cosac.net

What It Is

COSAC is an information security and cybersecurity conference brand, described in its own copy as “An Information Security conference like no other.” Its core format is an annual, in-person exchange of ideas. Upcoming events include COSAC 2026 in Kildare, Ireland, from September 27 to October 1, and COSAC APAC 2027 in Melbourne, Australia, from February 23 to 25. It is not a firewall, EDR, vulnerability management tool, or cloud security platform, but rather a high-intensity discussion environment for cybersecurity leaders and professionals.

Core Evaluation Dimensions

In terms of protection type, COSAC does not provide direct technical security capabilities. Its value lies mainly in security strategy, forward-looking perspectives, real-world challenges, and peer knowledge sharing. The delivery model is an offline conference, with an emphasis on face-to-face meetups. Its conference culture is small-scale, private, and highly interactive, and it explicitly prohibits sales pitches, product content, and exhibition-style vendor promotion. This helps reduce marketing noise and lets attendees focus on real InfoSec issues. The source text does not provide information on management and alerting, system integration capabilities, or compliance certifications, so COSAC should not be regarded as a security operations tool.

Pricing and Service Information

The text states that COSAC 2026 delegate registration is now open and that early-bird pricing is available until June 30, but it does not disclose specific prices, payment methods, invoicing, refund policies, or enterprise group purchase options. For support, only contact channels are provided, including LinkedIn, email, phone, and contact numbers for NAAS and MELBOURNE. It is not stated whether Chinese-language support, online customer service, or China-region services are available.

Pros, Cons, and Suitable Users

Its main strength is its clear positioning: no sales, no exhibition, small-scale participation, and a strong emphasis on debate. It is well suited to CISOs, security leaders, senior security architects, researchers, and speakers who want in-depth discussion. A history of more than 30 years also suggests a certain level of industry credibility and continuity. Its limitations are that it cannot replace any security protection product and cannot directly address detection, response, compliance auditing, or risk control needs. In addition, the offline venues are in Ireland and Australia, so attendees from China need to factor in visas, travel, language, and overall cost.

Access from China and Alternatives

The source text does not provide information on website accessibility from mainland China, so this remains unknown. Payment methods are also not disclosed. For similar international exchange opportunities, users may look at Black Hat, DEF CON, and RSA Conference. If localized content, Chinese-language communication, and domestic payment options are more important, domestic cybersecurity conferences such as ISC, CSS, and XCon may be worth considering.