Europe’s security calendar runs on two tracks. One is the big trade show circuit, where CISOs, buyers and vendors meet across huge expo floors in London, Nuremberg and Brussels. The other is the research scene, where smaller, technical events in Berlin, Heidelberg and Paris draw exploit developers, red teamers and reverse engineers.
This guide covers both. We checked each organizer’s official site for 2027 dates and venues. Where an organizer has not yet published 2027 dates, we list the most recent verified edition so you can plan around the usual timing.
Budgets and travel days are limited, so the right mix depends on your role. A security leader shopping for platforms will get more from a trade show, while a researcher or pentester will get more from a single-track technical conference.
| Event | City | 2027 Dates | Best For |
|---|---|---|---|
| Infosecurity Europe | London, UK | 8 to 10 June 2027 | CISOs, buyers and vendor evaluation |
| it-sa Expo&Congress | Nuremberg, Germany | 5 to 7 October 2027 | DACH market security buyers |
| Cybersec Europe | Brussels, Belgium | 26 to 27 May 2027 | Benelux security teams |
| INCYBER Forum Europe | Lille, France | 9 to 11 March 2027 | Policy, public sector and digital trust |
| TROOPERS | Heidelberg, Germany | 21 to 25 June 2027 | Hands-on defenders and attackers |
| Black Hat Europe | London, UK | Dates TBA (2026 edition: December, London) | Research briefings and trainings |
| Hexacon | Paris, France | Dates TBA (2026 edition: October, Paris) | Vulnerability research and exploitation |
| OffensiveCon | Berlin, Germany | Dates TBA (2026 edition: May, Berlin) | Exploit developers and reverse engineers |
| Les Assises de la Cybersécurité | Monaco | Dates TBA (2026 edition: October, Monaco) | CISO and vendor one-to-one meetings |
| Gartner Security & Risk Management Summit | London, UK | Dates TBA (2026 edition: September, London) | Security strategy and risk leaders |
| BSides London | London, UK | Dates TBA (2026 edition: December, London) | Community, career starters and networking |
| Chaos Communication Congress | Hamburg, Germany | Dates TBA (2026 edition: December, Hamburg) | Hacker culture, privacy and research |
Infosecurity Europe is the UK’s flagship information security exhibition and conference, held each June at ExCeL London. It pairs a large vendor floor with keynote and strategy talks, which makes it the most efficient place in Europe to compare products across identity, cloud security, SecOps and data protection in a few days.
It suits CISOs, security architects, procurement teams and vendors planning their European pipeline. Book meetings ahead, because the floor is busy and exhibitor teams fill their calendars early. The 2027 edition runs 8 to 10 June 2027 at ExCeL London.
it-sa is the organizer’s self-described largest IT security trade fair in Europe, held at the NürnbergMesse exhibition center. The event has a strong German-speaking audience, with many sessions and stand conversations in German, and it attracts both established vendors and regional specialists.
Go if you sell into, or buy for, organizations in Germany, Austria and Switzerland. It is a good fit for IT security managers in the Mittelstand, public sector buyers and channel partners. it-sa 2027 runs 5 to 7 October 2027 in Nuremberg.
Cybersec Europe brings together exhibitors, keynotes and practical sessions for security professionals in Belgium, the Netherlands and the wider region. The organizer reports that a recent edition drew more than 7,300 cybersecurity professionals from 97 countries.
It suits security managers and IT leaders in the Benelux market who want a compact, two-day event within easy travel distance. Its Brussels location also makes it convenient for teams working with EU institutions. Cybersec Europe 2027 runs 26 to 27 May 2027 at Brussels Expo.
The INCYBER Forum, long known as FIC, is a European gathering on cybersecurity and digital trust that mixes an exhibition with policy-focused conferences. It draws government agencies, defense organizations, regulators and large enterprises alongside vendors.
Go if your work touches regulation, sovereignty, public sector security or national resilience. It is one of the few European events where policy makers and practitioners share the same stages. The 2027 edition runs 9 to 11 March 2027 at Lille Grand Palais, with registration opening in December 2026.
TROOPERS is a long-running technical conference that combines two days of trainings with three days of talks on attack, defense and management topics. It is known for a community feel and deep technical content rather than a vendor expo.
It suits penetration testers, blue teamers, security engineers and technical managers who want practical takeaways. The format lets you pair a training with the main conference in one trip. TROOPERS27 runs 21 to 25 June 2027 in Heidelberg, with trainings on 21 to 22 June and the conference on 23 to 25 June.
Black Hat Europe is the European edition of the Black Hat series, combining multi-day technical trainings with research briefings, Arsenal tool demos and a business hall. Talks lean toward new vulnerability research, threat intelligence and offensive techniques.
Go if you want current research in a professional setting, or if you want to train your team on a specialized course in Europe instead of flying to Las Vegas. Dates TBA (2026 edition: December, London). Watch the official site for the 2027 announcement.
Hexacon is an offensive security conference focused on vulnerability research, exploitation and reverse engineering. Talks are highly technical, and the event attracts researchers from labs, vendors and independent teams across Europe.
It suits vulnerability researchers, exploit developers and security teams that want to understand what attackers can achieve on modern platforms. Recruiters for advanced research roles also find it useful. Dates TBA (2026 edition: October, Paris).
OffensiveCon is a single-track conference dedicated to offensive security research, preceded by technical trainings. Its program centers on exploitation, browser and kernel security, and reverse engineering, and its venue is the Hilton Berlin near Gendarmenmarkt.
Go if you work in low-level security research and want a focused, technical crowd. The trainings are a strong option for researchers building specialist skills. Dates TBA (2026 edition: May, Berlin).
Les Assises is a French-speaking event built around prearranged one-to-one meetings between CISOs and solution providers, alongside workshops and keynotes. Its format is closer to a business meeting program than an open trade show.
It suits French and francophone security leaders, and vendors targeting large French enterprises. If your pipeline depends on CISO meetings in France, this is the event to plan around. Dates TBA (2026 edition: October, Monaco).
Gartner’s EMEA security summit focuses on strategy, risk, governance and program planning, with sessions led by Gartner analysts and practitioners. Attendees can typically book analyst one-on-ones, which is a major draw for leaders shaping budgets and roadmaps.
Go if you are a CISO, risk leader or security program owner who needs vendor-neutral frameworks and peer benchmarks. It is less technical than research conferences and more focused on decisions. Dates TBA (2026 edition: September, London).
BSides London is a community-organized security conference with talks, workshops and villages, run by volunteers in the spirit of the global BSides movement. It offers an approachable, low-cost way to hear new speakers and meet the UK security community.
It suits students, career changers, junior analysts and experienced practitioners who value networking over sales pitches. Recruiters and hiring managers also use it to meet emerging talent. Dates TBA (2026 edition: December, London).
The Chaos Communication Congress is the Chaos Computer Club’s annual end-of-year gathering, covering security, privacy, technology and society. It blends technical talks with workshops, assemblies and a strong volunteer culture, and it has moved into the Hamburg exhibition halls.
Go if you want a broad, independent view of security research, surveillance and digital rights, and you are comfortable with a community event rather than a corporate one. Dates TBA (2026 edition: December, Hamburg).
Trade shows such as Infosecurity Europe, it-sa and Cybersec Europe are built for product discovery and vendor meetings. Research events such as OffensiveCon, Hexacon and TROOPERS are built for technical learning. Decide which outcome matters most before you book, because one event rarely does both well.
Regional focus matters in Europe. it-sa is strongest for the DACH market, Les Assises for France, Cybersec Europe for the Benelux and Infosecurity Europe for the UK. Check the language of the program as well, since some events run many sessions in German or French.
Black Hat Europe, TROOPERS and OffensiveCon all pair trainings with their main programs. If your team needs structured skill development, combining a course with the conference can justify the travel and keep everything to one trip.
Set a goal before you go, such as a target number of qualified meetings, a short list of vendors to evaluate or specific research areas to cover. Book meetings ahead of trade shows, and for community events plan which talks and villages you will prioritize.
Europe offers a security event for almost every role in 2027. Infosecurity Europe, it-sa and Cybersec Europe lead for buyers and vendors, INCYBER and Gartner serve leaders focused on policy and strategy, and TROOPERS, Hexacon and OffensiveCon reward technical practitioners. Community events such as BSides London and the Chaos Communication Congress round out the calendar.
Several organizers have not yet announced 2027 dates, so confirm details on each official site before booking travel. Pick two or three events that match your goals and market, and plan your meetings early.