The RSA Conference returns to San Francisco for four days in April, opening on the fifth and closing on the eighth. The year is 2027. The organiser has confirmed the city and the dates and directs attendees to negotiated hotel rates near the Moscone Center, with the rest of the programme detail due later in the cycle.
It remains the largest gathering in commercial cybersecurity, and its position in the calendar gives it an outsized role in how the sector presents itself. Product launches, funding announcements and research disclosures are routinely timed to the week, and the vendor floor has long been read as a census of which categories are attracting capital and which are quietly being absorbed into platforms.
Why it matters this cycle
Enterprise security spending has held up better than most technology budgets, but the shape of it has changed. Buyers who once assembled a stack from dozens of point products have spent several years consolidating onto fewer platforms, which has squeezed the middle of the market and pushed a long tail of specialist vendors toward acquisition or exit. The practical question for most chief information security officers is no longer what to buy but what to switch off.
Layered on that is the arrival of generative systems on both sides of the problem. Defenders are buying automation into detection and response because they cannot hire their way out of alert volume, while attackers have industrialised social engineering in ways that make traditional user training look thin. Boards have noticed, and security has moved from a technical line item to a standing governance item with regulatory reporting attached in several major markets.
That is what makes the week useful to an executive audience rather than only a technical one. The conference is where the sector's leadership talks publicly about risk appetite, insurance, disclosure obligations and the liability that now attaches to them, and the tone set there tends to carry into the year's board conversations.
Registration, the agenda and the exhibitor list are published by the organiser and are updated through the year ahead of the conference.
