Reflections, insights, and daily recaps from RSA Conference 2026.
Got a fun first pass at the conference floor. Hit the Netherlands Pavilion happy hour, walked a bunch of booths, and built an orchestration agent pipeline for this blog (yes, during the conference — the irony of vibe coding at a security conference is not lost on me).
What worked: The expo floor energy is real. Country pavilions are fascinating — the Netherlands' government coordination model is genuinely interesting, and there's a lot to dig into across Korea, Singapore, Saudi Arabia, and Spain.
What didn't: Spent too much time on fluff. Got pulled into a long conversation about child safety initiatives at the Netherlands happy hour — the kind of topic that reads well in press releases but isn't why you come to RSA. PR-friendly surface talk when I should have been hunting down technical infosec people, product folks, or business development contacts with actual substance.
Best encounter: Met some up-and-coming AI architects from the Philippines working for IBM AI. Unexpected and genuinely interesting — the kind of conversation you can't plan for.
Day 2 plan: Avoid the PR layer. Seek out substance — highly technical infosec people, product managers, business development folks who can talk about what's actually new and what's just marketing. Get past the happy hour crowd and into the real conversations. Also: networking events in the evening.
while this conference is fun, the marketing is stepping up! well done flks
Three talks today all pointed at the same thing from different angles: the security industry is quietly pivoting from perimeter thinking to identity thinking...