Black Hat Week · Las Vegas · Aug 2026

BSides. Black Hat. DEF CON. 2026.

One week on the Strip, and PortSwigger is across all of it - the research on the main stage, the booth on the floor, the CTF in the village, and the people who actually build Burp Suite.

Black Hat USA 2026 Booth 5342 · Mandalay Bay
Kicks off
BSides LV
Aug 3-4 · Tuscany Suites
Main stage and Booth
Black Hat USA
Aug 5-6 · Mandalay Bay
After dark
DEF CON 34
Aug 6-9 · LVCC
11+
consecutive Black Hat papers
3
conferences, one week
Booth 5342
Mandalay Bay show floor
The week at a glance

One week, the whole community.

Big stages to grassroots, all in one stretch of the Strip. Times are a planning guide - final slots and rooms land closer to the event.

Aug 3-4
Mon-Tue
BSides LV
10:30am Burp, But Yours: Hands-On Extension and Bambda Development A four-hour hands-on workshop from 10:30am, co-presented by Hannah and Burp Ambassador Tib3rius. Training Ground H112.
Mon-Tue Meet our team Come and find us - our table location is assigned on the day, so check the board when you arrive. Tuscany Suites & Casino.
Aug 5-6
Wed-Thu
Black Hat USA
Both days Booth 5342 - Mandalay Bay Live demos of Burp Suite, DAST and our latest AI capabilities, plus lightning-style talks at the booth through the day.
Wed 12:00pm James Kettle: Can AI Do Novel Security Research? Meet the HTTP Terminator Wednesday 5 August, 40 minutes. Oceanside A.
Thu 2:35pm Gareth Heyes: CSS: the bomb inside your inbox Thursday 6 August, 40 minutes. South Seas CDF.
Aug 6-9
Thu-Sun
DEF CON 34
All con Find us at the Bug Bounty Village We're a proud sponsor of the Bug Bounty Village at DEF CON 34 - the team will be hanging out there all weekend. Las Vegas Convention Center.
Talk James Kettle: Can AI Do Novel Security Research? Meet the HTTP Terminator The same talk on the DEF CON stage. Time and room TBC.
4:00pm Burp, But Yours: Hands-On Extension and Bambda Development Two hours from 4:00pm. Bug Bounty Village.
Time TBC Burp, But Yours: Hands-On Extension and Bambda Development Two hours, time TBC. AppSec Village.
Find us on the floor

Come say hi at the Black Hat booth.

Booth 5342 is the easiest place to find us at Black Hat - for a live demo, a technical deep dive, or just the good swag.

BOOTH #5342 The PortSwigger booth on the Black Hat show floor
Live Burp Suite demos See Burp Suite Professional and our latest AI capabilities, driven by the team that builds them.
Lightning talks at the booth Short, sharp lightning-style talks running through the day - drop by and catch one between sessions.
Burp Suite DAST at scale How the same engine runs across thousands of sites - for the AppSec leaders in the room.
Talk to the researchers The people behind the techniques you read about are usually within booth-shouting distance.
Swag worth the detour Stickers, shirts, and the bits that end up in everyone's con photos.
On the big stages

The research everyone's there for.

Eleven straight years of accepted Black Hat papers. This year's lineup carries that streak forward - these are the talks to put in your calendar.

James Kettle presenting research at Black Hat
PortSwigger Research · Black Hat & DEF CON

On stage all week.

Every talk and workshop the team is running this year - from the Black Hat Briefings to the DEF CON stage.

BSides LV · Workshop · 10:30am

Burp, But Yours: Hands-On Extension and Bambda Development

Hannah + Tib3rius (Burp Ambassador)

A four-hour deep-dive, from 10:30am. Training Ground H112, Tuscany Suites & Casino.

Black Hat · Briefings · Wed 12:00pm

Can AI Do Novel Security Research? Meet the HTTP Terminator

James Kettle

Wednesday 5 August, 40 minutes. Oceanside A, Mandalay Bay.

Black Hat · Briefings · Thu 2:35pm

CSS: the bomb inside your inbox

Gareth Heyes

Thursday 6 August, 40 minutes. South Seas CDF, Mandalay Bay.

DEF CON · Talk · Time TBC

Can AI Do Novel Security Research? Meet the HTTP Terminator

James Kettle

James brings the same research to the DEF CON stage. Las Vegas Convention Center.

DEF CON · Workshops · 2x 2-hour

Burp, But Yours: Hands-On Extension and Bambda Development

Hannah

Two two-hour sessions - one in the Bug Bounty Village, one in the AppSec Village.

DEF CON · Bug Bounty Village

Come hang out at the Bug Bounty Village.

We're a proud sponsor of the Bug Bounty Village at DEF CON 34. The team will be there across the weekend - watching the hacking, talking shop, and connecting with the Burp community. No pitch, just come and find us.

Plan your visit
Las Vegas Convention Center · Aug 6-9 · Proud sponsor
The Bug Bounty Village at DEF CON, sponsored by PortSwigger
The PortSwigger-sponsored community at a hacking event
Meet the researchers

Bring the question you've been saving.

Vegas week is the one time of year most of the team is in one place. We host a casual Meet the Researchers session - no pitch, no slides, just the people who build Burp and the people who use it, in the same room.

Time and venue confirmed closer to the time - keep an eye on the PortSwigger socials and blog.

Request a meeting

Skip the queue. Request a meeting.

Want a proper conversation - a deep demo, a DAST walkthrough, or a roadmap chat? Set up a time with the team before the floor fills up.

A private demo of Burp Suite DAST or our latest AI capabilities, at your pace
Time with the people who actually build the product
Time set aside for you, away from the booth queue

Request a meeting

Fill in a quick form and we'll set up a time to talk with the team at Black Hat.

Request a meeting
After hours

Find us after the show floor closes.

Vegas week doesn't stop at 5pm. Here's where to catch the team in the evenings - details firm up nearer the date.

Wed 5 Aug · 5-9pm

C-Vision cocktail hour

Location TBC.
Wed 5 Aug · 6-10pm

Vulnerability Vibes

BrewDog Las Vegas.
// Black Hat Week 2026

See you in Vegas.

Request a meeting, catch a talk, hang out at the Village, or just find the booth and say hello. However you do the week - we'll be there for all of it.