SpyCloud · Black Hat USA 2026
A hall of black glass and neon. SpyCloud pitched a log cabin in the middle of it.
Black Hat USA is the most crowded room in cybersecurity: 20,000 attendees, a Business Hall lit like a server rack, and every booth in the same three colours. SpyCloud — the company that turns recaptured darknet data into identity-threat protection — asked Pure Exhibits for something the floor had not seen. We built Camp SpyCloud: a 20 × 30 island with cedar cladding, a hanging timber sign, a trail signpost, three threat-protection cabins and a demo stage shaped like an A-frame.
Stand out at Black Hat without shouting
Black Hat’s Business Hall is a wall of dark booths, LED strips and product names in sans-serif. The people walking it are practitioners and CISOs who have been pitched by every vendor in the building by mid-afternoon on the first day. Bigger screens do not help; the booth either side has them too. SpyCloud needed to be recognisable from fifty feet, memorable after five minutes, and warm enough that a sceptical security engineer would sit down.
The company had also set itself a high bar. Its Black Hat 2025 island staged cybercrime disruption as deep space; its RSA 2026 booth made invisible darknet data visible from the aisle. A third year needed a third idea, not a variation. The answer came from SpyCloud’s own marketing team: a summer camp, where every product is a place on the trail and every threat is a hazard on the map. Pure Exhibits’ job was to build it convincingly enough that the metaphor carried — real timber, real signposts, real Adirondack chairs — while keeping the demos, the meeting space and the giveaways working underneath.
“The front door was locked. The attacker came in through the inbox.”A-frame demo stage, Camp SpyCloud
Every product a place on the trail, every threat a hazard on the map
The Trail Signpost
A timber post at the entrance carries the whole story in nine arrows: The Dark Trailhead, AiTM Pass, Stealer Peak, Phishing Hole, Session Swamp, Breach Basin, Ransomware Ravine, Credential Creek — and, in orange, SpyCloud Base Camp. A security practitioner reads it in ten seconds and knows exactly what the company does. It is the best product diagram on the floor, and it has no screen.
The Cabin
The anchor is a full-height cedar-clad cabin with lit Camp SpyCloud lettering and a pine-silhouette end wall. Its outer face is the “Welcome Campers” wall — life vest, paddles, a life ring, an archery target and a pennant reading Roasting Cybercriminals since 2016 — with two Adirondack chairs on a timber deck in front. It photographs like a lodge and reads like one from the far side of the hall.
Three Threat-Protection Cabins
Workforce Threat Protection, Supply Chain Threat Protection, Cybercrime Investigations: each product line got its own walnut demo station with a screen, a shelf and a stool, named as a cabin and signed in rustic lettering. The metaphor did the segmentation — visitors walked to the cabin that matched their problem instead of being triaged by a rep at the aisle.
The A-Frame Demo Stage
The centre of the island is a backlit A-frame — a tent shape in yellow-edged timber — that doubles as the presentation stage. Its panel rotated between the campaign lines (“The front door was locked. The attacker came in through the inbox.”) and the integrations board: Microsoft Sentinel, Okta, Splunk, CrowdStrike, Elastic, Tines and the rest under the heading “The data you need. The gear you already packed.” A branded counter in front, pennant bunting overhead.
The Hat Bar
At the front corner, a glass display case of cream-and-green Camp SpyCloud trucker hats and a heat press on the counter. Visitors did not take a hat; they had one made, with their name pressed on while they talked to the team. The queue that formed was the booth’s best lead-capture mechanism, and it never looked like one.
The Room Behind the Camp Door
Inside the cabin, behind a door marked CAMP, is a frosted-glass meeting room with a slatted timber ceiling and downlights. Black Hat conversations with a CISO do not happen at a demo counter. The cabin gave SpyCloud a private room in 600 square feet without anything on the outside looking like an office.
The camp in detail
Experience the camp
A walkthrough of Camp SpyCloud at Black Hat USA 2026 — from the trail signpost, past the cabins and the A-frame stage, to the room behind the Camp door.
The build at a glance
A metaphor is only as good as its carpentry
Camp SpyCloud works because none of it looks like a trade show booth pretending to be a camp. The cladding is printed cedar with real depth, the signpost is walnut, the hanging sign is a full timber frame, the pennants are cloth, the chairs are real Adirondacks, the carpet is green. Underneath, the ordinary requirements of a Black Hat island were all met: three demo stations with screens, a presentation stage, a private meeting room, a giveaway counter, storage behind the cabin and rigging for the sign.
Three years, three ideas for the same client: deep space at Black Hat 2025, visibility at RSA 2026, and now the camp — each designed, fabricated and installed by Pure Exhibits on one fixed all-inclusive price.
Explore our cybersecurity portfolio
Your brand has a story. Build the booth that tells it.
Themed islands fail when the theme is a graphic and the booth underneath is generic. Pure Exhibits designs, fabricates and installs custom islands for cybersecurity brands at Black Hat, RSA, ISC West and shows nationwide — demo stations, meeting rooms, hanging signs and giveaways included, on one fixed, transparent price.