Major incidents, broken down by the people who investigated them.
Monthly deep-dives with IR responders and threat researchers. Threat intel sharing. Playbooks that actually work.
π Founding member rate: $40/month β available for the first 100 members
What You Get
Monthly Incident Breakdowns
Top request β 43% of pollWe bring in the people who actually investigated major incidents to break them down with you.
- βWhat really happened (not the sanitized press release)
- βHow they found it and what they missed at first
- βThe IOCs and TTPs that matter
- βYour questions, answered live
- βRecordings for members who can't attend
Example Sessions
"Inside the Breach: How We Found Initial Access"
IR Lead, Major Tech Company
"Scattered Spider: What We're Actually Seeing"
Threat Intelligence Analyst
"The Ransomware Negotiation Nobody Talks About"
DFIR Consultant
Real-Time Threat Intel
#2 request β 21% of pollWhat members are seeing in the wild, shared in real-time. Not vendor marketing. Practitioner intel.
Templates + Playbooks
#3 request β 14% of pollMember-contributed, peer-reviewed templates for the stuff you actually need to do your job.
Member Job Board
Jobs that don't hit LinkedIn. Security teams post roles here first β before the public job boards fill their inbox with noise.
Vetted Peer Network
A private Slack with practitioners who actually do the work. No vendors pitching. No lurkers farming content.
Who This Is For
- βSecurity practitioners (any level)
- βCISOs and security leaders
- βPeople who want to learn from real incidents
- βFolks looking for their next role (or next hire)
Who This Isn't For
- βVendors looking to pitch
- βLurkers who won't participate
- βPeople expecting 1:1 consulting
FAQ
How is this different from free security Slacks/Discords?
Curation. We vet members, host exclusive monthly sessions with notable guests, and actively moderate to keep signal high. Free communities optimize for growth. We optimize for value.
What if I can't make the live sessions?
All sessions are recorded and available in the member archive within 24 hours.
Can I expense this?
Yes. Many members expense this as professional development. We can provide an invoice.
What's the refund policy?
If you join and it's not for you, email us within 14 days for a full refund.
Can vendors join?
Vendor employees can join as individuals if they're practitioners. But no pitching, no DMing members to sell, no posting promotional content. Violations = ban.
Ready to get in the room?
Join practitioners who learn from real incidents, share real intel, and help each other level up.
or save with annual: $500/year