About HackMiami
HackMiami is a South Florida-based information security community and organization that hosts training, conferences, and events focused on cybersecurity — including penetration testing, AI security, OSINT, and APT tactics. Originally established by working cybersecurity professionals, HackMiami serves as a networking hub for developing new techniques, conducting research, and pursuing contracting opportunities through regular meetings and international conference participation.
Featured on Rolling Stone: "The Geeks on the Frontlines."
Enterprise penetration testing, AI SecureOps, APT tactics, offensive OSINT, and physical security assessments — taught hands-on.
Hands-on training courses, speaking opportunities for original research, and capture-the-flag competitions for threat detection development.
Regular member meetings, a platform for sharing research and methodology, and networking for business development.
From an informal campus collective to a recognized name in offensive security — year by year.
2008–2012 · Formation years
HackMiami began as an informal group at Florida International University, initially focused on hardware and embedded work before pivoting to cybersecurity, web application security, and malware analysis. Pre-conference CTF wins established credibility before HackMiami became a conference at all.
2013 · First conference
HackMiami accepted Bitcoin at its first official conference, reinforcing its hacker-first image. The Web Application P0wn Off became a signature event format, and a Rolling Stone feature — "The Geeks on the Front Lines" — brought mainstream coverage. The Winter Hacker Festival and K&&K CTF were also featured.
2014 · First clean keynote year
May 9–11 in Miami Beach. Featured the K&&K CTF, the "Revenge of the Web Application" Pwn-Off, and the Internet Computer Party.
2015 · Implant demo year
One of the most cited early years — a live NFC implant demonstration, plus OSINT, YARA, hardware botnets, IoT telemetry, and cryptocurrency research on the program.
2016 · Prestige year
May 13–15. The ZenEdge WAF-Off — a public AI/ML WAF battle — showed HackMiami's early framing of AI vs. security competitions.
2017 · Operations-heavy content
Program covered accepted-risk abuse, command-and-control tradecraft, webshell detection with machine learning, and aviation security research.
2018 · Threat intelligence focus
One of the strongest later archive years, highlighted by machine learning security analytics on the program.
2019 · Peak pre-pandemic stability
Dave Marcus, Vinny Troia, and HackMiami leadership presented, supported by community programming on machine learning for identifying malicious actors, Maltego, Raspberry Pi, and OSINT.
2020 · Pandemic pivot
Program covered GLIBC heap exploitation and offensive recon, with villages and competitions spanning Bluetooth, lockpicking, Raspberry Pi, and packet capture.
2021 · Meetup continuity
Focus on hardware hacking, cloud pentesting, packet work, and telecom attack surface research. A HackMiami-associated researcher won the DEF CON Capture the Packet Black Badge.
2022 · RF, ICS, and OT expansion
RF tooling, controls frameworks, and hybrid security material proved HackMiami's comfort at the intersection of real systems and emerging risk.
2023 · Return year (HackMiami X)
A dual-track format debuted with "Nu World Order" and "Old World Order" tracks, covering detection engineering, Impacket, offensive tooling, and robotics/AI-adjacent demos.
2024 · Deepfake year (HackMiami XI)
Standout moment: Brandon Kovacs' "CyberMirage" deepfake talk. Program also covered cloud abuse, file-system redirection bugs, and NIST AI RMF policy frameworks.
2025 · Modern AI and appsec (HackMiami XII)
Program flavor: secure SDLC, offensive engineering, telecom and enterprise perspectives, GenAI bug bounty, and appsec.
2026 · AI and agentic pivot (HackMiami 1101)
Four days of training, one day of talks, dual-track format maintained. Keynote: Ryan Montgomery. Program includes AI-driven defensive security, AI/SOC workflows, red team tooling with MCP and agents, supply-chain risk in agentic automation, AI-powered social engineering, and OT/communications risk.
Trainings, talks, CFP, and tickets for the annual HackMiami conference live at hackmiami.com.