Brain Station 23 Joins MoodleMoot Nordic 2026 & Offers Attendees a Complimentary LMS Security Audit

Software company Brain Station 23 will join MoodleMoot Nordic 2026, the two day Moodle conference in Copenhagen, Denmark. The event runs on 30 September and 1 October at the IDA Conference centre on Kalvebod Brygge.

The firm has a session on Track 2 on the first afternoon. It starts at 15:30 in Room 207. Along with the session, the company is offering attendees a complimentary LMS security audit. Delegates book a thirty minute slot and get a report.

It is the company’s second European MoodleMoot. It attended MoodleMoot Estonia before this one.

So what is actually in the audit?

The Brain Station 23 audit at MoodleMoot Nordic 2026 checks three things.

Patch debt. It lists the Moodle security advisories that apply to the version you are running. Each one is ranked by how serious it is. So you leave with an order of work, not a vague warning.

Access and data. It looks at old admin accounts that are still switched on. It also checks what your installed plugins are allowed to read. Plenty of plugins ask for far more than they need.

Exam integrity. This one is a simple question. If a student challenges a grade, can you show a record that backs up your decision?

The report says what was found, what to fix first, and what the fix would take. That is it.

Five problems that show up almost everywhere

Your gradebook times out during enrolment week. Your Moodle install is a few versions behind. An exam result gets disputed and you have nothing solid to point to. Attendance is still living in a spreadsheet. One trainer has thirty seats to fill and no way to keep up.

None of it is unusual. It is simply what happens when a platform works well enough that nobody fights for the budget to fix it.

Patch debt is the one to watch. Moodle ships security fixes on a schedule. The gap between a fix going public and you applying it is the risky window. Sit four versions behind and you are carrying several of those windows at the same time.

Old admin accounts are the other usual suspect. People leave, but their logins quietly stay alive. And plugin permissions almost never get reviewed after setup, because the plugin keeps doing its job. Nothing breaks, so nobody looks.

Exam integrity is newer, and it is climbing the list. More assessments run online now. When a grade is challenged, you need a record of what happened. Log files on their own usually will not cut it.

Is this worth a slot for you?

If you run a Moodle site day to day, probably yes. LMS admins, IT staff and eLearning managers will get the most out of it.

It also helps if you are the one signing off on an upgrade. A ranked list of named advisories lands much better in a budget meeting than “we think we might be exposed.”

And it is not only for universities. Moodle runs a lot of staff onboarding and compliance training, so corporate training teams are just as welcome.

Who you will be sitting with

Mizanur Rahman runs the sessions. He has been chief technology officer and director at the company since 2013, and he leads more than 900 engineers across 36 countries.

He is an AWS APN Ambassador, has spoken at AWS re:Invent, and co-founded the AWS User Group in Bangladesh. He also went through the Stanford Seed Transformation Program.

So you meet the CTO rather than a sales rep. That matters more than it sounds. A sales rep takes notes and promises to follow up. Someone who has run infrastructure at that scale can tell you on the spot whether your gradebook problem is a query issue or a hosting one.

What else is happening at the conference

MoodleMoot Nordic 2026 is organised by five Nordic Moodle partners: Efaktor, Netsapiensis, Sparkfore, Vextur and Moxis. This year’s theme is “Connect. Learn. Innovate.”

There are three tracks, built for teachers, course designers, LMS admins, IT staff and decision makers across education and corporate training.

Marie Achour, chief product officer at Moodle HQ, talks about where Moodle goes next. Emilio Lozana covers Moodle Workplace. Nils Viken from H5P Group has a keynote called “Transform Learning with Moodle, H5P and AI.” Anna Kamula, Linda Bendiks Hasselström, Martin Hans Jensen and Jani Lemmetyinen are speaking too, on everything from AI troubleshooting to workplace learning.

Tickets are €650 and include dinner on 30 September. The venue sits on the harbour side of the city, a short walk from the central station.

A bit about the company

Brain Station 23 started in 2006 and is based in Dhaka, Bangladesh. It runs six offices, employs more than 900 engineers and works with clients in 36 countries.

The work spans fintech, ERP, cybersecurity and eLearning. The eLearning team handles Moodle setup, migration, upgrades and support for universities, schools and corporate training teams.

How to grab a slot

Book through the MoodleMoot Nordic 2026 audit page. Slots run across both days.

Come with a few things ready and you will get much more out of it. Your Moodle version number. The date of your last upgrade. A list of your installed plugins. And if exam integrity is your worry, bring the last dispute you had to handle.

Thirty minutes is a first pass, not a full penetration test. What you should walk out with is a short, ranked list of what actually matters.

One last thought. If your Moodle site has been quietly fine for three years, that is not proof it is safe. It might just mean nobody has looked yet.