No Cap Workshop is driven by a small team of FedRAMP professionals who understand just how hard it is to make any of this work. We’re all working to meet FedRAMP’s Consolidated Rules for 2026 (CR26) to implement the Vulnerability Detection and Response (VDR) rules and keep ourselves and our customers in good standing and positioned to defend against the high-velocity threats that we now all face.
The premise
As an industry we compete on features, but we collaborate on security. The systems we run hold government data, and a weakness in one provider’s practice is a weakness in everyone’s. So we are creating a space for practitioners to gather, collaborate and share what works. That information strengthens our common defense and builds trust between teams.
What it is
- Three days, January 26–28, 2027: data collection, vulnerability evaluation, and remediation and reporting.
- Free, online, and open to anyone. No registration and no identification.
- Funded by sponsors, run by practitioners, and recorded so the work outlives the week.
What it is not
This is not a sales event and it is not a certification program (although feel free to put in for continuing education credits). Vendors are highly encouraged to attend and present on what their products do to meet these requirements. Nothing here is advice from FedRAMP or any agency. Read the official notice for the CR26 rules themselves.
Get involved
Join the announcement list on the home page, speak, or sponsor. Questions go to the address in the footer.