As I've done since Blackhat 2025, I walked the entire show floor at CYBR.SEC.CON. 2026. 173 exhibitors spent two days trying to educate, woo, dazzle, and build trust with the three thousand attendees in Houston's premier cyber security conference. What were they marketing?
There's a definite bifurcation in the conference landscape. On one hand, you have the major global conferences, like RSAC with 607 exhibitors and Blackhat with 450. You'll see a bit of everything at these conferences. Vendors who think they are targeting senior security decision makers (CISOs, Product Safety, et al) tend to focus their efforts at these conferences. Conference like CYBR.SEC.CON are still seen as outside that niche, so some vendors just ... don't show up. GRC vendors. Software safety vendors. They're mostly missing, and the few who show up have no competition for conversations.
On the other hand, regional conferences play to regional strengths. There were as many OT exhibitors at CYBR.SEC.CON. as at RSAC (and twice the number at Blackhat), while all-in-one vendors (consulting, MDRs, platforms, and VARs) were well-represented (CSC's 25 vs. BH's 21 and RSAC's 44).
Booths themselves were much smaller. A half-dozen 20'x20' booths greeted attendees, and a few 10'x20' booths graced the edges of the streets in the exhibit hall, but most exhibitors opted for 10'x10' booths (or a kiosk in the Innovation Station). There were no true design spectacles, no flashing lights, and, blessedly, no microphones. Just booth staff, their backdrops, and a conversation with attendees.
It certainly made writing my report much easier. Other than the 18 exhibitors who had forgotten to print their words on the backdrops high enough to be seen over their booth humans, most booths had easy-to-read (if not easy-to understand) messaging. Maybe we can have more of that at conferences.
Full report:
Andy Ellis
Full coverage of CYBR.SEC.CON. 2026:
Bill Brenner
