madweb.work

What It Is

MADWeb (Workshop on Measurements, Attacks, and Defenses for the Web) is an academic workshop focused on Web security and privacy. In 2026, it will be co-located with NDSS 2026. Its core goal is to provide a forum for researchers working at the intersection of browser evolution and Web security, with attention to rapidly changing browsers, Web technologies, attack surfaces, and defense mechanisms. It is important to note that madweb.work is not a commercial cybersecurity product website, nor does it offer purchasable software, SaaS, or managed protection services.

Core Evaluation Dimensions

In terms of protection categories, MADWeb covers a broad range of topics, including browser exploitation, secure browser architectures, Web authentication and authorization, Web protocol security, DNS security and privacy, anti-phishing, malicious website measurement, the use of machine learning and AI for a safer Web, and security and privacy issues around GenAI integration with the Web. These topics are valuable for security research and understanding threat trends, but they are not the same as directly deployable protection capabilities.

As for delivery format, the text clearly states that the 2026 event will be held in person, using the traditional conference format of research presentations and Q&A. Submissions are handled through the HotCRP system and require double-blind review. Product capabilities such as management and alerting, enterprise consoles, log ingestion, and SIEM/SOAR integration are not mentioned. Its integration mainly consists of being co-located with NDSS 2026, using the HotCRP submission platform, and publishing updates through social channels such as Bluesky, Mastodon, and X.

Pricing and Compliance

The page does not disclose registration fees, attendance costs, payment methods, or sponsorship packages, so pricing and payment information cannot be assessed. In terms of compliance certifications, there is also no mention of ISO, SOC, GDPR compliance commitments, or similar items commonly seen in commercial security services. However, the text does set out clear requirements around research ethics risks, responsible vulnerability disclosure, and disclosure of generative AI use. This reflects academic ethics governance rather than enterprise compliance certification.

Pros, Cons, and Best Fit

Its strengths are a focused theme, strong academic backing, and acceptance of work-in-progress, making it useful for early-career researchers to exchange preliminary ideas within the ecosystem of a top-tier security conference. The agenda covers cutting-edge areas such as AI phishing, browser-based social engineering defenses, DNS and QUIC, and JavaScript security, making it suitable for trend research. The drawbacks are also clear: it does not provide security capabilities that enterprises can purchase, and it has no deployment model, alerting, service support, or SLA. For users in China, attending in person may involve travel, visa, and time-zone costs.

China Access and Alternatives

Based solely on the text, it is not possible to determine whether madweb.work is accessible from mainland China. Payment methods are also not disclosed, so China access is rated as “unknown.” If the goal is academic exchange, consider conferences such as NDSS, USENIX Security, IEEE S&P, and ACM CCS. If the goal is enterprise Web security protection, you should instead look at products such as WAF, anti-phishing, browser isolation, DNS security, or EDR/XDR solutions.