Community Hacker / BSides Events
What it does
Local and regional community-driven security conferences. Built "for and by" practitioners. Lower stakes, higher intimacy, real conversations, hands-on technical content, grassroots credibility.
What it means to the buyer
Not really a buyer event. Practitioners who attend may eventually become buyers, but the immediate value is community trust, technical feedback, and credibility with the people who will quietly veto or champion vendors inside their organizations.
Best motion
Local practitioner trust, community goodwill, technical point-of-view development, recruiting, dark-funnel influence. Sponsor modestly. Send engineers and researchers. Submit a real talk. Support CTFs, villages, and workshops. Capture learnings, not leads.
Weak motion
Aggressive lead capture, badge-scan goals, sales-heavy talks, executive abstraction, glossy brand theater. BSides is not cheap RSAC — it is a different species and the audience will reject vendors who don't understand the difference.
Right metric
Talk acceptance and attendance · practitioner relationships built · technical product feedback gathered · recruiting connections · post-event community goodwill
Anti-metric
MQL volume or badge scans
Example events
- BSides local chapters (200+ globally)
- BSides Las Vegas (during Black Hat week)
- Regional security meetups
- Local DEF CON groups
Personas
- Detection Engineer
- Security Engineer
- SOC Analyst
- Independent Researcher
- Student / Early Career
Categories
- Detection Engineering tools
- Open-source security tools
- Practitioner-facing products
- Recruiting-adjacent categories
Maturity stages
- Any (community trust is maturity-agnostic)
Common mistake
Measuring BSides by badge scans. If a vendor sets a lead-capture goal, they have already misunderstood the event. The right output is community presence, technical credibility, and the long-tail influence that comes from being a known good actor in practitioner circles.
BSides events are explicitly community-driven, built by and for security practitioners. The format is intentional — short talks, working sessions, intimate enough that the speaker and the audience are in the same conversation. Vendors who arrive with enterprise sales motion are seen as outsiders gate-crashing a craft community; vendors who arrive with engineers, useful talks, and respect for the format become part of the community over time.
The recruiting value matters here too. Security engineers attend BSides; many of the best hires are made not through formal recruiting but through conference relationships. A vendor that supports the community well builds a talent pipeline that compounds over years.
The pattern: support the event, contribute substance, send the right people, leave the sales motion at the door. Everything else follows.