Bindplane is a Bronze Sponsor at GrrCON 2026

GrrCON is back at DeVos Place in Grand Rapids on September 24 and 25, and Bindplane is sponsoring yet again this year. We'll be at booth 101 on the expo floor both days. If you send security telemetry to a SIEM, manage log ingestion for a security team, or just want to see what a telemetry pipeline does to your ingest bill, come find us.

What we're showing

Most security teams don't want to own the plumbing between their sources and their SIEM. They want to write detections. But the plumbing is where the money goes, and it's where the noise gets in.

Bindplane sits in front of your SIEM as an OpenTelemetry-native pipeline. At the booth we'll be running live demos of the security use case end to end:

• Automatic parsing and normalization. Point a raw firewall, endpoint, or Windows event feed at Bindplane and it builds the parsing pipeline for you. CEF, ELF, syslog, JSON, and the long tail of vendor formats that never quite match the docs.
• Route high-value data to your SIEM, the rest to cheap storage. Not every event needs to land in Splunk, Sentinel, Google SecOps, or Dynatrace at full retention pricing. Send the events your detections actually use to the SIEM and route the rest to object storage where it stays searchable and costs almost nothing.
• Redact sensitive data before it leaves the network. Hash or drop PII, credentials, and internal identifiers at the collector, so what reaches the SIEM is already compliant.

Teams doing this in production are cutting SIEM ingest costs by around 40% without losing detection coverage. Bring your own log volume numbers and we'll walk through what that looks like for your environment.

Swag

Shirts, stickers, bags, stress balls, notepads, and more. Stop by and grab some.

Sit down with us

The expo floor gets loud. If you'd rather go deeper than a five-minute demo, just ask. We'll grab a quiet corner, look at your sources and destinations, and sketch out the pipeline for your environment. No booking, no slides.

Last year at GrrCON

This isn't our first GrrCON. Last year we ran live demos showing real pipeline throughput to SIEMs like Google SecOps, Splunk, and Microsoft Sentinel, and walked people through routing, redaction, and cost reduction on the spot. Most of the two days went to conversations that started with "how much of this can I stop sending to my SIEM?" and ended with someone sketching their source list in a Bindplane notepad. Those conversations shaped a lot of what we shipped this year, including the automated parsing and the security-focused blueprints we'll be demoing. So if you talked to us in 2025, come back and see what came of it.

Why GrrCON

GrrCON has always been a practitioner conference. The talks are from people who do the work, the hallway track is real, and nobody is pitching a platform from the keynote stage. That's the audience we build for. Bindplane is a team of engineers, building for engineers. The people at the booth are the same people writing the code and the docs. Come tell us what's broken in your pipeline.

Join us

GrrCON 2026 runs Thursday, September 24 and Friday, September 25 at DeVos Place in Grand Rapids, Michigan. Tickets are still available at grrcon.com. Once you're in, head to booth 101 and find us there both days. Bring your log volume numbers, your SIEM bill, or just a question about a source that won't parse, and we'll work through it together.

See you in Grand Rapids.