Toulouse Hacking Convention (THCon) · 2026

Agoris analysis · updated May 2026

Key takeaways

• The URL numeriquest-toulouse-2026 actually covers the Toulouse Hacking Convention (THCon), a French cybersecurity convention founded in 2017. No trade show named "Numeriquest" exists in Toulouse: this is the name of a company exhibiting at a different, unrelated trade show (source: editorial research).
• 10th edition: 5 and 6 May 2026 (talks) + 7 May 2026 (CTF) at the Auditorium Marthe Condat, Université Paul Sabatier, Toulouse (source: thcon.party/program).
• A convention/conference + CTF format: this is not a trade show with exhibitor stands, but an academic and professional cyber event. There is no classic exhibitor-visitor journey.
• The organiser reports up to 1,800 international participants (2022 figure) with a mixed audience of amateurs, professionals and researchers. The CTF brings together more than 600 competitors from 12 countries (sources: thcon.fr, thcon.party).
• Cyber recruiting sponsors: Orange Cyberdefense, ITrust, Sopra Steria, Synacktiv, Epsilon, ESGI (source: thcon.party/sponsors).

Who exhibits

Typical profile

THCon does not have exhibitor stands as such. Instead, the format is built around:

• Institutional and industrial sponsors (Gold, Silver, Bronze) who recruit or source cyber talent.
• Partner schools (ENSEEIHT, ENAC, INSA Toulouse, Université Paul Sabatier).
• Research laboratories (LAAS-CNRS, ANSSI) and academic speakers.

Notable sponsors (2026 edition)

Gold sponsors: Orange Cyberdefense, ITrust, Epsilon, ESGI, Sopra Steria. Silver sponsors: Root-Me PRO, Lyra, Holberton Actual Digital School, Viveris, MISC, Never Hack. Bronze sponsors: Eurecia, Synacktiv, IMS Networks, G Echo (source: thcon.party/sponsors).

Quality of the audience

• A mixed audience of amateurs, cybersecurity professionals, academic researchers and students
• A strong international component: a CTF with competitors from 12 countries, 4 continents in 2022
• Up to 1,800 participants announced (2022 figure, organiser declaration)
• No published OJS report (R2)

Programme & community

Conference programme (2026 edition)

Pre-event on Monday 4 May 2026 (2 pm-5.45 pm): "Security for and by hardware", at the Jacques Herbrand auditorium, IRIT, Université de Toulouse.

Talks on Tuesday 5 and Wednesday 6 May 2026, in a keynote + short (20 min) and long (30 min) presentation format. Themes covered: reverse engineering, vuln research, malware analysis, crypto attacks, offensive AI, 5G security, infostealers, space security (sources: thcon.party/program).

Announced keynotes: Aurelien Francillon (Eurecom) on smartphone backdoors; Michael Schwarz (CISPA) on CPU architecture exploits.

Capture The Flag (CTF)

Thursday 7 May 2026 (1 pm-9 pm) at ENSEEIHT, extended online over 24 h. Separate on-site and online leaderboards. The online CTF is free, the on-site CTF is paid with a limited number of places (source: thcon.party).

Call for Papers

CFP opened in November 2025, deadline 12-19 January 2026, notifications 13-20 February 2026. Three categories: regular papers, industry papers, student papers. Language: English (source: thcon.party/cfp).

Community and networks

THCon is run by a volunteer team of cyber professionals, students and researchers from across France. The Toulouse academic ecosystem (Paul Sabatier, ENSEEIHT, ENAC, INSA, LAAS-CNRS) forms the academic foundation of the event (source: thcon.fr).

On site: what you need to know

Access, parking and accommodation: see the listing for the Université Paul Sabatier.

Specific to the convention:

• Talks location: Auditorium Marthe Condat, reachable via line B of the Toulouse metro, Université Paul Sabatier station.
• CTF location: ENSEEIHT (Toulouse city centre) on 7 May.
• Times: Tuesday 5 and Wednesday 6 May, full days; Thursday 7 May 1 pm-9 pm for the CTF.
• Registration: online ticketing on thcon.party (see prices).

How much it costs to exhibit

The THCon format does not offer a classic exhibitor stand: visibility comes through sponsoring (Gold, Silver, Bronze). Sponsor quote requests via thcon.party. Figures not publicly available.

Published visitor prices (2026 edition):

• Conference (2 days, meals and evening included): €95 without t-shirt, €100 with t-shirt
• Student rate: €30 without t-shirt, €35 with t-shirt (ID verification required)
• Online CTF: free
• On-site CTF: paid, limited number of places

(Source: thcon.party/tickets)

Preparing your visit

For the sponsor

• 9 months out: get in touch with the THCon team to apply to the Call for Sponsors.
• 6 months out: choose the tier (Gold, Silver, Bronze) based on recruitment objectives and budget.
• 3 months out: prepare a short pitch (an academic, not commercial, presence), prepare recruitment material.
• 6 weeks out: brief the team on the target profiles (researchers, cyber engineering students, reverse/offensive professionals).

For the cyber visitor

• Register online on thcon.party, payment required (€95 pro, €30 student).
• Allow 2 to 3 days depending on the scope (CTF included or not).
• Prepare an application for the on-site CTF if the goal is the competition.
• Identify the relevant talks in advance from the ~25 talks over 2 days (programme published ahead of time).
• A strong networking component in the evenings: the social gathering is a highlight.

Policy & CSR initiatives

Information not available: as at the date of this listing, THCon does not publish a dedicated CSR commitments page or any identifiable eco-responsible charter on its official sites.

How the trade show has evolved

Trajectory analysis

THCon grew from around 300 participants in 2018 to 1,800 announced in 2022, a sixfold increase in 4 years, driven by an upgrade in keynotes (Eurecom, CISPA, Airbus, ANSSI) and the international broadening of the CTF (12 countries). The event has found its balance between an academic dimension (CFP, research presentations) and pro/student accessibility (preserved prices, free online CTF). The slug numeriquest-toulouse-2026 is a legacy that should be corrected editorially: the real event is THCon, and the slug should eventually reflect that name to reduce user friction. For now the URL is being kept so as not to lose the Google indexing already acquired.

Unless otherwise stated, all factual data in this listing comes from the organiser's official website (thcon.party).