Skills / Finding the buyer / BSides and the regionals

Which regional events put us in front of buyers without Vegas or SF prices?

The most useful room in this market usually costs a badge and a drive.

bsides-and-regionals

SKILL.md · 824 words

Verified Sept 2026

Download the folder
What your agent reads.
name
bsides-and-regionals
description
Regional and sector security events for a seed-stage cybersecurity company: which rooms put a founder in front of buyers without RSAC or Black Hat prices. Covers the conference the buyer is obliged to attend versus the one the category is named after, the three kinds of regional room (sector and information-sharing communities, practitioner BSides and local chapters, sponsored touring summits), going to BSides as a practitioner, working one city deep, what a regional should cost, and counting it a quarter later. Use when a founder is choosing which regional events to attend, is pitched a local sponsored summit, or is planning buyer travel around a city. Not for RSAC (rsac-week), Black Hat and DEF CON (hacker-summer-camp), hosted dinners and paid matchmakers (ciso-dinners-and-matchmakers), or founder rooms (founder-communities).
title
BSides and the regionals
question
Which regional events put us in front of buyers without Vegas or SF prices?
subtitle
The most useful room in this market usually costs a badge and a drive.
summary
You go to the conference your buyer is required to attend, not the one your category is named after, because that is where the better leads come from. Work one city until the referrals run out, go to BSides as an engineer with a tool rather than a vendor with a table, and treat any regional event that asks for sponsorship money as a booth with a smaller carpet.
group
buyer
verified
2026-09-08
order
36

839 / 1024 characters

This is the top of the SKILL.md file, exactly as it downloads. Your agent reads the description field to decide when to load this skill. The rest of this page is for you.

You will plan the year around the security industry's own calendar, and your buyer does not live on it. The better question is which room your buyer has to be in for reasons that have nothing to do with you. In our portfolio those rooms produced better-qualified leads than the big-name events, and the gap was widest in the years the big events were weakest.

Go where your buyer is required to be.

You go to the conference your buyer is professionally obliged to attend, not the one your category is named after. Sector information-sharing groups, the certification bodies' regional days, and the small working summits for operators are where a security leader goes to satisfy an obligation, keep a credential, or hear what peers in the same sector are doing. Nobody there is walking a show floor. They are in the room because their job requires it, which is exactly why a conversation there converts and a badge scan does not.

Three kinds of room, two worth your day.

You will be invited to three kinds of room. The first is the sector room, where your buyer goes to discharge an obligation and vendors are tolerated as a member's guest. The second is the practitioner room, a city's BSides, the local chapter meeting, or the university's security day, where opinions form and vendors are tolerated as engineers. The third is the sponsored regional summit, one of the touring circuits under a local name, where the vendor pays and the executive is seated for free. The third kind is a booth with a smaller carpet. Ask it the same questions you would ask any paid room, who pays whom, whether the buyer chose it, and what the ratio of vendors to executives is, and expect the same answers.

Go to BSides as a practitioner.

You go to a BSides with a talk or a tool, never with a table to stand behind. These events are cheap, run by volunteers, and built to frustrate lead generation, and that is the point. The people there will run your product themselves and tell a security leader months later that it works, which is worth more than any scan. Bring an engineer, answer questions, and leave the slides at home.

Work one city until the referrals run out.

You build relationships with senior buyers in person, and they accumulate inside a city. A dense run of meetings in one metro area produces referrals inside that metro, because the security leaders at a city's large employers know each other and hire each other's deputies. A scattered tour produces nothing but miles and follow-ups that go cold, and the follow-up is where the value was. Pick the city where your buyers cluster, attend its sector and practitioner rooms all year, host one dinner there, and go back until the referrals stop coming.

It should cost a badge and a drive.

You pay a badge, a day, and a drive. That is the whole budget for the rooms that work. If a regional event asks for sponsorship money in exchange for access to buyers, it is the touring circuit whatever city is on the banner, and it should be priced as a brand purchase, not as pipeline.

Count it like any other room.

You measure a regional event by the same number as any room: pipeline it produced that is still alive a quarter later, in its own column. Expect fewer names than the big weeks produce and better ones, and set next year's calendar from that count.

The Atlanta pick is still open.

You are reading this from a firm whose own city is Atlanta, and the honest answer about our city is that the rooms change hands. The historic regional forum changed owners, the touring circuits run here on their own calendars, and the practitioner rooms are alive. Which one we would send a founder to first is a pick we have not made. Ask a security leader in the city which room is alive this season.

Working the question.

  1. Write down the obligation your buyer carries, and find the room where they go to discharge it.
  2. List the practitioner rooms in your buyers' city, and put an engineer in them with a tool or a talk.
  3. Pick one city, attend all year, host one dinner, and go back until the referrals run out.
  4. Treat any regional event that asks for sponsorship money as the touring circuit, and price it as brand.
  5. Count the pipeline still alive a quarter later, and set next year's calendar from that column.

Working with an agent.

Give your agent the city where most of your customers sit. Ask it which local security events those buyers attend because their job requires it, rather than because the category is interesting. Those are the rooms that cost a badge and a drive.

Install the skill.

You are reading the skill itself — this page and the download are the same files. Unzip it into ~/.claude/skills/ (or a project’s .claude/skills/) and Claude Code loads it when the question comes up; so does any agent that reads Agent Skills.

mkdir -p ~/.claude/skills && cd ~/.claude/skills && curl -sLO https://techoperators.com/skills/bsides-and-regionals.zip && unzip -oq bsides-and-regionals.zip && rm bsides-and-regionals.zip

bsides-and-regionals/SKILL.md

No terminal? Download bsides-and-regionals.zip and drop into your assistant’s project files.

Kevin Skapinetz

Tell us what you see.

Whether you’re thinking about starting a company, building one in stealth, or raising a round: send Kevin or Dan what you see on LinkedIn, in your words.