Nuremberg it-sa Expo&Congress 2027

5–7 October 2027
NürnbergMesse, Messezentrum 1, 90471 Nürnberg, Germany

Nuremberg it-sa Expo&Congress is an annual trade exhibition and congress for cybersecurity and IT security. Since 2009, it has been held as an independent exhibition at the Nuremberg Exhibition Centre. The organiser presents it as a professional meeting place for IT security providers, technical experts and decision-makers. The 2027 edition is scheduled for three days; the event information page lists the dates and venue, while detailed Congress@it-sa information is still to follow.

Why Nuremberg it-sa Expo&Congress matters

Compare security approaches

The event covers products and services across cybersecurity, including hardware, software, training, consulting and Security as a Service. Its stated subject areas include cloud and mobile security, data and network security, industrial security and the protection of critical infrastructure. That breadth can help a visitor compare different parts of a security stack in one professional setting.

Connect technical and organisational priorities

The organiser describes the audience as including IT security professionals and decision-makers from industry, services and public administration. Current event themes also include AI security, OT security, digital sovereignty, resilience, NIS2 and DORA. This makes the event relevant to both the people evaluating controls and the leaders who must consider security as an organisational responsibility.

Understand the event’s scale

For 2026, the organiser reported 1,005 exhibitors and more than 33,000 trade visitors from over 70 countries. These figures describe the 2026 edition, not a guarantee of the 2027 scale. They show the breadth of the professional marketplace that attendees can use to research providers and compare areas of expertise.

Who should visit Nuremberg it-sa Expo&Congress?

The event is designed for trade visitors from the cybersecurity sector. The following groups have distinct reasons to attend.

CISOs and IT security managers

Useful if you are reviewing security priorities, suppliers or operating practices. Focus on cloud and network security, endpoint protection, identity and access management, incident response, OT security and the requirements relevant to your organisation. Bring a short list of current risks and the technical, service and governance questions you need providers to answer.

IT, network and infrastructure professionals

Useful if you assess or operate technical controls. Compare products and services against your existing environment, integration needs, deployment model, support arrangements and performance requirements. Technical product discussions are more productive when you can describe the systems, constraints and use cases involved.

Senior executives and organisational decision-makers

Useful if you set investment priorities or oversee risk, resilience and digital transformation. The organiser positions the event as a place for exchange between technical experts and business leadership. Use that perspective to understand how security choices relate to operational continuity, accountability and the organisation’s wider risk priorities.

Public-sector, critical-infrastructure and industrial professionals

Useful if your work involves public services, essential infrastructure, manufacturing or industrial control environments. Prioritise discussions about resilience, data and network protection, industrial and OT security, and the practical fit of solutions to your operating context. Verify any regulatory interpretation for your own organisation separately.

What can you find at Nuremberg it-sa Expo&Congress?

Security software and cloud platforms

Explore software and platform approaches for cloud environments, data protection, endpoint security, identity and access management, and related cybersecurity needs. Compare the intended use, integration demands, administration model and evidence a supplier can provide.

Network, infrastructure and hardware security

The official event description includes data and network security, hardware and protection for critical infrastructure. Visitors can use the exhibition to assess how devices and infrastructure products may fit with their networks and operational requirements.

Industrial, mobile and emerging technology security

Industrial security and the protection of critical infrastructure are part of the event’s stated scope. Current event topics also include OT security, IoT and production security, AI risks and opportunities, and post-quantum security. Treat these as subject areas to investigate; confirm which product demonstrations and sessions are included in the 2027 programme when it is published.

Services, training and consulting

Cybersecurity services, Security as a Service, training and consulting are among the product and service categories described by the organiser. These can be relevant where an organisation needs specialist expertise or service capacity as well as technology. Compare scope, service levels, responsibilities and technical fit directly with each provider.

What makes Nuremberg it-sa Expo&Congress different?

It combines a focused IT-security exhibition with professional knowledge exchange.

The event’s identity spans an exhibition floor, the it-sa insights series and Congress@it-sa. The organiser also operates it-sa 365 as a year-round digital extension with company and product information and online knowledge formats. The 2027 Congress@it-sa is scheduled alongside the exhibition, but detailed programme information is still to follow. Previous or current programme formats should not be assumed to appear unchanged in 2027.

What should you try to achieve during your visit?

If you are evaluating suppliers

Leave with a shortlist of providers whose products match a defined security requirement. Record the use case, deployment model, integration dependencies, evidence requested and next step for each relevant conversation.

If you are responsible for technical implementation

Identify the technical questions that determine whether a solution is viable. Ask about compatibility, architecture, data handling, operational impact, support and the proof needed for a technical assessment.

If you make or oversee business decisions

Clarify which security decisions need further review inside your organisation. Separate operational needs, investment considerations and governance questions, and note who must be involved in any follow-up.

How to prepare before Nuremberg it-sa Expo&Congress

1. Define your security priorities

Choose a small number of questions tied to current work: for example, cloud controls, identity management, network resilience, incident response or protection of production systems. A clear scope makes comparisons more useful than a general search for “the latest cybersecurity”.

2. Build a target list

The organiser provides exhibitor and product-discovery functions through its event platform. Check the current directory and product information as the 2027 edition approaches; listings and programme details can change. Mark essential, useful and optional companies or topics so that your time has a purpose.

3. Prepare a provider question set

• Which specific threat or operational problem is the product designed to address?
• Which environments, systems and deployment models does it support?
• How does it integrate with the tools and controls we already operate?
• What data is collected, processed or stored, and where?
• What evidence can the provider share about testing, performance and security assurance?
• What implementation, training and support responsibilities remain with our team?
• How are updates, incidents and product vulnerabilities handled?
• Which regulatory or sector requirements does the provider address, and what is the scope of that claim?

4. Arrange conversations and organise your day

Where a provider offers meeting requests, arrange priority discussions before arriving and leave space for unplanned comparisons. Check the current floor plan and programme when the organiser publishes the 2027 materials.

How to make the most of the exhibition

Use the exhibition to gather comparable information rather than collecting brochures without a decision in mind. For each conversation, note:

• Provider and product: who you spoke with and what was discussed.
• Requirement: the use case or security need it may address.
• Fit and dependencies: integration, deployment, staffing and operational constraints.
• Evidence to request: technical documentation, assurance material, references or a demonstration relevant to your environment.
• Next action: the person responsible and the follow-up needed.

Use the organiser’s exhibitor, product and professional-matching tools if they are available for the 2027 edition, and confirm their current coverage before relying on them to plan meetings.

Plan your time realistically

The organiser reported more than 1,000 exhibitors for 2026, so a focused plan is more useful than trying to visit every stand. On the first morning, orient yourself with the published floor plan and prioritise essential providers. Use the middle of the day for scheduled comparisons and sessions that match your objectives. Reserve time later in the day to revisit promising discussions, record open questions and decide what needs follow-up. The 2027 hall plan and exhibitor list should be checked when published.

Beyond the exhibition floor

The it-sa insights series and Congress@it-sa form part of the event’s knowledge and discussion offer. For 2027, the organiser lists the congress dates as 5–7 October and says further information will follow. Check the current programme before travelling rather than assuming that a particular speaker, forum or session will be repeated. The event’s listed areas of discussion include strategy and governance, threat defence, network and infrastructure security, industrial security and emerging technologies.

Networking at Nuremberg it-sa Expo&Congress

Prepare a concise description of your role, the environment you work in and the security question you are trying to solve. When speaking with a supplier, distinguish immediate requirements from longer-term research. Ask for a relevant technical contact and agree a specific follow-up, such as documentation or a product-fit discussion. For peer conversations, note which ideas need internal validation before they become policy or procurement decisions.

Travelling to Nuremberg it-sa Expo&Congress

The venue is NürnbergMesse at Messezentrum 1, 90471 Nürnberg. The organiser’s access information says the exhibition centre can be reached from Nuremberg main station by underground line U1, with an approximately eight-minute journey. From Nuremberg Airport, the stated public-transport route is U2 to the central station and then U1 to the “Messe” stop; the organiser gives an approximate total journey of 25 minutes. Check travel and local transport arrangements again for the 2027 dates.

Where should you stay?

Choose accommodation around the purpose of your trip. If the exhibition is your main activity, compare journey time to the venue with your planned start and finish. If you have meetings elsewhere in the region, consider those locations as well. The organiser’s visitor information describes a hotel-booking service, but availability and terms for the 2027 edition should be checked directly when planning.

One day or several days?

One day may suit visitors with a narrow shortlist and a small number of priority discussions. Plan the route and confirm the relevant programme items in advance.

Two days can provide more room to compare providers, attend selected knowledge sessions and follow up with contacts without compressing every activity into one schedule.

All three days may be useful for visitors with broader technical, organisational or sourcing objectives. Decide based on the published 2027 exhibitor list and programme rather than assuming every day is necessary.

Nuremberg it-sa Expo&Congress is particularly valuable if you have a project

Bring a concise project brief rather than confidential system details. It can include the problem to solve, environment and architecture at a high level, deployment constraints, required integrations, operational responsibilities and evaluation criteria. For industrial or critical-infrastructure work, identify safety, continuity and access requirements before discussing a potential solution. Do not share sensitive information at a public stand unless your organisation’s policies permit it.

After Nuremberg it-sa Expo&Congress: where the value starts

Sort conversations into immediate, potential and market-research follow-up. For each priority provider, send the specific request agreed during the discussion—such as technical material, assurance evidence, integration detail or a product-fit meeting. Compare suppliers against the same requirements and involve the technical, risk and procurement colleagues who will assess the decision. Treat a trade-fair conversation as an input to evaluation, not as a substitute for due diligence.

Who should consider exhibiting?

The event’s stated exhibitor scope covers companies offering cybersecurity hardware, software, training, consulting and Security as a Service, as well as providers working across cloud, mobile, data, network, industrial and critical-infrastructure security. A prospective exhibitor should define which buyer problem its offer addresses, what evidence visitors can assess at the stand, and what follow-up the team can support. The organiser’s exhibitor information should be consulted for current participation terms and 2027 requirements.

Nuremberg it-sa Expo&Congress visitor checklist

Before

• ☐ Confirm the 2027 ticket, entry and programme information with the organiser.
• ☐ Select priority products, providers and relevant sessions from current event listings.
• ☐ Prepare a short requirements brief and technical questions.
• ☐ Arrange priority meetings and check the venue route.

During

• ☐ Compare providers against the same criteria.
• ☐ Record product fit, evidence requested and agreed next steps.
• ☐ Balance supplier discussions with relevant forums or congress sessions.
• ☐ Keep confidential system information protected.

After

• ☐ Send the follow-up requests you agreed.
• ☐ Compare solutions with technical, risk and procurement stakeholders.
• ☐ Verify regulatory claims and product assurance independently.

Is Nuremberg it-sa Expo&Congress worth visiting?

The event is most relevant to professionals who need to evaluate cybersecurity products and services, understand industry topics or discuss security decisions with providers and peers. Its reported 2026 scale and broad product scope can support discovery and comparison, while the usefulness of a visit depends on matching the programme and exhibitor list to a defined objective. Visitors with a focused shortlist and specific questions are better placed to turn conversations into informed next steps.

Nuremberg it-sa Expo&Congress 2027 at a glance

Dates, venue and daily opening hours are listed by the organiser; check the 2027 programme and visitor arrangements as they are updated.

A focused visit, a stronger security decision

Choose the questions that matter to your organisation, compare providers against consistent requirements and follow up with evidence. Discover. Compare. Discuss. Evaluate.

Cybersecurity opportunities in Germany

Market size and demand

Bitkom reported that spending on IT security in Germany reached €10.1 billion in 2024, based on PAC data. In October 2025, Bitkom forecast that spending would rise 10.1% to €11.1 billion in 2025; this was a forecast, not a later confirmed result. Its 2025 survey also found that 59% of companies felt cyberattacks threatened their existence and estimated annual damage to the German economy from cyberattacks at €202.4 billion. These figures show the reported scale of security investment and concern, but do not measure demand for a specific product or supplier.

Market drivers and commercial opportunities

In the same 2025 forecast, security software and related cloud platforms were projected to reach €4.8 billion, while IT-security services were projected at €5.6 billion. Bitkom’s 2025 estimates put growth at 12.1% for software and cloud platforms and 9.7% for services; hardware spending was projected at €800 million, up 1.4%. These segment estimates can help exhibitors and visitors decide which questions to investigate, but they are not actual 2025 results or proof of an individual company’s prospects.

• Software and cloud security: suppliers and buyers may use the reported spending forecast to frame discussions about cloud, endpoint, data and identity-security applications. Product fit, assurance and integration still need to be tested against each organisation’s requirements.
• Security services: service providers and organisations may explore consulting, managed security and specialist support needs. Scope, capability, service levels and responsibilities should be compared directly; the market total does not establish a shortage or guarantee contracts.
• Hardware and network protection: visitors may compare security devices and infrastructure products against defined technical environments. The forecast growth rate for hardware was lower than for software/cloud and services, so segment-specific demand should not be assumed.

Regulations and market-entry conditions

The organiser lists NIS2 and DORA among event subject areas, but that does not establish which requirements apply to a particular organisation or product. Verify current legal scope, implementation obligations, certification and procurement conditions with competent sources before making a market-entry or compliance decision.

What this means for exhibitors

Exhibitors may use the German market figures as dated context when qualifying potential applications, then validate current demand, buyer requirements and commercial terms independently. Providers should be ready to explain product fit, evidence, implementation needs and the limits of any compliance claims.

What this means for visitors

Visitors may use the event to compare software, services and hardware against their own security priorities and to identify which technical or assurance evidence is needed for evaluation. The national spending figures provide context only; they do not indicate that a specific solution is suitable for a particular organisation.

See the ilikevents services for this event