Your Black Hat PR Strategy Needs a Reality Check

Every summer, cybersecurity companies head into Black Hat with the same goal: book as many media briefings as possible.
Unfortunately, that’s no longer how the event works.

A cybersecurity reporter recently shared that they received well over 5,000 emails the week before RSA. Yet despite thousands of pitches, they only had time for two or three briefings during the conference.

Think about that.

Thousands of companies are competing for just a handful of meeting slots. Black Hat features hundreds of sponsors, vendors, startups, researchers, and security leaders, all trying to tell reporters they’re the company worth covering. Simply requesting an introductory meeting with your CEO or CISO isn’t enough anymore because every company is making the exact same ask.

If your Black Hat PR strategy is measured by the number of reporter meetings you book, it’s probably time to rethink your approach. Stop chasing meetings and earn a reason to have one. The uncomfortable truth is that most companies don’t need a media briefing at Black Hat.

Unless you’re bringing one of the following, reporters simply don’t have the bandwidth:

Product launches alone rarely generate significant Black Hat coverage. Compared to RSA, Black Hat reporters are typically focused on technical discoveries, research presentations, and emerging threats rather than product announcements.

Instead of trying to force meetings that are unlikely to happen, invest in activities that actually create visibility. Sponsored media opportunities, analyst briefings, and unique technical demos with respected non-vendor partners often generate far more value than dozens of unanswered pitch emails.

One increasingly effective strategy is partnering with independent cybersecurity journalists or newsletter authors through sponsored content or event partnerships. As the cybersecurity media landscape continues to evolve, these outlets often reach highly engaged technical audiences.

When is the best time to announce news for Black Hat?

One of the biggest misconceptions about conference PR is timing. Many companies assume they should launch research during Black Hat itself. In reality, the week before the conference is usually the better opportunity. Reporters frequently publish Black Hat preview stories and roundup articles before they ever board their flights to Las Vegas. By the time the conference begins, many of those stories have already been written and scheduled.

If you’re releasing research, aim to publish it before the event so it can be included in pre-show coverage. Then, once Black Hat concludes, shift your attention to post-event thought leadership. Your technical experts have spent several days immersed in sessions, conversations, and demonstrations.

Use those insights to pitch:

These perspectives often resonate because they synthesize what happened instead of contributing to the noise. Your email has about 10 seconds to survive. Artificial intelligence has made writing emails easier, but it has also made cybersecurity reporters much faster at recognizing generic outreach. When someone has 5,000 emails waiting, every sentence matters.

The most effective Black Hat pitches are:

Every cybersecurity reporter has different preferences. Some schedules fill a month before the event. Others, like Axios’ Sam Sabin, often don’t begin scheduling until much closer to the conference. This is where experienced cybersecurity PR teams make a real difference. Knowing when to send the pitch can be just as important as what’s written inside it.

When is the best time for conversations at Black Hat?
Here’s something many first-time exhibitors don’t realize. Reporters spend most of Black Hat attending technical sessions. They’re listening to researchers, taking notes, following breaking stories, and trying to understand what matters most for their readers. They rarely have spare time during conference hours.

That’s why after-hours events remain one of the best opportunities to strengthen relationships. Whether it’s your customer event, happy hour, or party, these informal settings create opportunities for conversations that simply don’t happen between sessions. Relationship building has always been the foundation of successful cybersecurity PR. Black Hat is no exception.

When should Black Hat Prep start?
The strongest Black Hat media strategies don’t come together in July. Ideally, your overall strategy begins taking shape shortly after speaker notifications are announced in early June. Those decisions help determine whether your emphasis should be research, executive thought leadership, technical demonstrations, analyst engagement, or sponsored opportunities.

Even earlier than that, most foundational elements should already be planned:

Of course, cybersecurity doesn’t always cooperate with perfect planning. Threats emerge overnight, research timelines shift, and product roadmaps evolve. But the earlier your communications team understands your Black Hat priorities, the more strategic your media program can become.


Winning Black Hat looks different today
The companies that consistently stand out aren’t necessarily the ones requesting the most media meetings, they’re the ones giving reporters something genuinely worth covering.

Sometimes that’s exceptional technical research.
Sometimes it’s an earned conference presentation.
Sometimes it’s a compelling technical demonstration.

And sometimes it’s recognizing that your time is better spent building analyst relationships, investing in sponsored opportunities, or creating thoughtful post-event analysis rather than chasing media meetings that were never likely to happen.

In today’s cybersecurity media landscape, success isn’t about being the loudest voice during Black Hat.
It’s about being the one reporters actually remember.