Soffid at RSAC 2026: identity, resilience, and the power of community

Why we keep coming back to RSAC
RSAC is not the obvious choice for a European IAM vendor.
San Francisco. American market. Booths the size of small offices. Brands that have been building recognition in this industry for twenty years. By any rational calculation, a company like Soffid has easier places to show up.
And yet this is our second year here. With ICEX and INCIBE. With our team on the ground. Deliberately.

The choice to compete in the hardest room
There’s a comfortable version of this story: grow within Europe, serve the regulated markets and public institutions you know well, and watch the global conversation from a distance.
We don’t believe in that version.
RSAC brings together 44,000 security professionals from more than 140 countries. It’s where the industry sets its direction — on architecture, on priorities, on what problems are worth solving. Being absent from that conversation is a choice too, and not one we’re willing to make.
Showing up at Moscone Center — twice — is how we say we intend to be part of what comes next.

What we heard
Four days of conversations at the Spain Pavilion kept surfacing the same structural frustration: too many identity tools, not enough governance, and visibility gaps that widen as architectures grow more hybrid, non-human identities multiply, and AI agents introduce access patterns that existing programs weren’t designed to handle.
The organizations making real progress share one thing: they’ve stopped assembling point solutions and started building a unified foundation — one that covers access management, identity governance, privileged access, and continuous monitoring from a single architecture.
That’s not a vision. That’s what we kept hearing, across very different organizations, over four days.

On being part of the Spain Pavilion
For the second consecutive year, we came to RSAC as part of the Spain Pavilion organized by ICEX and INCIBE.
European IAM brings something specific to this conversation: deep alignment with NIS2, DORA, and high-assurance regulatory frameworks; a proven track record in critical public sector environments; and an approach to sovereignty and deployment flexibility that pure SaaS architectures can’t match.
The Spain Pavilion isn’t just a practical arrangement. It’s a statement about where serious identity security is being built.

To the team

Second year. Same conviction. Stronger conversations.

To ICEX and INCIBE

Thank you for leading the Spain Pavilion and for making this presence possible. The quality of the Spanish cybersecurity ecosystem on show this week is something to be proud of.

We’ll be back.
RSAC 2026 reinforced why we come: the industry is converging on identity as a foundation, the conversations that matter are happening in this room, and Soffid intends to be part of them.
If we spoke this week — thank you. If we didn’t — let’s fix that.

Get in touch with the Soffid team