Detection engineers, threat intelligence analysts, and security leadership doing daily work that informs procurement, not a CPM impressions buy.
Your brand sits alongside reverse engineering, working detection rules, and evidence-tied attribution, presented as a supporter of the defender community, not an advertiser.
Reports are archived in perpetuity and keep surfacing in search, vendor evaluations, and threat hunts. Placements stay live for the life of every report.
Every reader here is a working defender, the exact technical security audience vendors want in front of: the people who evaluate, recommend, deploy, and buy detection and tooling. The most active cohorts:
- CISO and security leadership, taking risk framing, business impact, and vendor capability signals to inform tool evaluation.
- Threat intelligence analysts, pulling attribution assessments, infrastructure pivots, actor TTPs, and IOCs.
- Detection engineering teams, integrating ready-to-deploy YARA, Sigma, and Suricata rules with evidence backing.
- SOC analysts (L1 through L3), using behavioral indicators, kill chain reconstruction, and ATT&CK mapping to build hunt content.
Reach here is about relevance, not raw volume. The audience is concentrated exactly where security buying decisions get made:
In a consolidated feed registered for suricata-update, running in stacks whose operators have never opened this site.
A following of detection engineers, threat-intel analysts, and security leaders, the roles that evaluate and buy.
Daily LinkedIn profile reach, where every report is posted and discussed in the community.
And the reach compounds beyond the site. Every campaign also ships as machine-readable intelligence, a consolidated Suricata feed currently carrying 112 rules across 35 campaigns, 57 IOC feeds in JSON, and 41 STIX bundles built for OpenCTI and MISP. All of it is public and machine-readable, so it can go straight into a detection stack without anyone loading a page here. That is reach that does not depend on a visit to the site.
These are starting points, not limits. Bundle reports in any size, mix new and catalog, sponsor monthly, or build something custom. Tell me what you're trying to achieve and I'll shape a package around it.
- Logo and tagline site-wide: the left-margin Sponsors panel on every page and report, the footer, and a featured Sponsors slot
- Early access to the whole package before it goes public, the report and its detection rules and its IOC feed, plus first option to sponsor any upcoming report exclusively
- A welcome announcement post when you join, with extra posts any time at the add-on rate
- One Report sponsorship included free in your first month. You pick the report, and it carries the full Report Sponsor treatment: sole banner, no competing logos, permanent for that report's life
- Four research credits a year, one a quarter. Bring an indicator, a domain or a threat you are unsure about and get a private written answer with the evidence behind it
- Or spend two credits on a written read of the threats your organization should be watching for. I draw on what I see across investigations as well as the broader threat landscape
- Sole Sponsored-by banner at the top of the report, exclusive, no competing logos
- Logo and a link to your site or chosen landing page
- Permanent for the life of the report. It never expires
- You pick which report you sponsor, from anything already published or on the schedule
- I tell you when the case moves. If the infrastructure goes down, the operator resurfaces, or the report gets a substantive update, you hear from me
- A threat brief built from your report, designed and yours to share. Not a copy of it: the key points, what to act on today, and the parts that genuinely stand out
- The report's launch post credits you (LinkedIn, X, and the subscriber email that goes out with every new report). New reports only
- Early access before it goes public, and not just the report. The detection rules and the IOC feed come with it. New reports only
Both work, and I genuinely do not mind which you pick. Take whichever suits your budget cycle. Annual prepay is cheaper because it is worth something to me to plan a year ahead, so the saving is passed straight back to you rather than held as a negotiating chip.
| How you pay | Monthly Sponsor | Report Sponsor |
|---|---|---|
| As you go | $500 per month | $150 per new report, $100 from the catalog (any age, bundled or not) |
| Bundled | Not applicable | 3 new reports $335 (26% off), 6 for $630 (30% off) |
| Annual | $5,000 per year. Two months free, a $1,000 saving, 17% off | $1,170 for 12 new reports across the year, a $630 saving, 35% off |
| First time | First 3 months at $300 per month, or a first full year at $4,400 | First new report $100 |
Two things worth knowing before you choose. An annual commitment locks your rate for the full term, so a published price rise cannot reach you mid term, and the lock holds through renewal. Keep sponsoring without a break and you keep the rate you started at, whatever the list price does later. Monthly stays flexible and can be stopped at the end of any billing month. Either way the placements, the benefits, and the editorial independence below are identical. If you are new and want to go annual straight away, you do not lose the intro rate: the first year is $4,400, which is the same discount the three intro months would have given you, applied to the annual price. The one benefit that does depend on how you pay is the research credits. An annual prepay opens all four on payment. On monthly you earn one after each completed quarter, because each credit is a real piece of work and a quarter of sponsorship is what earns it.
Sponsorship buys placement and brand association, not content control. These rules protect the credibility that makes the publication worth sponsoring in the first place.
- Sponsors do not review reports before publication.
- Sponsors do not influence findings, attribution claims, or recommendations.
- Sponsors can name a subject, whether as a research credit included with a Monthly sponsorship or as a suggestion for what gets published next. What the evidence then says is never negotiable.
- Sponsors are never named as analysts or contributors.
- Sponsored placement is always clearly disclosed. This is not native advertising.
Optional extras to add more reach whenever you want it.
- Newsletter mention, $50. One-off sponsored mention in a subscriber email send.
- Extra LinkedIn or X post, $50. A single dedicated sponsored post about your capability or content.
Name a threat your organization needs intelligence on and I will go and get it, with original investigation, full technical analysis, working detections and a published report at the end, held to exactly the same evidence standards and the same editorial independence as everything else here. This is a new investigation commissioned by you. It is a different thing from picking which existing report you sponsor, and a much deeper one than the research credits included with a Monthly sponsorship.
Priced on scope, because scope varies enormously. A single host or one open directory is a very different piece of work from a fifty-address infrastructure cluster with a malware family sitting behind it. Tell me what you want to know and I will come back with a defined scope and a fixed price before any work starts, so there are no surprises in either direction.
The full sponsorship pricing sheet is available as a printable PDF for circulation within your team or procurement process.
Download Pricing Sheet (PDF)Reach out however works best for you: email, LinkedIn message, async chat, or a call. Happy to walk through the audience and recent reports, or just answer questions. Custom packages and bundles welcome.