live

It-sa Expo & Congress 2026

Meet the experts of Cluster Reply and Spike Reply at it-sa 2026 in Nuremberg and experience our expertise as a specialized security provider.

Info

October 27 – 29, 2026

Nuremberg Messe

German / English

Pioneering impulses for cybersecurity

The it-sa Expo & Congress, the leading trade fair for IT security, will take place from 27 to 29 October 2026 at the Nuremberg exhibition center. In expert forums and inspiring presentations, current topics will be discussed – it-sa is regarded as a trend barometer for the entire IT security industry. The accompanying congress program also offers the opportunity for intensive exchange on concrete questions and specific challenges.

Meet the experts from Cluster Reply at the Microsoft booth in Hall 6, Booth 336, and the OT security experts from Spike Reply in Hall 7 at Booth 416, hosted by NRW.Global.

Meet our cybersecurity experts directly on site and get answers to your security challenges.

Real threat detection in action

See firsthand how advanced OT security solutions detect, analyze, and stop cyberattacks in industrial environments using realistic automation systems.

NRW.Global booth 416, Hall 7

Our live demo: Hands-on OT security

Experience live how modern OT security solutions can detect, analyze, and prevent cyberattacks in industrial environments. Our demo unit replicates a realistic automation environment with authentic industrial components, controllers, networks, and communication protocols as used daily in production and infrastructure facilities.Through various attack scenarios, we demonstrate how modern OT security technologies can identify threats early, make security incidents visible, and initiate targeted protective measures.

We showcase the practical use of network monitoring, anomaly detection, firewalls, segmentation concepts, honeypots, and additional technologies for threat detection and prevention. Our demonstration platform provides direct insight into the challenges of modern production environments and illustrates how transparency, threat detection, and cyber resilience in OT networks can be sustainably improved. We demonstrate how technologies and strategies can effectively protect against current cyber threats – from threat detection and analysis to effective defense, OT security in practice.

Microsoft booth 336, hall 6

Our presentation: From agent sprawl to secure AI governance

Organizations are rapidly deploying AI agents across Microsoft 365, Copilot Studio, and custom AI platforms. While adoption accelerates, visibility, governance, and security often struggle to keep pace. In this session, we demonstrate how Microsoft Agent 365 enables organizations to discover, govern, and secure their AI workforce.

Attendees will see how AI agents can be inventoried, monitored, and controlled through a centralized management experience. Using a realistic enterprise scenario, we show how organizations can identify risky agents, review permissions, understand data access patterns, and prevent oversharing of sensitive information. The session also highlights how Microsoft Entra and Microsoft Purview complement Agent 365 to establish enterprise-grade AI security, governance, and compliance.

Learn how to confidently scale AI agents while maintaining transparency, accountability, and security.

Tuesday, October 27 - 12.00 p.m - 12:30 p.m

Wednesday, October 28 - 02:30 p.m - 03:00 p.m

Thursday, October 29 - 02:00 p.m - 02:30 p.m

Speaker:

Christoph Sondermann, Cluster Reply

Fabian Rogen, Cluster Reply

Microsoft booth 336, hall 6

Our showcase: Agent sprawl & governance: Securing the enterprise AI ecosystem

As organizations rapidly adopt Microsoft Copilot, Copilot Studio, and AI-powered agents, they face a growing challenge: maintaining visibility, accountability, and control over an expanding AI landscape. This showcase demonstrates how Microsoft 365 Enterprise E7 enables organizations to establish a trusted and secure AI platform by addressing Agent Sprawl and governance risks. The solution provides comprehensive discovery and inventory capabilities to identify AI agents across the enterprise, including sanctioned and potentially unauthorized agents. A centralized Agent Registry serves as the single source of truth, capturing ownership, purpose, risk classification, business criticality, and lifecycle status.

An interactive Agent Map visualizes relationships between agents, users, data sources, Microsoft 365 workloads, and external systems, helping organizations understand dependencies and identify high-risk access paths. Automated detection of Ownerless Agents ensures every agent has an accountable business owner and prevents abandoned agents from retaining unnecessary access privileges.

In addition, Shadow AI detection identifies agents and AI services operating outside approved governance processes, helping organizations uncover unmanaged risks and enforce corporate AI policies.

Microsoft booth 336, hall 6

Our use case: Controlling unmanaged AI growth

A global enterprise introduces Microsoft Copilot and enables business units across HR, Finance, Sales, and Operations to create custom AI agents using Copilot Studio.

Within months, hundreds of agents could be deployed across departments and platforms, while security and governance teams have limited visibility into ownership, accessed data sources, permissions, and policy compliance.

Agent 365 capabilities enable administrators to discover all deployed agents, classify them by risk and business purpose, identify abandoned agents, visualize dependencies, review permissions, and establish a centralized Agent Registry. High-risk agents with access to sensitive information are prioritized for review and remediation before risks materialize. As a result, the organization gains visibility, improves accountability, and creates a sustainable governance model for secure and scalable AI growth.

Our highlights

Get insights into managing complex security challenges

See real-world examples of securing operations and AI ecosystems

Experience cutting-edge security solutions in action

See live demos of threat detection and defense strategies

Learn best practices for governance and compliance

Visit us at it-sa 2026 and get to know strategies to secure your digital and industrial environments.

Cluster Reply

Cluster Reply is the Reply Group company specialising in consulting and system integration of Microsoft technologies. As a Microsoft partner, Cluster Reply is active in Germany, Austria and Switzerland and works within the Reply network with sister companies in Brazil, Great Britain, Italy as well as the USA. The company focuses on innovation and supports customers in their digital transformation. The solutions range from on-premises to cloud applications in the areas of modern workplace and security, business applications, applications and infrastructure as well as data and artificial intelligence.

Spike Reply

Spike Reply is the cybersecurity company within the Reply Group, focused on securing complex IT, OT, and cloud environments at all stages of digital transformation. The company specializes in cloud security, threat detection and response, identity and access management, secure architecture design, and compliance with international standards and regulations. Spike Reply delivers end-to-end services - from security assessments and solution implementation to managed security services - leveraging leading technologies and cloud-native platforms. With a strong focus on automation, scalability, and real-time threat intelligence, Spike Reply enables clients to build resilient, secure infrastructures. The company's approach combines deep technical expertise, industry best practices, and a commitment to “security through innovation”.