Exhibiting to Security Buyers Is a Different Sport.
RSA Conference and Black Hat put more vendors per square foot in front of a more skeptical audience than any other shows we build for. What works on a retail or HR floor gets ignored here. This is the playbook we’ve refined across dozens of security builds — from Moscone to Mandalay Bay. The booths that win these floors look calmer than everything around them.
Practitioners don’t want to be sold. CISOs don’t have time to be.
Security show floors are unusual in one way: the people walking the aisles are professionally suspicious. Analysts, engineers and architects who spend their day distrusting claims, alongside CISOs who have forty minutes on the floor between briefings. Both groups have been pitched “AI-powered zero-trust platform” six hundred times and have stopped hearing it.
That changes what the booth is for. It isn’t there to impress — the room is full of impressive booths. It’s there to be credible from the aisle: a specific claim, a real demo, and a person who can go deep in the first sentence. The exhibitors who generate pipeline at these shows are the ones whose booth says something an engineer can argue with.
On a security floor, specificity is the differentiator. Everyone else is saying “platform.”
Know the room you’re building for
The two flagship shows have different physics. Design for the one you’re in.
RSA Conference · Moscone, San Francisco
The densest security floor in the country, split across North and South halls with the Early Stage Expo separate. Aisles are packed, sightlines are short, and the audience is broad — CISOs, procurement, partners, press and practitioners in one hall. Attendees plan routes in advance and walk fast between sessions.
What that means for the boothHeight and corner visibility matter more than depth. A hanging sign readable across the hall does real work here. Expect union labor rules and tight move-in windows; ship early and pre-build. We had seven booths on this floor at RSA 2026 — the ones that stopped people led with a single readable claim, not a logo wall.
Black Hat USA · Mandalay Bay, Las Vegas
The Business Hall runs only two days inside a week-long technical event. The audience skews hands-on: researchers, red teams, engineers. Many actively resist badge scans and swag lines, and they’ll walk away from a pitch mid-sentence.
What that means for the boothDemo-first. A live, terminal-level demo with an engineer running it will outdraw any theater presentation. Give people something to do or watch within arm’s reach of the aisle, and make the conversation opt-in. Two days means the booth has to work from the first hour — there’s no day-three recovery.
Regional and vertical security events (ISC West for physical security, Gartner’s security summits, the regional BSides circuit) follow the Black Hat pattern more than the RSA one: smaller, more technical, more demo-driven.
Six things we build into security booths on purpose
- Name the threat, not the platform.
The headline that stops a security buyer is about their problem — “Your SOC is drowning in alerts that aren’t attacks” — not your category. Put it at eye height, readable from the aisle, and keep the product name secondary.
- Look like the calm one.
Security floors are dark, loud, and neon. A booth in warm light with real seating and open sightlines reads as confidence — and as a place a CISO can actually have a conversation. Restraint is a stopping element here.
- Put the demo at the edge.
Demo stations belong on the aisle line, angled outward, with the screen visible to someone who hasn’t committed to stopping. A demo behind a reception counter is a demo for your own staff.
- Build the private room.
CISO conversations don’t happen at a kiosk. A semi-enclosed meeting space — even a 10-foot-square room on a 20×20 — is where the real pipeline at RSA is created. Schedule it before the show; it will be full.
- Staff for depth, not coverage.
Three people who can answer an architect’s third question beat eight who can’t get past the first. Pair a sales lead with a solutions engineer at every station, and let the engineer talk.
- Make the scan optional.
Attendees who feel hunted leave. A booth that offers a real reason to share contact — the demo recording, the research report, the one-pager an engineer would actually want — collects better leads than one that scans everyone within reach.
The mistakes we see on every security floor
These aren’t design opinions. They’re the patterns that empty booths have in common at RSA and Black Hat, year after year.
Category soup on the back wall. “AI-driven, cloud-native, zero-trust XDR platform” is read by nobody and believed by fewer. The magician, the game show, the puppy pen. They draw a crowd of people who will never buy security software and block the people who might. Screens playing a loop. A product video on a monitor gets less attention than a blank monitor. The reception counter fortress. A counter across the aisle line with staff behind it is a wall; attendees read it as one. Same booth as the HR show. A design that worked at a general business conference will feel loud and unserious here. The audience is different; the booth should be too.
What size actually buys you at a security show
Space at RSA is expensive and waitlisted; Black Hat is smaller but the Business Hall is tight. Pick size by what the booth needs to do, not by what competitors bought.
A single edge-facing demo, a strong headline, two people. Works well at Black Hat and regional events; at RSA it needs a hanging sign or a corner to be found.
The workhorse security island: demo stations on two aisle-facing sides, a small enclosed meeting space, storage. This is where most of our RSA and Black Hat builds land.
Multiple demo tracks, a real meeting room or two, hospitality, and hanging signage. Justified when the show is your primary pipeline event of the year.
Whatever the size, the exhibit itself should be one fixed number in your budget. Security shows generate enough surprises on the show-services side — rigging, electrical, drayage at a union venue — without the booth adding change orders. Our custom rentals are quoted all-inclusive for exactly this reason: design, fabrication, graphics, AV, shipping, install and dismantle in one price, so the only variables left are the ones the venue controls.
What kind of booth works best at RSA Conference?
One that is visible from a distance (height, corner placement, a hanging sign), leads with a specific claim about the buyer’s problem rather than a product category, puts live demos on the aisle line, and includes a semi-private space for CISO-level conversations. Restraint reads as credibility on a loud floor.
How is exhibiting at Black Hat different from RSA?
Black Hat’s Business Hall runs two days inside a technical conference, and the audience is more hands-on and more resistant to sales tactics. Demo-first booths with engineers running them outperform presentations, badge scanning should be opt-in, and the booth has to work from the first hour.
Should we do a giveaway or activation at a security show?
Only if it filters for the right people. A research report, a demo recording or a technical one-pager draws practitioners; a puppy pen or a prize wheel draws a crowd that will never buy. Attractions that block the aisle hurt more than they help.
What booth size do most security vendors use at RSA?
The 20×20 island is the most common serious presence: two aisle-facing demo stations, a small enclosed meeting room and storage. Smaller vendors do well with a 10×20 plus a hanging sign; larger programs move to 20×30 or 30×30 when the show is their primary pipeline event.
Building for RSA, Black Hat, or a security summit this year?
We’ve delivered dozens of cybersecurity booths from Moscone to Mandalay Bay, all at one fixed, all-inclusive price. Tell us the show, the size and what your demo needs to do — we’ll design around the conversation you’re trying to have.
Start the Conversation →
