About this event

IT-SA Expo&Congress — Europe’s Leading Trade Fair for IT Security

Event name: IT-SA Expo&Congress
Dates: 27–29 October 2026
Venue/City/Country: Nuremberg, Germany
Formats: Onsite & Online

Overview

IT-SA Expo&Congress is presented as Europe’s leading trade fair for IT security and one of the most important dialogue platforms in the IT security industry. The event covers the full spectrum of products and services for cybersecurity, including hardware, software, training, consulting, and Security as a Service. The fair brings together decision-makers, experts, and IT security officers from across multiple sectors, with exhibitors offering customized solutions tailored to specific organizational needs.

Since 2009, IT-SA Expo&Congress in Nuremberg has been positioned as a meeting point for IT security professionals from both industry, service sector, and public administration. On the exhibitor side, the event addresses the entire IT security market—including physical IT security—and showcases the IT security industry from Germany and abroad. The event also highlights innovation through the ATHENE Startup Award (UP@it-sa), recognizing outstanding innovations by young companies in cyber security.

What the Event Covers (Key Security Domains)

IT-SA Expo&Congress is structured around a wide set of practical and high-priority IT security topics. Key themes include:

• Cloud & Cyber Security
• Data & Network Security
• Protection of Critical Infrastructures (KRITIS)
• Industrial Security
• Security for mobile environments

1️⃣ Who Attends (Buyers / Attendees)

IT-SA Expo&Congress is designed as a B2B professional event for IT security stakeholders. The event’s visitor base is characterized by the presence of decision-makers, experts, and IT security officers from multiple sectors. The exhibitor and program approach indicates a strong emphasis on attendees who influence security strategy, procurement decisions, vendor selection, compliance planning, and security program operations.

Best-fit attendee / buyer categories

• IT security decision-makers (leaders responsible for security strategy and investment)
• IT security officers (practitioners and operational owners of security programs)
• Experts and specialists evaluating security solutions across domains
• Public administration security stakeholders (where applicable, depending on sector participation)
• Industry representatives from organizations seeking tailored security solutions
• Innovation-focused stakeholders interested in startups and new approaches (including ATHENE Startup Award recognition)

2️⃣ Where the Show Is Happening + Attendee Geographic Origin

The event takes place in Nuremberg, Germany. On the official event description, IT-SA Expo&Congress is described as a European trade fair that attracts visitors and professionals from Germany and abroad.

Geographic origin of attendees (reliable, sourced framing)

The official content supports the following reliable characterization:

• Primary anchoring: Germany (as the host country)
• International element: Professionals and vendors from abroad participate
• Regional framing: Positioned as Europe’s leading IT security trade fair, implying broad European reach

Note: The official page text provided does not list specific attendee origin breakdowns (e.g., by country percentages). We recommend validating this with official “visitor information” / “facts & figures” pages or exhibitor/visitor reports if available.

3️⃣ Audience Reach (Local / National / Global)

Based on the official positioning and description, IT-SA Expo&Congress is best categorized as:

• National (Germany): Strong local depth due to Nuremberg being the host location and the event’s longstanding German presence since 2009.
• European (regional/global within Europe): The fair is explicitly described as Europe’s leading IT security trade fair and as having a showcase from Germany and abroad.
• International reach: While the exact global distribution is not quantified in the provided text, the “Germany and abroad” phrasing indicates attendees and exhibitors beyond the host nation.

4️⃣ Sample Buyer Company Names (BUYERS ONLY) + Websites

The official event text provided does not include a list of participating companies or specific buyer organizations. Since we should not invent company names, we are not able to provide verified buyer samples from the source text alone.

How we handle this for accurate buyer targeting: We typically compile buyer-focused company targets using event-aligned intent signals (industry alignment, security leadership roles, and security solution adoption patterns) and then validate them against the client’s exact product fit and positioning. If we receive your client website, we can identify the best-fit buyer segments and propose a buyer shortlist for IT security decision-makers relevant to your offering.

Client fit check required: Please share the client’s website so we can recommend the best buyer targets and the corresponding job titles to prioritize.

5️⃣ Job Profiles, Industries & Event Type

Event type

IT-SA Expo&Congress is an IT security trade fair paired with a congress program and lecture/dialogue formats designed to support evaluation, learning, and solution discovery.

Role patterns to prioritize (based on official “decision-makers, experts and IT security officers” framing)

• IT Security Officer / Chief Information Security Officer (CISO) level stakeholders
• Security program owners responsible for policies, governance, and security operations
• Security experts specializing in cloud, data/network security, or critical infrastructure protection
• Information security leadership responsible for vendor evaluation and solution selection

Industries that fit the official “all sectors of the economy” positioning

The official event text indicates that attendees and decision-makers come from all sectors of the economy, including:

• Industry
• Service sector
• Public administration

Security domains that map directly to buyers

• Cloud Security
• Cyber Security
• Data Center Security & Identity Access Management (noted as a topic in the official page navigation)
• Data & Network Security
• Critical infrastructures (KRITIS)
• Industrial Security
• AI in security contexts (listed as a topic on the official page)
• Cyber attack / hacking & defense (listed as a topic on the official page)
• IT regulation (listed as a topic on the official page)

6️⃣ Estimated Attendance (Expected Total Footfall)

The provided official website text does not include a numerical attendance estimate (total footfall / visitor counts / exhibitor counts). For accuracy, we should leave this field unfilled unless we can access the event’s “facts & figures” or visitor statistics pages.

Estimated attendance: (Not provided in the supplied official text)

7️⃣ Key Focus Areas & Buyer Engagement

Key focus areas

From the official content, IT-SA Expo&Congress focuses on helping visitors discover, evaluate, and discuss solutions across the cybersecurity lifecycle and across multiple environments. The main emphasis areas are:

• Cloud & mobile security
• Data & network security
• Protection of critical infrastructures
• Industrial security
• Security as a Service offerings
• Physical IT security (explicitly included)
• Innovation spotlight for startups via the ATHENE Startup Award UP@it-sa

Buyer engagement formats

Buyer engagement is supported by multiple channels described on the official page:

• Freely accessible lecture programme and product-neutral contributions
• Product-neutral discussion panels from the “it-sa insights” series
• Congress@it-sa programme, organized in cooperation with renowned associations and organizations
• IT Security Talks and searchable “Sessions & Events” content (as referenced in the navigation)
• Forums it-sa Expo and additional congress-related dialogue formats (as referenced in the navigation)

These formats strongly indicate that buyers come not only to browse products, but also to validate strategies, understand trends, compare approaches, and connect with solution providers aligned to their security priorities.

8️⃣ Client Product Review (Website Needed) — Best Buyer Identification Process

We always align the buyer shortlist to your client’s product and the exact problem the client solves. The official IT-SA theme mix is broad (cloud, cyber, data/network security, critical infrastructure protection, industrial security, IAM/data center security, and more), so the “best buyers” depend heavily on your client’s specific offering.

Please share the client website so we can review it and answer:

• Which attendee/buyer segments are the best fit for the client product
• Which IT security job titles to prioritize based on buying influence and evaluation ownership
• Which industries and security domains are most likely to convert for your solution
• A “best buyer” targeting approach that reflects your offering’s value proposition

Important: The official event text provided here does not state which buyer companies purchase attendee lists from us or provide any purchasing-buyer references. We therefore cannot reliably name any “buyer of attendee lists” without your client website and our internal targeting criteria.

9️⃣ Industry Targeting Suggestions (Using an Apollo-Style Industry Taxonomy)

Since IT-SA Expo&Congress sits in cybersecurity and IT security, the strongest industry targeting should align with IT security, enterprise IT, compliance/governance, and security services. Based on the official event topics (cloud security, cyber security, data & network security, critical infrastructure protection, industrial security, IT regulation, and IAM), the most relevant industry filters often include:

• Computer & Network Security
• Computer Software
• Information Technology & Services
• Internet
• Telecommunications
• Industrial Automation
• Mechanical or Industrial Engineering
• Electrical/Electronic Manufacturing
• Logistics & Supply Chain (for infrastructure/operational security relevance)
• Government Administration (for KRITIS/regulated public-sector relevance)
• Renewables & Environment (when critical infrastructure and industrial security are involved)
• Security & Investigations (for physical and cyber security overlap)
• Professional Training & Coaching (when training is a core component of solutions)
• Market Research and Research (if the client product is analytics/insight-driven for security programs)

Best practice: We select industries based on the client’s exact category first (software, services, training, managed security, identity/IAM, SOC tooling, etc.), then narrow down to the job titles that influence evaluation and adoption.

15–20 Buyer Sample Table (To Be Populated After Client Website Review)

The official text provided does not list buyer organizations or exhibitor companies, and we are not allowed to guess company names. To deliver accurate, buyer-only samples with websites, we need:

• Your client website
• A brief description of what the client sells (1–2 sentences)
• Preferred geographies (if any), such as Germany-only vs. Europe-wide
• Whether we should prioritize cloud security, data/network security, IAM, critical infrastructure, or industrial security

Sample buyer table structure (placeholder):

Priority	Company	Website	Best Title to Target	Why This is a Good Buyer Fit
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

What We Need From You to Finalize the Best Buyer List

To produce the 15–20 buyer-only rows (Company + Website + Best Title to Target + Fit rationale) and to ensure targeting aligns with your product requirements, we need your client website for review.

Please share: the client website URL.