The European edition of Nullcon, a platform that describes itself as research-led and community-powered and is also known for its Goa event in India. Berlin follows the same format of trainings first, then two conference days.
- Organiser
- Nullcon (Community)
- Price
- Not published
Good fit: You want a research-led event in Europe from a platform also active in India.
Look elsewhere if: You want Nullcon in India: the Goa edition follows in February 2027.
Dates read on the organiser’s page on 2 November 2026.
The US edition of OWASP's Global AppSec conference, from the non-profit OWASP Foundation. Training and the conference are sold separately, so a team can buy either on its own.
- Organiser
- OWASP Foundation (Non-profit)
- Topics
- Application security
- Price
- Not published
Good fit: You build or secure software and want an application-security focus rather than a general show.
Look elsewhere if: You want a general security show: the programme is about application security.
Dates read on the organiser’s page on 2 November 2026.
A week of cyber events on a university campus, held jointly by Tel Aviv University and Israeli government bodies. That academic and state partnership distinguishes it from Israel's Cybertech Global.
- Organiser
- Tel Aviv University (Blavatnik ICRC and Yuval Ne'eman Workshop), with the Israeli National Cyber Directorate and Ministry of Foreign Affairs (Academic)
- Size
- More than 11,000 attendees from over 100 countries; the organiser does not say which edition (organiser’s figure) source ↗
- Price
- Not published
Good fit: You work on cyber policy or research and want the academic and government side of Israel's security scene.
Look elsewhere if: You are buying products: this is a university-hosted programme rather than a trade expo.
Dates read on the organiser’s page on 2 November 2026.
The conference series of ACM's security special interest group, held in Taipei in 2025 and The Hague in 2026. It is one of the four academic events on this list.
- Organiser
- ACM SIGSAC (Professional body)
- Who attends
- Researchers, Academics
- Topics
- Computer security research
- Price
- Not published
Good fit: You follow academic security research.
Look elsewhere if: You want practical buyer or compliance content: this is a research conference.
Dates read on the organiser’s page on 2 November 2026.
A Tokyo security conference with a training block in Shinjuku leading into two conference days at a separate venue. It is the main Japan entry on this list.
- Organiser
- CODE BLUE Executive Committee, with operations by ZESUROKU Inc. (Other)
- Price
- Not published
Good fit: You want a technical conference in Japan or work with Japanese security teams.
Look elsewhere if: You need a large expo: this is a two-day conference, and no attendance figure is published on the page we read.
Dates read on the organiser’s page on 2 November 2026.
A specialist conference and training series dedicated to hardware security. The Amsterdam edition puts three days of training ahead of two conference days.
- Organiser
- Hardwear.io (Other)
- Topics
- Hardware security
- Price
- Not published
Good fit: You work on chips, embedded devices or product security and want hardware-specific depth.
Look elsewhere if: You do not work near hardware: the entire programme is about this one specialism.
Dates read on the organiser’s page on 2 November 2026.
A very large three-day show in Riyadh, reported by its organiser at 60,612 square metres in 2025. It shares the Black Hat name but is run by Riyadh-based Tahaluf, and its own figures describe an expo on a far larger footprint than a briefings-led conference.
- Organiser
- Tahaluf (Commercial events company)
- Size
- Over 40,000 attendees across three days in 2025, from more than 163 countries, with about 500 brands (organiser’s figure) source ↗
- Price
- Not published
Good fit: You sell into or work in Saudi Arabia and the wider Middle East and want the region's largest show floor.
Look elsewhere if: You want a smaller research-briefing format: Tahaluf's own figures describe a mass-scale expo.
Dates read on the organiser’s page on 2 November 2026.
The European edition of Black Hat, which sets Briefings and summits alongside trainings at Excel London. It gives Europe-based teams the Black Hat format without the Las Vegas trip.
- Organiser
- Black Hat (Commercial events company)
- Topics
- Briefings, Summits, Trainings
- Price
- Not published
Good fit: You are based in Europe and want Black Hat's mix of research briefings and trainings closer to home.
Look elsewhere if: You want the biggest Black Hat audience and summit programme: the USA edition is the flagship.
Dates read on the organiser’s page on 2 November 2026.
A three-day conference and expo in Tel Aviv that aims to bring government officials, industry leaders, academics and startups into the same rooms. It offers a direct route into the Israeli startup and government security scene.
- Organiser
- Cybertech (Commercial events company)
- Who attends
- Government officials, Industry leaders, Academics, Startups
- Price
- Not published
Good fit: You want access to Israel's security startups and officials, or you are scouting early-stage technology.
Look elsewhere if: You need firm attendance data to justify the trip: the organiser's site publishes none that we could read.
Dates read on the organiser’s page on 2 November 2026.
Black Hat's Asia-Pacific edition, back at Marina Bay Sands in 2027. In 2026 its four days ran trainings throughout, with Briefings and Arsenal tool demos on the final two. DEF CON Singapore follows straight after, so the two fit one trip.
- Organiser
- Black Hat (Commercial events company)
- Topics
- Briefings, Trainings, Arsenal tool demos
- Price
- Not published
Good fit: You work in Asia-Pacific and want Black Hat's research and training format in the region.
Look elsewhere if: You want the largest Black Hat audience: the USA edition is the flagship.
Dates read on the organiser’s page on 2 November 2026.
DEF CON's second Singapore edition, which promises the full DEF CON experience, including hands-on villages, at Marina Bay Sands. It runs directly after the Black Hat event in Singapore, so the two can be combined on one trip.
- Organiser
- DEF CON (Community)
- Topics
- Hands-on villages, Hacking research
- Price
- Not published
Good fit: You are in Asia-Pacific and want the DEF CON experience without travelling to the United States.
Look elsewhere if: You want the original event at full size: DEF CON 35 in August is the main gathering.
Dates read on the organiser’s page on 2 November 2026.
Spain's long-running security conference, now on its seventeenth Madrid edition. It has grown into a small family of events, with spin-offs in Valencia and other cities in Spain and beyond.
- Organiser
- RootedCON (Community)
- Price
- Not published
Good fit: You work in the Spanish-speaking security community and want its main annual gathering.
Look elsewhere if: You do not read or speak Spanish: check the language of the sessions you plan to attend, because we could not confirm it.
Dates read on the organiser’s page on 2 November 2026.
A large forum at Lille Grand Palais, formerly known as the FIC, that presents itself as Europe's reference event on digital trust, with offshoots in Canada, Japan and the United States. Its focus on trust sets it apart from the more technical events on this list.
- Organiser
- INCYBER Forum (Commercial events company)
- Topics
- Digital trust
- Size
- More than 20,000 participants and nearly 700 exhibitors at the 2026 edition, per Business France (third-party figure) source ↗
- Price
- Not published
Good fit: You want the French and wider European policy and digital-trust conversation.
Look elsewhere if: You want a hands-on technical programme: the forum positions itself around digital trust.
Dates read on the organiser’s page on 2 November 2026.
A research symposium on network and distributed system security, organised by the Internet Society. The 2027 move to Seoul brings one of the main academic venues to Asia-Pacific.
- Organiser
- Internet Society (Non-profit)
- Who attends
- Researchers, Academics
- Topics
- Network security research, Distributed systems security
- Price
- Not published
Good fit: You research network or systems security, or follow this work from Asia-Pacific.
Look elsewhere if: You want hands-on training or a vendor floor: this is an academic symposium.
Dates read on the organiser’s page on 2 November 2026.
One of the largest events on this list by reported attendance, and in 2026 it reached its 35th annual edition. It pairs keynotes and more than 500 sessions with an expo of about 600 exhibitors across the Moscone halls.
- Organiser
- RSAC (Commercial events company)
- Topics
- Cybersecurity, Risk management, Privacy, Emerging technologies
- Size
- 43,500+ attendees, 600+ exhibitors and 700+ speakers in 2026 (organiser’s figure) source ↗
- Price
- Not published
Good fit: You want the broadest single view of the security industry, with vendors, press and peers in one place.
Look elsewhere if: You want a small research-led event: with 43,500+ attendees and 600+ exhibitors, this one is built around scale and a trade floor.
Dates read on the organiser’s page on 2 November 2026.
A large cybersecurity exhibition and conference in Dubai, hosted by the UAE Cyber Security Council with the Dubai Electronic Security Center as government partner. That close government backing is its defining feature.
- Organiser
- inD (Commercial events company)
- Size
- 750 exhibiting brands, 350+ speakers and participants from 182 countries in 2026 (organiser’s figure) source ↗
- Price
- Not published
Good fit: You work with UAE government or regional enterprise buyers and want official bodies and vendors in one hall.
Look elsewhere if: You want a research-first event: this is an exhibition with about 750 brands.
Dates read on the organiser’s page on 2 November 2026.
The UK government's own cyber conference, run by the NCSC, the country's national cyber agency. It changes city (Glasgow in 2026, Liverpool in 2027) and carries a strong public-sector and policy voice.
- Organiser
- National Cyber Security Centre (NCSC) (Government)
- Who attends
- Government, Industry, Academia
- Size
- 3,263 in-person attendees and 182 sponsors or exhibitors in 2026, from 36 countries (organiser’s figure) source ↗
- Price
- Not published
Good fit: You work with UK government or critical national infrastructure and want to hear directly from the NCSC.
Look elsewhere if: You have no UK public-sector link: the programme is shaped around the UK's national cyber agency.
Dates read on the organiser’s page on 2 November 2026.
IEEE's research symposium on security and privacy, followed by a day of workshops. It is one of the four academic venues on this list and differs from the others in pairing privacy with security in its title and scope.
- Organiser
- IEEE (Professional body)
- Who attends
- Researchers, Academics
- Topics
- Security research, Privacy research
- Price
- Not published
Good fit: You work in research or an advanced security engineering team and read this field's papers.
Look elsewhere if: You want a practitioner or vendor event: this is an academic symposium.
Dates read on the organiser’s page on 2 November 2026.
The annual conference of AUSCERT, held at a Gold Coast resort in 2027. It runs for four days and is a smaller specialist alternative to Australia's national CyberCon.
- Organiser
- AUSCERT (Other)
- Price
- Not published
Good fit: You work in security operations in Australia or New Zealand and want an operations-minded conference.
Look elsewhere if: You are outside Australasia: registration is not yet open and the focus is regional.
Dates read on the organiser’s page on 2 November 2026.
South Africa's annual security summit, in its 22nd year and run by the technology publisher ITWeb. It takes place in two cities a week apart, with workshops and CISO sessions around the main conference days.
- Organiser
- ITWeb Limited (Media company)
- Size
- 1,500+ attendees, 80+ speakers and 70+ exhibitors; the organiser does not say which edition (organiser’s figure) source ↗
- Price
- Not published
Good fit: You work in South African security and want a two-city national event with a CISO strand.
Look elsewhere if: You are looking for a pan-African event: both cities are in South Africa.
Dates read on the organiser’s page on 2 November 2026.
A three-day trade show at Excel London with several theatres of talks. Attendance at individual sessions is scanned, so visitors can log ISC2 or ISACA credits as they go.
- Organiser
- RX (Reed Exhibitions Limited) (Commercial events company)
- Topics
- AI and cloud security, Resilience and cyber risk, Cyber strategy
- Size
- 13,000+ unique visitors over three days and over 300 vendors a year; the organiser does not state which edition (organiser’s figure) source ↗
- Price
- Not published
- CPE credits
- ISC2 and ISACA credits by session length: 1 credit for 50–60 minutes, ½ for 25–50 minutes, 2 for a two-hour session source ↗
Good fit: You want to compare vendors and collect CPE credits at a large UK trade show.
Look elsewhere if: You want original offensive research: this is an exhibition-led event with theatre sessions, so a technical conference such as TROOPERS fits better.
Dates read on the organiser’s page on 2 November 2026.
The annual conference of FIRST, the global forum of incident response and security teams, now in its 39th year. It moves between countries: Denver in 2026, Bangkok in 2027 with ThaiCERT and NCSA as hosts, and Prague already named for 2028.
- Organiser
- Forum of Incident Response and Security Teams (FIRST), hosted by ThaiCERT and NCSA (Professional body)
- Who attends
- Incident response teams
- Topics
- Incident response
- Price
- Not published
Good fit: You work on a CSIRT or SOC and want to build relationships with response teams in other countries.
Look elsewhere if: You are looking at vendors or compliance topics: the audience is the incident-response community.
Dates read on the organiser’s page on 2 November 2026.
An analyst-led summit built around Gartner's own experts, which makes it unlike the vendor and community events here. The organiser's page title still uses the older name, Security & Risk Management Summit.
- Organiser
- Gartner (Analyst firm)
- Size
- 62 Gartner experts and more than 110 research-driven sessions planned for 2026 (organiser’s figure) source ↗
- Price
- Not published
Good fit: You are a security leader who wants analyst guidance on strategy and purchasing decisions.
Look elsewhere if: You want hands-on technical content: the programme is built around Gartner analysts rather than independent researchers.
Dates read on the organiser’s page on 2 November 2026.
A reverse engineering conference held in Montreal every year since 2005. It is narrowly focused on that one craft, with four days of training before three conference days.
- Organiser
- REcon (recon.cx) (Other)
- First held
- 2005
- Topics
- Reverse engineering
- Price
- Not published
Good fit: You reverse engineer software or malware and want depth in that one craft.
Look elsewhere if: You want a general security overview: the subject is reverse engineering only.
Dates read on the organiser’s page on 2 November 2026.
A technical security conference with trainings, held in Heidelberg and run by ERNW. The format is a five-day week of trainings followed by talks rather than a large expo.
- Organiser
- ERNW Enno Rey Netzwerke GmbH (Vendor)
- Price
- Not published
Good fit: You are a technical practitioner in Europe who wants a focused week of trainings and talks.
Look elsewhere if: You want a vendor floor or a management programme: look at it-sa or Infosecurity Europe.
Dates read on the organiser’s page on 2 November 2026.
The flagship of the Black Hat series, returning to Mandalay Bay in 2027. The 2026 edition ran for six days, with four days of trainings, a summit day and a two-day main conference of Briefings and open-source tool demos.
- Organiser
- Black Hat (Commercial events company)
- Topics
- AI security, Healthcare security, Financial threats
- Size
- More than 23,000 verified attendees in 2026, over 15% up on 2025 (organiser’s figure) source ↗
- Price
- Not published
Good fit: You want a research-driven programme at large scale, plus specialist summits for sectors such as healthcare and finance.
Look elsewhere if: You want a community-run event: BSides Las Vegas and DEF CON are the ones to compare it with.
Dates read on the organiser’s page on 2 November 2026.
A hacker convention built around hands-on villages and contests, running since 1993. DEF CON's FAQ says it is generally held in Las Vegas, though the 2027 venue is not on its homepage yet. A second Singapore edition in March 2027 is listed separately here.
- Organiser
- DEF CON (Community)
- First held
- 1993
- Topics
- Hands-on villages, Hacking research, Contests
- Price
- Not published
Good fit: You are a practitioner who wants to try things hands-on and meet the hacker community.
Look elsewhere if: You want a managed executive programme or vendor meetings: RSAC or Black Hat suit that better.
Dates read on the organiser’s page on 2 November 2026.
A long-running research symposium from the USENIX Association, now in its 36th edition. Its value is the published research, so it sits at the academic end of this list alongside IEEE S&P, ACM CCS and NDSS.
- Organiser
- USENIX Association (Professional body)
- Who attends
- Researchers, Academics
- Topics
- Security research
- Price
- Not published
Good fit: You are a researcher or engineer who wants security work ahead of it reaching products.
Look elsewhere if: You want business or compliance content: this is a research symposium.
Dates read on the organiser’s page on 2 November 2026.
A German trade fair with a congress attached, run by the Nuremberg exhibition centre and offered onsite and online. It has grown quickly, with an extra hall planned for 2027 after a reported rise of about 20% in visitors in 2026.
- Organiser
- NürnbergMesse GmbH (Commercial events company)
- Size
- About 33,000 trade visitors from over 70 countries and 1,005 exhibitors in 2026, per organiser statements reported by Netzwoche (organiser’s figure) source ↗
- Price
- Not published
Good fit: You buy from or sell to the German-speaking market and want one large trade fair to do it at.
Look elsewhere if: You do not work in the DACH market: exhibitors and visitors lean towards it, and Infosecurity Europe may be the wider European choice.
Dates read on the organiser’s page on 2 November 2026.
The annual congress of the professional body ISC2. The 2026 edition ran in person at Gaylord Rockies with a virtual option; the 2027 dates are out, but not the location.
- Organiser
- ISC2 (Professional body)
- Price
- Not published
Good fit: You are connected to ISC2 and want a professional-body event, and 2026's virtual option may suit you if it returns.
Look elsewhere if: You need a confirmed location today: the page gives only the 2027 dates.
Dates read on the organiser’s page on 2 November 2026.
A community-run conference from a US 501(c)(3) non-profit, held at The Tuscany in Las Vegas in 2026 during the same week as Black Hat USA. It is the community alternative in that week rather than a commercial show.
- Organiser
- Security BSides Las Vegas, Inc. (Non-profit)
- Price
- Not published
Good fit: You are already in Las Vegas in August and want a community-run programme alongside the larger events.
Look elsewhere if: You need a confirmed date for planning: no 2027 dates are on the organiser's site yet.
Last edition read on the organiser’s page on 2 November 2026.
Billed by its presenter AISA as Australia's largest annual gathering of cyber security professionals. It is the main national event for the Australian market, where AUSCERT is the smaller specialist alternative.
- Organiser
- AISA (Professional body)
- Price
- Not published
Good fit: You work in the Australian security market and want its largest national gathering.
Look elsewhere if: You need firm dates: the site says only that CyberCon 2027 will happen.
Last edition read on the organiser’s page on 2 November 2026.
A conference and exhibition held as part of Singapore International Cyber Week, at Sands Expo and Convention Centre in 2026. The Cyber Security Agency of Singapore supports it, which gives it a clear public-sector link.
- Organiser
- GovWare, supported by the Cyber Security Agency of Singapore (Other)
- Size
- 15,000+ attendees from 100+ countries and 300+ exhibitors and partners, on the organiser's 2026 site (organiser’s figure) source ↗
- Price
- Not published
Good fit: You work with Southeast Asian governments or critical infrastructure and want to be in Singapore during its cyber week.
Look elsewhere if: You need to plan now: the site still shows the 2026 edition and no 2027 date has been published.
Last edition read on the organiser’s page on 2 November 2026.
A two-day offensive security conference in Berlin, held at the Hilton Berlin according to its venue page. It has also added a Tokyo edition, which suggests an audience beyond Germany.
- Organiser
- Binary Gecko (Vendor)
- Topics
- Offensive security
- Price
- Not published
Good fit: You do vulnerability research or red-team work and want an offensive-only programme.
Look elsewhere if: You are on the defensive or governance side: the event's name and focus are offensive security.
Last edition read on the organiser’s page on 2 November 2026.
Canada's largest cybersecurity conference by its own description, running since 2007 and now promoted within Black Hat's event portfolio. Black Hat lists a 2027 edition at the Metro Toronto Convention Centre, with dates still to be announced.
- Organiser
- Black Hat (Commercial events company)
- First held
- 2007
- Price
- Not published
Good fit: You are based in Canada and want a major national conference without crossing the border.
Look elsewhere if: You need next year's dates now: Black Hat lists 2027 as to be announced.
Last edition read on the organiser’s page on 2 November 2026.