This is the final installment of the RSAC 2025 on-site report series. Following the keynotes introduced in Part 1 and the global company booths covered in Part 2, this installment brings you the vivid scenes of RSAC — from sessions and innovative startups to a variety of experiential events and a spectacular finale.
Let's take a look together at the final leg of the world's largest cybersecurity event, held under the theme "Many Voices. One Community."
🎤RSAC 2025 Session
RSAC 2025 featured multi-layered sessions for security practitioners, organized into more than 30 topic-based tracks. Track sessions covering a wide range of topics — AI, cloud, hackers, supply chain, compliance, threat intelligence, and more — were held, and CloudNetworks paid particular attention to security operations automation and AI. Presentations were mainly held at the Moscone South Esplanade, and CloudNetworks attended key sessions through advance reservations. Unlike the exhibition hall, the atmosphere was calm, and popular sessions filled up early.
One particularly impressive session was OpenText's presentation, "How to Use LLMs to Strengthen Threat Alerts Using the MITRE Framework." It introduced a strategy for automatically mapping malicious activity to MITRE's TTPs using LLMs to improve the speed and accuracy of threat detection, and it was delivered amid intense focus from practitioners. Other sessions included "AI Era Authentication," "The Intelligence War: Winning Against Nation-States," and "Security in the Age of Agentic AI," among others, and these presentations went beyond simple technology introductions to include practical security operation scenarios and use cases.
Throughout the venue, in addition to the press center, various interview spaces were set up, and it was impressive to see many global attendees freely exchanging opinions. Although many programs ran simultaneously, dedicated staff were stationed exactly where needed, so operations ran very smoothly despite the large scale of the event, and a bookstore was also set up where visitors could browse books covering various security topics.
🚀RSAC 2025 Early Stage Expo
As its name suggests, the Early Stage Expo was a stage where startups that had just entered the market competed primarily on the strength of their technology. This space, set up separately on the second floor of the Moscone Center, was a vivid scene where the next generation of players in the global security industry introduced their technologies directly and exchanged real-time feedback. Though small in scale, engagement was very high.
Each booth drew visitor interest through concise, clear messaging, practical demo content, and creative exhibition design. At the booth of Fleak, which provides AI data workflow solutions, a message warning of the difficulties of log analysis was displayed alongside a live survey board on the theme "why security professionals can't sleep at night," where visitors could put up stickers themselves. White-hat hacking company CovertSwarm caught attention with the bold slogan "You Deserve to be Hacked" and a motion-display bag, and at the booth of IP & URL threat intelligence company alphaMountain, a staff member wearing a Yeti-themed hat explained the product directly, keeping the mood light. At the booth of deepfake detection company Resemble AI, several devices were displayed alongside the slogan "Stop Deepfakes, Safeguard Trust," emphasizing the importance of protecting trust. MirrorTab, which provides web application security solutions, ran a business-card raffle event alongside the message "Shield Your Web Applications." Promptfoo spread the importance of generative AI security under the theme "Scan & Secure Your Gen AI Apps," and identity security company Whiteswan introduced its "Unified Next-Gen PAM" next-generation privileged access management solution.
Overall, AI was reflected across a wide range of security domains, and companies covering SOC, lateral movement prevention, Linux security, and NHI stood out. At the Early Stage Expo, it was possible to hear detailed technical explanations that could easily be missed in the large exhibition halls, and the agile approach of these startups offered new food for thought. Presentation sessions were also held in a corner of the exhibition hall, allowing direct insight into each startup's technical direction and product implementation strategy — a moment that made one look forward to seeing which companies would stand out in the industry going forward.
🎲RSAC 2025 SandBox & Events
Another highlight of RSAC could be found in its various experiences and events. Beyond the exhibits, keynotes, and sessions at the Moscone Center, a colorful array of side events unfolded throughout downtown San Francisco. Many visitors took #RSAC souvenir photos at the photo wall in the Moscone Center lobby, and WIZ ran a profile-photo shooting event that drew long lines throughout the event. Around downtown, companies such as KEASY handed out QR party invitations, which naturally led attendees to brand lounges or party spaces.
▶ SandBox: DARPA AIxCC Experience
At YBCA (Yerba Buena Center for the Arts), DARPA's AIxCC Experience was in operation. This sandbox exhibit built a virtual city called "Northbridge" to demonstrate how important AI-based cybersecurity is for protecting infrastructure, and it was designed so visitors could experience attack simulations centered on hospital and water-resource infrastructure modeled on real industrial environments. Through an immersive, sci-fi-movie-like space and realistic threat scenarios, visitors could intuitively understand the future and necessity of AI-based security.
▶ CrowdStrike: The Falcon Lounge
CrowdStrike ran "The Falcon Lounge" near the exhibition hall, offering a DJ booth, candy bar, AI photo zone, massage chairs, and snacks while promoting its own conference, Fal.Con 2025. The lounge went beyond a simple rest area to become a space that maximized branding and customer experience, with its bold red interior and design standing out.
▶ Club Claroty
Through a pop-up lounge called "Club Claroty," Claroty left a strong impression on visitors with a hot-pink-themed space featuring a locker prize event using roller-skate keychains, DJ performances, a podcast booth, and other programs. Making use of an outdoor terrace, this space offered RSAC attendees a place to rest and network.
▶ Orca Security, Barracuda
Orca Security, which used dogs in its exhibition-hall marketing, delivered its brand message through a pop-up event featuring characters and interactive game elements, offering donuts and drinks, and also promoted itself with AI T-shirts and Minecraft character masks. Barracuda promoted its products by handing out Starbucks gift cards to attendees wearing RSAC badges.
Such varied activities held both inside and outside the venue went beyond simple technology exhibits, serving as important scenes where brands and users connected directly and where the scale and ecosystem of RSAC could be felt firsthand.
🎇 RSAC 2025 Finale
Even on the conference's final day, the Moscone Center was bustling with activity. The exhibition hall was open until 2 p.m., and there were still people actively participating in events up to the very last moment, with the surrounding area filled with people carrying official RSAC backpacks and souvenirs. We moved to Moscone Center West to attend the finale, the last official event of the conference. Interviews were still underway in the lobby, and official RSAC souvenirs and cookies printed with "RSAC 2025" were being handed out.
We entered the venue where the keynote sessions had been held. On the floor at the entrance, the conference's slogan, "Many Voices, One Community," was projected. Unlike the atmosphere of the rest of the venue, exciting music played as staff moved to the rhythm while handing out glow sticks and guiding guests to their seats, giving the feeling of having arrived at a concert.
The finale opened with a performance by DJ Irie, instantly raising the energy of the crowd, and actor Jamie Foxx appeared on stage from the audience to cheers. Jamie Foxx took selfies with the audience and danced with them on stage, driving the mood. This was followed by an energetic performance from Jazz Mafia, adding to the excitement.
After the performances, RSAC Executive Chairman Hugh Thompson took the stage and declared RSAC 2025 a successful close. Through a lighthearted conversation with Jamie Foxx, he repeatedly emphasized "community," the core message of the event, and spoke about the human-centered security philosophy becoming ever more important in the AI era. It leaves one curious whether Jamie Foxx might appear in a cybersecurity film in the future. After the event ended, the screen displayed the schedule for RSAC 2026, promising a return next year, and it was only then that it truly sank in that the journey in San Francisco had come to an end.
✨RSAC 2025 Insights by CloudNetworks
Through attending RSAC 2025, CloudNetworks was able to comprehensively grasp the trends and strategies of the global security industry. In particular, we felt firsthand how the community-centered message from the keynotes introduced in Part 1 carried through consistently across the exhibition halls, sessions, and various events.
The security trends worth noting from this year's RSAC, as compiled by CloudNetworks, are as follows.
The Rise of Agentic AI: Going beyond simple generative AI, agentic AI capable of autonomous decision-making has emerged as a new paradigm in the security industry. Microsoft's Security Copilot and Google's Gemini security services are representative examples, and more than 40% of conference session proposals were AI-related topics.
Integrated Security Platforms: Rather than fragmented solutions, AI-based integrated platforms spanning detection, response, and recovery were emphasized. CrowdStrike's Charlotte AI, Cisco XDR, and SentinelOne's Singularity platform, among others, showcased AI automation and proactive threat detection capabilities.
Identity-Based Security: As machine-to-machine communication increases, management of NHIs (non-human identities) has emerged as a key issue. Authentication and privilege management for AI agents were emphasized as a top priority in enterprise security.
LLM Security Technology: Security threats to and defense strategies for LLMs were treated as major topics. Solutions such as prompt injection defense, vulnerability assessment, and AI security guardrails were introduced, and the development of security-specialized LLMs stood out.
Post-Quantum Cryptography (PQC): Crypto-agility in preparation for quantum computing was covered as an important topic. By the end of 2025, national security systems must adopt quantum-safe algorithms, and NIST plans to deprecate existing asymmetric algorithms by 2030.
Data-Centric Security: The importance of data-driven security operations was emphasized. Splunk presented its vision for AI-based SOC modernization under the theme "Power the SOC of the Future," and natural-language-based search and SOC automation drew attention.
Software Supply Chain Security: The importance of software composition analysis (SCA) and SBOM (Software Bill of Materials) management was emphasized. With the rise of malicious models, supply chain security emerged as an essential task.
Infrastructure Security Automation: With the expansion of cloud environments, infrastructure security automation and IaC security have become important. The need for automated security infrastructure was further emphasized in the era of agentic AI.
Open-Source Security Tools: Open-source-based security tools such as Cisco's Foundation-sec-8B LLM and Meta's Llama Defenders Program drew attention. This reflects an important shift toward the democratization of, and collaboration in, security technology.
These trends illustrate the current state and future direction of security technology, and in particular confirmed that agentic AI and integrated platforms are establishing themselves as central themes in the security industry.
Based on the insights gained from attending RSAC, CloudNetworks will strive to provide our domestic customers with services that apply global-level, cutting-edge security strategies and technologies. Thank you.
