TL;DR
- Expel is at booth #N-5261 in the North Hall with real SOC analysts on-site—bring your hardest questions
- We have three off-floor events worth your time: a Kevin Mandia luncheon, a no-BS threat intel AMA, and executive meetings for teams who want a real conversation
- When you see us this year at RSAC, we won’t look or sound the same—that’s on purpose, and stay tuned for more on this coming soon
RSAC is one of those events where the hype-to-substance ratio gets tested in real time. You walk the floor, and within 20 minutes you’ve been handed three stress balls, told that six different vendors have “revolutionized” something, and heard the word “autonomous” more times than you can count. We’ve been guilty of some of that noise ourselves.
This year, we’re doing something different. We’re going back to our roots—and those roots are firmly planted in the practitioner side of the house. That’s what “security you can see” means to us. It’s not a tagline; it’s a description of how we operate. And you’ll see it show up throughout what we’re bringing to Moscone.
What we’re bringing to Moscone
Booth #N-5261, North Hall
We’re bringing analysts straight from the SOC to the event floor. Real people who handle incidents at 3am, not polished booth staff running slides (though they do polish up nicely, if we say so ourselves). Bring your hardest questions. Tell us what’s keeping you up at night. We’ll talk through it together.
We’ll also have demos of our Expel Workbench™ operations platform, sharing our latest AI innovations that help analysts accelerate the triage-to-response pipeline across identity, cloud, endpoint, and network. You’ll see real workflows, not theater. We might even have a couple of surprises up our sleeve…
Oh, and there are games (no badge scan required) and swag actually worth taking home. We figured the least we could do was be honest about that, too.
Off the floor: Three things worth your time
If you want to go deeper, we have three events you can register for:
Rethinking SecOps in the age of AI with Kevin Mandia: An exclusive lunch where Kevin shares a clear-eyed perspective on why AI-powered attacks are no longer theoretical, and why traditional defense models are increasingly inadequate. If you’re responsible for a security program, this is the conversation you should be having. Request to attend here.
No-bullsh*t ask-me-anything with Expel Intel: Our Director of Threat Operations, James Shank, and Principal Threat Researcher, Marcus Hutchins, are going to challenge the assumption that threat intel is automatically “worth it” in this honest, interactive session. “Is your threat intel actually driving impact?” is a question more teams should be asking. Register here.
Executive meetings: If you want a real conversation about detection gaps, AI-driven workflows, and what security outcomes actually look like for organizations like yours, book time with us. We’ll talk about what Expel can do for you. We won’t waste your time.
One session worth adding to your schedule
Expel CEO Dave Merkel is presenting “Operational Defense-in-Depth: The Human-AI SOC Framework” on Monday, March 23, at 1:10pm PT. It’s a practical framework for how to layer AI, automation, and human judgment across the detection and response pipeline so your team can stop threats and focus on the work that actually requires their expertise. Registration is required.
Why this year feels different
We opened this blog by admitting we’ve contributed to noise. That’s intentional—because the alternative is showing up to RSA and telling you we’ve “revolutionized” something, and you’ve already heard that six times before lunch.
“Security you can see” isn’t a conference concept. It’s the whole operating model. Every investigation, every response, every detection we fire is visible to customers in Workbench. Nothing happens in a black box. We think that’s how security partnerships should work. Not vendor-customer relationships, but teams working alongside teams, with full visibility into what’s happening and why.
RSAC’s theme this year is about the power of community. We think that cuts both ways: shared knowledge moves the industry forward, but only if vendors are actually being straight with you about what they do and how they do it.
That’s the conversation we’re there to have. Come find us at N-5261.
Expel at RSAC 2026
Booth #N-5261, North Hall, Moscone Center San Francisco
March 23–26, 2026
