OSec turns Black Hat into a real-world evade-and-detect game

OSec is bringing a public cat-and-mouse challenge to Black Hat in Las Vegas on Aug. 4-5, 2026, inviting attendees to track Chief Evasion Officer Christian Kimball around Mandalay Bay. The stunt promotes OSec’s offensive security work and its continuous testing platform, Incenter, while offering prizes including a free pentest and IR tabletop exercise.

Why it matters: - OSec is using Black Hat to showcase how red-team and blue-team tactics play out in the real world. - The game turns conference traffic and crowd noise into a live security exercise for attendees. - The challenge also spotlights OSec’s AI-augmented continuous security testing platform, Incenter.

What happened: - OSec launched an “Evade and Detect” challenge for Black Hat attendees in Las Vegas. - The game, called “Where in the World is Christian Kimball?,” runs Aug. 4-5, 2026. - Attendees are asked to find, track and identify OSec Chief Evasion Officer Christian Kimball. - Kimball is expected to be in and around Mandalay Bay during Hacker Summer Camp. - Participants act as “detection agents” and submit photographic tips to earn points. - Clues, rules and prizes are posted on the game site. - Attendees can also follow OSec on LinkedIn for clues.

The details: - OSec describes the challenge as a game of cat and mouse that emulates how cyber red and blue teams act and react. - Winning participants can earn prizes, including a free pentest and an incident response tabletop exercise. - OSec CEO Mark Stamford said the company designed the game to blend red-team and blue-team work. - Stamford said Kimball has been involved in many situations that helped OSec break into client environments. - Stamford said the event is meant to give attendees a chance to detect OSec amid the noise in Las Vegas. - OSec says the firm was founded in 2010 and has 15 years of offensive security experience. - OSec says its senior security experts work across red, blue and purple teaming, penetration testing, vulnerability research, hardware and firmware testing, cloud and AI, OT/ICS, and application security. - OSec says Incenter extends that testing model to organizations that cannot staff an expert bench of their own. - OSec says it has continuously tested more than 480,000 endpoints, surfaced critical issues in 92% of engagements and maintained a 99% client retention rate. - More information is available on OSec's website.

Between the lines: - The stunt is both a marketing move and a live demonstration of offensive-security thinking. - By turning a senior executive into the target, OSec makes the exercise memorable and easy to follow for conference attendees. - The prize structure suggests OSec wants the game to drive hands-on engagement, not just brand awareness. - The event also reinforces a core message: modern security testing is about finding weaknesses before real attackers do.

What's next: - Detection agents can keep hunting Kimball through Aug. 5, 2026. - OSec is expected to use the game and its clues to maintain attention throughout Hacker Summer Camp. - The company may continue pointing attendees to Incenter and its offensive security services after the event.

The bottom line: - OSec is turning Black Hat into a live test of detection skills while marketing its offensive security platform to a concentrated audience of security professionals.