Cyber Show Paris 2027

Attendees, exhibitors & solutions

Who this event is for

Industry trends

Key trends shaping this market and its wider industry.

Arrival airports

Choose from the following airports, with convenient access to the event and venue.

Hotel tiers

A range of accommodation options near the venue and across key areas.

Local transport

Get around the city with these convenient transport options.

Frequently asked

Glossary

1

SOC (Security Operations Centre)

The team and tooling that monitors an organisation's networks, endpoints and cloud tenants around the clock, triages alerts and drives incident response. SOC tooling and staffing models are a recurring theme on the CyberShow Paris floor among MSSPs and enterprise security teams.

2

SIEM

Security Information and Event Management - the platform that aggregates logs from firewalls, endpoints, identity systems and cloud services, correlates them against detection rules and raises alerts for analysts. Vendors at a Paris cybersecurity show typically position SIEM alongside data-lake and detection-engineering services.

3

EDR / XDR

Endpoint Detection and Response covers agent-based monitoring and containment on laptops and servers; Extended Detection and Response widens the same correlation across endpoint, network, email, identity and cloud telemetry. Buyers use the show to compare detection coverage and console workload, not just feature lists.

4

Zero Trust

An architecture principle in which no user, device or workload is implicitly trusted: every request is authenticated, authorised and continuously evaluated. In French enterprise programmes it usually appears alongside identity governance and micro-segmentation projects.

5

IAM and MFA

Identity and Access Management governs who can reach which systems and under what conditions; Multi-Factor Authentication adds a second verification step. Identity compromise is a standard entry point for ransomware, so IAM is a staple category at security trade events in France.

6

SOAR

Security Orchestration, Automation and Response - playbook tooling that automates repetitive SOC steps such as enrichment, ticket creation and containment. It is usually discussed at the show in the context of analyst shortage and alert volume.

7

Threat intelligence

Curated, contextual information about adversaries, infrastructure and tactics - from commercial feeds, CERT bulletins or sector sharing groups - used to prioritise detection and patching. French operators often source it through ANSSI guidance and sector ISACs.

8

Penetration testing

Authorised, scoped attack simulation against applications, networks or cloud environments, delivered as a report with reproducible findings and remediation priority. Buyers comparing pentest providers at the show usually ask about methodology, scope and retest policy.

9

Ransomware

Malware that encrypts or exfiltrates data and demands payment for release or non-disclosure. It drives demand for backup isolation, immutable storage, endpoint containment and tested incident-response retainers - all categories present at a cybersecurity exhibition.

10

NIS2

The EU directive that raises cybersecurity and reporting obligations for essential and important entities across many sectors, transposed into French law. It is the main compliance driver for midsize French organisations shopping for security services at events such as CyberShow Paris.

11

DORA

The EU Digital Operational Resilience Act, applying to financial entities and their ICT providers, with requirements on incident reporting, resilience testing and third-party risk. Financial-sector visitors typically use the show to shortlist tested suppliers and audit evidence.

12

MSSP

Managed Security Service Provider - an outsourced partner running monitoring, detection or response on a subscription basis. A large share of French midmarket buyers evaluate MSSPs at the show rather than building an in-house 24/7 SOC.

13

CISO

Chief Information Security Officer, the executive accountable for an organisation's security strategy, risk appetite and regulatory posture. CISO-level conference tracks and closed-door briefings are standard at enterprise security fairs.

14

Vulnerability management

The continuous cycle of inventorying assets, scanning for weaknesses, scoring exposure and driving patching or mitigation. Conversations at the show usually turn on prioritisation quality and remediation SLAs rather than raw scan volume.