production over the next 12 months.

Moderators

Aaron Fulkerson

OPAQUE, CEO

Speakers

Nelly Porter

Director of Product Management, GCP Confidential Computing and Encryption, Google

Jonathan Dotan

Founder & CEO, EQTY Lab

EQTY Lab builds tools to reinvent trust in AI. As a serial founder, Jonathan has spent over 25 years navigating the intersection of technology and governance as a C-suite leader, investor, and researcher. He is also the founding director of The Starling Lab at Stanford University... Read More →

Antoine Delignat-Lavaud

Principal Researcher, Microsoft

Harold Gilkey

Director, Product Security Office, AMD

Harold Gilkey is a Director in AMD's Product Security Office, with a particular focus on confidential computing. He works across architecture, product, and engineering teams to extend hardware-rooted trust from silicon through the software stack, building on AMD's confidential computing... Read More →

Dr. Chaouki Kasmi

Technology Innovation Institute, Chief Innovation Officer

Dr. Chaouki Kasmi is the Chief Innovation Officer at the Technology Innovation Institute (TII), is a cutting-edge UAE-based scientific research center. In his role, Dr. Kasmi spearheads the development and implementation of productization and industrialization strategies while overseeing... Read More →

Tuesday June 23, 2026 2:15pm - 2:45pm PDT
Courtyard

Breakout Sessions

3:00pm PDT

NVIDIA Confidential Computing Attestation for Next-Generation AI Hardware - Rob Nertney & Spencer Gilson, NVIDIA

Tuesday June 23, 2026 3:00pm - 3:25pm PDT

Courtyard

NVIDIA's attestation infrastructure was born from Confidential Computing - securing Hopper GPUs with hardware-rooted, in-band attestation. As AI hardware evolves to rack-scale systems like Vera Rubin NVL72, attestation must evolve with it: new devices, new modes, and new challenges.

This talk covers three dimensions of that evolution. First, we discuss how CC attestation scales to rack-level with Vera Rubin, including NVIDIA's multi-node solution for CC and the challenge of attesting dozens of GPUs, CPUs, and NVSwitches as a unified trusted system. Second, we show how attestation patterns proven in CC are extending to new modes and device types - including fleet intelligence and out-of-band attestation. Third, we share the standards and interoperability challenges we have encountered along the way: inconsistent implementations across the ecosystem, gaps in attestation policy standards, and binding discrete components into trusted subsystems to prevent relay and substitution attacks.

Attendees will leave understanding where NVIDIA attestation is heading and what we have learned about the open problems the ecosystem must solve together.

Speakers

Rob Nertney

Principal software architect, NVIDIA, NVIDIA

Rob Nertney is a principal software architect for confidential computing. He has spent nearly 15 years architecting the features and deployment of accelerator hardware into hyperscale environments for both internal and external use by developers. He has several patents in processor... Read More →

Spencer Gilson

Senior Systems Software Engineer, NVIDIA

Spencer is a senior system software engineer working on attestation at NVIDIA. He specializes in designing, developing, and maintaining critical services with an emphasis on security and reliability.

Tuesday June 23, 2026 3:00pm - 3:25pm PDT
Courtyard

Breakout Sessions

3:30pm PDT

GKE Hypercluster: Kubernetes TEEs for AI at Scale - Komei Nakamoto & Keith Moyer, Google

Tuesday June 23, 2026 3:30pm - 3:55pm PDT

Courtyard

GKE Hypercluster brings large-scale operation of Trusted Execution Environments to Kubernetes, and was co-designed with Anthropic to meet their security and scale. In this talk we explain the linked runner architecture that drastically reduces the Trusted Compute Base (TCB) by completely separating high-value workload execution from the standard container orchestration control plane. In this model, sensitive AI workloads are offloaded to a dedicated, “sealed” virtual machine. The Kubernetes scheduling and orchestration remains on a non-sealed "parent" node, preserving Kubernetes primitives (ie. Pods, Network Policy) and operational familiarity while achieving workload isolation. The execution environment is built on a hardened and attested OS, removing non-essential services and preventing administrative shell access. Integrity is guaranteed through attestation and container signature verification.

This design establishes a strict chain of trust, offers isolation from the Kubernetes operator and Cloud Service Provider, supports high-performance AI accelerators within the sealed boundary, and enhances scalability by managing isolated environments with a reduced system footprint.

Speakers

Keith Moyer

Technical Lead, Confidential Computing, Google

Keith Moyer is the Technical Lead for Confidential Computing at Google Cloud. He has spent the last 10 years dedicated to making verifiable trust accessible and useful, with over 20 years of experience spanning cloud security and embedded systems. He holds a BS in Computer Engineering... Read More →

Komei Nakamoto

GKE AI Security Tech Lead, Google

Komei is a software engineer at Google, and the Tech Lead for the GKE AI Security team focused on making GKE a secure platform for running AI workloads.

GKE Hypercluster Kubernetes TEEs for AI at Scale pptx

Tuesday June 23, 2026 3:30pm - 3:55pm PDT
Courtyard

Breakout Sessions

Slides Attached Yes

4:00pm PDT

Governing AI Agents at the Hardware Boundary - Imran Siddique, OPAQUE Systems

Tuesday June 23, 2026 4:00pm - 4:25pm PDT

Courtyard

AI agents are making real decisions: filing tickets, moving money, deploying code, operating infrastructure. The question is no longer what the agent should do. The question is: can you prove governance was actually enforced?

Right now, all agent governance is software. Policy engines, identity checks, audit logs, credentials: everything lives in the same trust boundary as the agent itself. If someone compromises the runtime, every control disappears. Policies get bypassed. Credentials get exfiltrated. Audit logs get forged.
Software governance makes promises. Hardware governance provides proofs.

I will walk through what my team has built (the Agent Governance Toolkit), where the software limits are, and how TEE-backed enforcement closes those gaps. Concrete architecture, real code, honest gap analysis.

Speakers

Imran Siddique

Chief Platform Officer, Opaque Systems

Imran Siddique is Chief Platform Officer at Opaque Systems and the creator of the Agent Governance Toolkit.Imran holds 20+ patents in AI systems, data platforms, and sustainability infrastructure, and has published research papers on agentic architecture and distributed systems... Read More →

Tuesday June 23, 2026 4:00pm - 4:25pm PDT
Courtyard

Breakout Sessions

4:30pm PDT

Wrap-Up Session Panel Discussion: Sovereign AI - Sripriya Srinivasan, IBM; Dr. Najwa Aaraj, TII

Tuesday June 23, 2026 4:30pm - 5:00pm PDT

Courtyard

Moderators

Aaron Fulkerson

OPAQUE, CEO

Speakers

Dr. Najwa Aaraj

CEO, Technology Innovation Institute (TII)

Sripriya Srinivasan

General Manager, IBM Software Products (Core & ALM), Software Support & SRE, IBM

Tuesday June 23, 2026 4:30pm - 5:00pm PDT
Courtyard

Keynote Sessions

5:00pm PDT

Wrap-Up Session Panel Discussion: Quick Takes - Anand Kashyap, Fortanix; Marvin Tong, Phala Network; and Erica Brescia, Redpoint

Tuesday June 23, 2026 5:00pm - 5:20pm PDT

Courtyard

Moderators

Aaron Fulkerson

OPAQUE, CEO

Speakers

Erica Brescia

Managing Director, Redpoint

Anand Kashyap

Co-Founder and CEO of Fortanix, Fortanix

Anand Kashyap is a co-founder and CEO of Fortanix, where he pioneered the application of confidential computing in data security and AI._x000D_ _x000D_ Before Fortanix, he worked at Arkin (acquired by VMware) and Symantec Research Labs, where he filed over 25 patents in networking... Read More →

Marvin Tong

Co-founder, Phala Network

Tuesday June 23, 2026 5:00pm - 5:20pm PDT
Courtyard

Keynote Sessions

5:20pm PDT

Wrap-Up Session: Closing Remarks

Tuesday June 23, 2026 5:20pm - 5:30pm PDT

Courtyard

Speakers

Aaron Fulkerson

OPAQUE, CEO

Tuesday June 23, 2026 5:20pm - 5:30pm PDT
Courtyard

Keynote Sessions

9:00am PDT

9:05am PDT

9:10am PDT

9:20am PDT

9:40am PDT

10:00am PDT

10:35am PDT

10:55am PDT

11:15am PDT

12:45pm PDT

1:15pm PDT

1:45pm PDT

2:15pm PDT

3:00pm PDT

3:30pm PDT

4:00pm PDT

4:30pm PDT

5:00pm PDT

5:20pm PDT

Get help with the event