Skip to main content

Major incidents, broken down by the people who investigated them.

Monthly deep-dives with IR responders and threat researchers. Threat intel sharing. Playbooks that actually work.

🎁 Founding member rate: $40/month β€” available for the first 100 members

What You Get

πŸ”

Monthly Incident Breakdowns

Top request β€” 43% of poll

We bring in the people who actually investigated major incidents to break them down with you.

  • β†’What really happened (not the sanitized press release)
  • β†’How they found it and what they missed at first
  • β†’The IOCs and TTPs that matter
  • β†’Your questions, answered live
  • β†’Recordings for members who can't attend

Example Sessions

  • "Inside the Breach: How We Found Initial Access"

    IR Lead, Major Tech Company

  • "Scattered Spider: What We're Actually Seeing"

    Threat Intelligence Analyst

  • "The Ransomware Negotiation Nobody Talks About"

    DFIR Consultant

🎯

Real-Time Threat Intel

#2 request β€” 21% of poll

What members are seeing in the wild, shared in real-time. Not vendor marketing. Practitioner intel.

β†’"Seeing increased [X] targeting [Y] this week"
β†’IOCs and TTPs from active incidents
β†’Detection rules that actually work
β†’Curated weekly digest of top intel shared
πŸ“‹

Templates + Playbooks

#3 request β€” 14% of poll

Member-contributed, peer-reviewed templates for the stuff you actually need to do your job.

β†’IR communication templates
β†’Detection engineering playbooks
β†’Tabletop exercise scripts
β†’Vendor evaluation frameworks
πŸ’Ό

Member Job Board

Jobs that don't hit LinkedIn. Security teams post roles here first β€” before the public job boards fill their inbox with noise.

πŸ‘₯

Vetted Peer Network

A private Slack with practitioners who actually do the work. No vendors pitching. No lurkers farming content.

Who This Is For

  • βœ“Security practitioners (any level)
  • βœ“CISOs and security leaders
  • βœ“People who want to learn from real incidents
  • βœ“Folks looking for their next role (or next hire)

Who This Isn't For

  • βœ—Vendors looking to pitch
  • βœ—Lurkers who won't participate
  • βœ—People expecting 1:1 consulting

FAQ

How is this different from free security Slacks/Discords?

Curation. We vet members, host exclusive monthly sessions with notable guests, and actively moderate to keep signal high. Free communities optimize for growth. We optimize for value.

What if I can't make the live sessions?

All sessions are recorded and available in the member archive within 24 hours.

Can I expense this?

Yes. Many members expense this as professional development. We can provide an invoice.

What's the refund policy?

If you join and it's not for you, email us within 14 days for a full refund.

Can vendors join?

Vendor employees can join as individuals if they're practitioners. But no pitching, no DMing members to sell, no posting promotional content. Violations = ban.

Ready to get in the room?

Join practitioners who learn from real incidents, share real intel, and help each other level up.

or save with annual: $500/year