Search the directory

NOLA Marketing is a Burlingame, CA agency founded in 1999, specializing in product marketing, thought leadership, and original research for cybersecurity and enterprise tech vendors, with an expanding focus on answer engine optimization (AEO).

CyberTheory is a cybersecurity-only marketing agency combining strategy, content, media buying, and its own podcast network reaching security buyers.

Merritt Group is a long-standing integrated marketing firm with deep benches in cybersecurity PR, thought leadership, and federal markets.

10Fold is a B2B technology PR firm with a substantial cybersecurity practice. Known for launch campaigns and sustained media drumbeat for vendors at every stage.

Bora is a content-first agency built around cybersecurity. They produce the technical articles, research reports, and editorial that security buyers actually read.

Yes& Beacon is a demand and ABM shop focused on B2B tech including cybersecurity. Known for full-funnel programs that actually move pipeline.

Powered by Search is a B2B SaaS growth agency with a strong portfolio of cybersecurity clients. Specializes in SEO and demand generation for enterprise-sales motions.

Montner Tech PR is a Connecticut-based B2B tech PR firm that has specialized in cybersecurity, enterprise IT, and fintech since 1998. Known for long client tenures and practitioner-led account teams.

Touchdown PR is an international award-winning B2B technology PR agency with 110+ staff across the US, Europe, and APAC. Cybersecurity is one of their named specialty verticals, alongside data, AI, and channel/MSP.

Walker Sands is a full-service B2B marketing agency founded in 2001 with named cybersecurity expertise. Ten-time Inc. 5000 honoree with offices in Chicago, Seattle, and Boston.

Nadel Phelan is a strategic communications agency with three decades of experience in B2B technology PR, spanning security, cloud, quantum, and AI. Headquartered in Silicon Valley with international presence.

Aspectus is a global integrated agency specializing in technology, financial services, and energy, with a named cybersecurity practice. Headquartered in London with offices across the US, Europe, Middle East, and Asia.

Ironpaper is a New York-based B2B marketing agency that builds demand generation and ABM programs for cybersecurity solution providers. Known for metrics-driven inbound and sales enablement work.

Launch Marketing is a full-service B2B tech marketing firm founded in 2001, serving 200+ cybersecurity, SaaS, fintech, and healthtech clients. Known for fractional marketing leadership and lead generation programs.

LaunchTech Communications is a cybersecurity-focused PR firm acquired by CyberRisk Alliance in 2023. Three-time Globee Gold winner for Agency of the Year in Cyber and Information Security.

The Rubicon Agency is a London-area cybersecurity marketing firm with 25+ years of experience helping infosec vendors communicate complex solutions to technical and C-suite audiences.

Whyze Labs, also known as CyberWhyze, is a cybersecurity marketing agency that builds demand through expert-led video content on LinkedIn and YouTube. Focus areas include MSSPs, vendors, and security service providers.

First Page Sage is a San Francisco SEO agency specializing in high-ROI organic lead generation for cybersecurity companies. Focus on long-form, technical thought leadership content that ranks and converts.

Directive is a B2B SaaS marketing agency known for its 'Customer Generation' approach, with a dedicated cybersecurity practice focused on paid media, SEO, and revenue operations.

Magnetude Consulting is a Boston-area marketing firm that pioneered a fractional marketing model for B2B cybersecurity companies. Services span strategy, branding, demand gen, and channel enablement.

Eskenzi PR is a Queen's Award-winning cybersecurity PR agency based in London. Known for guiding 25+ cyber companies through IPOs and running the annual IT Security Analyst & CISO Forum.

Bluetext is a Washington, DC cybersecurity marketing agency specializing in branding, website design, and strategic communications for security vendors, federal contractors, and advanced tech companies.

W2 Communications is a marketing and strategic communications agency with 20+ years of deep cybersecurity expertise, serving commercial startups to public companies as well as government and defense clients.

Babel is a B2B tech PR and integrated communications consultancy (a B Corp, employee-owned via an EOT) with a dedicated cybersecurity sector practice serving cyber, telecoms, fintech, and enterprise-tech firms.

ARPR is a tech-focused PR and integrated marketing agency with one of the most established cybersecurity practices in the US Southeast, combining earned media with demand generation to build reputation and pipeline.

ICR Lumina (formerly Lumina Communications) is a Silicon Valley B2B technology PR firm specializing in cybersecurity, enterprise software, and IT infrastructure, now part of ICR following its 2023 acquisition.

BLASTmedia is a B2B SaaS-focused PR agency whose expertise spans cybersecurity, DevOps, cloud infrastructure, and fintech. Consistently among the highest-rated SaaS PR agencies, it now operates as PANBlast, a division of PAN Communications.

YL Ventures is one of the most active seed-stage cybersecurity investors globally. Portfolio includes Orca Security, Hunters, and Twistlock (acquired by Palo Alto Networks).

Ten Eleven Ventures invests across all stages of cybersecurity, from seed to growth. Long-time cyber specialists with portfolio companies across the market.

ForgePoint Capital is one of the largest cybersecurity-dedicated venture firms, investing primarily at Series A and beyond.

Evolution Equity Partners is a global growth investor focused on cybersecurity and data analytics. Backs emerging leaders at Series B and beyond.

NightDragon, founded by former McAfee CEO Dave DeWalt, invests in growth-stage cybersecurity, safety, and privacy companies.

DataTribe is a cybersecurity and data science startup foundry in the DC metro. They co-build and invest in pre-seed and seed companies coming out of the intelligence community.

Paladin Capital Group is a Washington, DC-based multi-stage venture firm with a deep focus on cybersecurity and critical-infrastructure technologies. Since 2008 the firm has built one of the most active cyber practices globally, investing across more than 230 companies with four unicorns including Semperis, SandboxAQ and Bugcrowd.

Team8 is an Israel- and New York-based venture group that both builds companies from scratch (foundry model) and invests through Team8 Capital. Founded in 2014 by former Unit 8200 commander Nadav Zafrir, it has incubated notable cyber companies including Claroty, Illusive, Sygnia and Hypernative.

Glilot Capital Partners is a Herzliya-based early-stage VC firm investing primarily in cybersecurity, AI and enterprise software, with approximately $1B in assets under management across multiple funds.

SYN Ventures is a US-based venture capital firm founded in 2021 by former CISOs, CEOs, CTOs and founders, focused exclusively on cybersecurity, industrial security, national defense, privacy and data governance. The firm manages approximately $900M AUM.

AllegisCyber Capital is a Palo Alto- and San Francisco-based early-stage VC firm investing in cybersecurity and cyber-enabled technologies across North America and Europe. Founded in 1996 by Bob Ackerman, it is one of the longest-standing cyber-dedicated funds.

Cyberstarts is an Israel-based seed-stage venture fund founded in 2018 by Gili Raanan dedicated exclusively to cybersecurity. It has raised more than $720M across five funds. Its portfolio represents roughly half the global private cyber market cap and includes Wiz, Cyera, Island, Fireblocks and Transmit Security.

Insight Partners is a New York-based global software investor with more than $80B in regulatory assets under management. It has built one of the largest cybersecurity portfolios of any generalist firm, spanning growth equity, buyouts and late-stage venture.

Bessemer Venture Partners is a multi-stage venture capital firm founded in 1911 with approximately $20B in assets under management. Its dedicated cybersecurity practice has produced more than 40 investments, nine IPOs and many acquisitions.

Greylock is a Menlo Park-based venture firm founded in 1965, known for leading seed and Series A rounds in consumer and enterprise technology. Partner Asheem Chandna has anchored its cybersecurity practice for two decades.

Jerusalem Venture Partners (JVP) is a Jerusalem- and New York-based venture firm founded in 1993 by Erel Margalit, focused on cybersecurity, AI/SaaS, fintech and climate tech. It has raised close to $2.18B across 10 funds.

Crosspoint Capital Partners is a private equity and growth investment firm focused on cybersecurity, privacy, and infrastructure software. Founded by veteran security operators and investors, the firm spans growth equity and buyouts and notably owns the RSA Conference.

Sorenson Ventures is an early-stage venture firm founded in 2017 by Ken Elefant and Rob Rueckert, investing in B2B software and cybersecurity. The firm backs technical founders building security and infrastructure companies.

Decibel Partners is an early-stage venture firm anchored by Cisco as a partner, investing in developer platforms, cloud and security infrastructure, and AI. The firm focuses on technical founders building category-defining infrastructure.

Notable Capital is a venture firm founded in 2024 as the successor to the U.S. business of GGV Capital, investing across cloud infrastructure, cybersecurity, fintech, and consumer in the US, Israel, Europe, and Latin America.

Ballistic Ventures is a San Mateo-based VC firm founded in 2021 that invests exclusively in early-stage cybersecurity and cyber-adjacent startups, writing initial checks of $1M-$10M.

Rain Capital is a Silicon Valley venture fund launched in 2018 by Dr. Chenxi Wang, focused on disruptive early-stage cybersecurity companies, with an explicit mission to back women and minority-led entrepreneurial teams.

GrackerAI measures how ChatGPT, Perplexity, Claude, Gemini, Copilot, and Google AI Overviews talk about your brand vs. competitors, and shows you what to do about it.

G2 is the largest B2B software marketplace. For cybersecurity vendors, G2 category positioning and intent data drive both pipeline and perception.

6sense is an ABM and account intelligence platform used heavily by cybersecurity vendors with enterprise sales motions.

Demandbase is a full-stack ABM platform combining advertising, intent, and CRM intelligence. Common stack for cyber vendors selling to enterprise.

HubSpot is a full-stack CRM and marketing automation platform, widely used by early to mid-stage cybersecurity companies.

Clearbit provides B2B data enrichment, form shortening, and website visitor identification. A staple for cybersecurity demand gen teams.

Semrush is an all-in-one SEO, PPC, content, and competitive intelligence platform used by marketers globally. Cybersecurity teams use it for keyword research, rank tracking, backlink analysis, and competitor monitoring.

Ahrefs is a leading SEO platform known for its backlink index, keyword research, and site audit capabilities. Cybersecurity marketers use it to plan content, analyze competitors, and earn authoritative backlinks.

Gong captures and analyzes sales calls, emails, and meetings to generate revenue intelligence. Cybersecurity marketing teams use it to hear the voice of the customer and refine messaging, objection handling, and competitive narratives.

Apollo.io is a B2B sales intelligence and engagement platform combining a 275M+ contact database with email sequencing, dialer, and workflow automation. Cyber marketing and SDR teams use it for outbound, enrichment, and ICP research.

ZoomInfo provides the largest B2B contact and company database along with intent, enrichment, and workflow tools. It is a staple for cybersecurity vendors running enterprise outbound and ABM.

Salesloft is a sales engagement and revenue orchestration platform that unifies email, calls, deals, and conversation intelligence. Cybersecurity SDR and AE teams use it to execute multichannel outbound at scale.

Marketo Engage is Adobe's enterprise marketing automation platform, used extensively by mid-market and enterprise cybersecurity vendors for lead nurture, scoring, and campaign orchestration.

Bombora provides cooperative B2B intent data drawn from 5,000+ publishers, indicating which companies are researching specific topics. Cybersecurity marketers use Bombora signals to fuel ABM, advertising, and SDR prioritization.

UserGems tracks job changes, champions, and signals across CRM contacts, so marketing and sales teams can act on warm buyer moments. Cybersecurity vendors use it to re-engage past champions and trigger outbound when key personas change jobs.

Goldcast is a B2B events and video content platform built for marketers running webinars, virtual and hybrid events, and repurposing recordings into clips. It was acquired by Cvent in late 2025.

HockeyStack unifies marketing, sales, and product data to deliver full-lifecycle multi-touch attribution and AI-powered revenue analytics, helping B2B marketers measure the pipeline impact of every channel and campaign.

Common Room is a signal-based GTM platform that aggregates touchpoints from Slack, Discord, LinkedIn, GitHub, and product usage to surface buying intent and convert engaged community members.

Sprout Social is a social media management, publishing, engagement, and listening platform used by tens of thousands of brands. Cyber marketers use it for scheduling, social listening, and competitive analytics.

Writer is an enterprise generative AI platform combining content generation, brand and style governance, and agentic workflows on its own LLMs. It is favored by security-conscious and regulated organizations.

Muck Rack is an all-in-one PR platform for finding and pitching journalists, monitoring coverage, and measuring earned-media impact. Cyber comms teams use it to target relevant security and tech press.

TrustRadius is a B2B technology review and buyer-intent platform built on long-form, authenticated user reviews. Cybersecurity vendors use it to generate reviews, capture intent leads, and inform competitive positioning.

Webflow is a no-code website experience platform that lets marketers visually build, manage, and optimize sites with CMS, localization, and AEO/SEO tooling, popular with B2B and cyber marketing teams.

Clay is a GTM engineering platform that combines data enrichment from 130+ sources with AI agents to help marketing and sales teams research prospects, personalize outreach, and automate workflows at scale.

Profound is a GEO/AEO platform that tracks and improves how brands appear in AI-generated answers across ChatGPT, Perplexity, Gemini, Google AI Overviews, Claude, and other answer engines.

RSA Conference is the flagship global cybersecurity event. 40,000+ attendees, Early Stage Expo, and the definitive place for category launches.

Black Hat USA is the most influential technical security conference. Held alongside DEF CON each August in Las Vegas.

DEF CON is the most influential hacker conference in the world, held each August in Las Vegas alongside Black Hat. It draws tens of thousands of researchers, red teamers, policymakers, and practitioners for villages, contests, and groundbreaking talks.

Infosecurity Europe is the largest cybersecurity event in EMEA, held annually at ExCeL London each June. It attracts 15,000+ security professionals, a packed expo floor, and a strong CISO program.

Gartner's Security & Risk Management Summit is the executive-focused cybersecurity event of the year, held annually in National Harbor, Maryland each June. It attracts CISOs, risk leaders, and analysts for a heavily analyst-driven agenda.

BSides Las Vegas is the original and largest BSides event, held each August in the lead-up to Black Hat and DEF CON. It is a community-driven technical conference known for raw research, approachable culture, and affordable access.

Fal.Con is CrowdStrike's annual user and industry conference, typically held each September in Las Vegas. It draws thousands of customers, partners, and practitioners for product announcements, training, and threat intelligence briefings.

Ignite is Palo Alto Networks' annual global cybersecurity conference, held each fall. It combines customer education, product launches, and an industry-wide security agenda.

it-sa is Europe's largest dedicated IT security trade fair, held annually each October in Nuremberg, Germany. It draws 25,000+ attendees and 800+ exhibitors across the DACH and broader European security ecosystem.

GovWare is the anchor event of Singapore International Cyber Week, held annually each October. It is the leading cybersecurity trade event in Asia Pacific, bringing together government, enterprise, and vendors across the region.

ISC2 Security Congress is the annual education-focused conference from ISC2, the certification body behind CISSP. Held each October, it draws thousands of certified practitioners for CPE-qualifying content.

CYBERUK is the UK National Cyber Security Centre's flagship event, held annually each spring. It draws government, industry, and academia for policy, threat, and capability discussions.

mWISE is the cybersecurity conference produced by Mandiant (now part of Google Cloud), held annually each fall. It is a practitioner and CISO event focused on frontline intelligence, incident response, and defender craft.

Identiverse is the leading annual conference on digital identity and identity security, held each summer. It draws practitioners, vendors, and standards bodies from across the IAM and CIAM ecosystem.

GISEC Global is the Middle East and Africa region's largest cybersecurity exhibition and conference, held annually in Dubai. It brings together government cyber agencies, CISOs, vendors, and ethical hackers from across the region and beyond.

The FIRST Annual Conference is the flagship event of the Forum of Incident Response and Security Teams, bringing together CSIRTs, PSIRTs, and security responders from around the world. It rotates host cities globally each year.

Singapore International Cyber Week is Asia-Pacific's most established cybersecurity event, organized by the Cyber Security Agency of Singapore. It convenes policymakers, CISOs, and vendors, and is co-located with the GovWare exhibition.

SecTor (Security Education Conference Toronto) is Canada's premier cybersecurity conference, combining a technical training/briefings track with a large vendor expo floor as part of Black Hat's global conference portfolio.

The Cyber Risk Summit series brings together cyber insurance carriers, underwriters, claims specialists, legal counsel, and security vendors to discuss breach response, claims trends, and emerging risk.

Dark Reading is a leading trade publication for cybersecurity practitioners. Wide reach across analysts, CISOs, and security engineers.

Krebs on Security is Brian Krebs's investigative cybersecurity blog. Known for breaking major breach stories and deep research into cybercrime.

The Record by Recorded Future is a cybersecurity news publication covering threat intelligence, policy, and major incidents.

SC Media is one of the longest-running cybersecurity trade publications, covering news, analysis, product reviews, and research. It is part of CyberRisk Alliance and widely read by CISOs and security practitioners.

CyberScoop is a cybersecurity news outlet covering the intersection of security, government, and enterprise. It is a top target for vendors with a federal or policy angle.

Bleeping Computer is one of the most-read cybersecurity news sites, with deep coverage of ransomware, vulnerabilities, and breaches. Its reporters break major incident stories regularly.

The Hacker News (THN) is one of the largest cybersecurity news sites globally, with 50M+ monthly readers. It covers threats, vulnerabilities, breaches, and security research.

CSO Online is IDG's flagship cybersecurity publication targeted at CISOs and security leaders. Content spans news, analysis, and strategic how-to guidance.

Help Net Security is a long-running independent cybersecurity news site, publishing daily research, breach coverage, and vendor announcements. It is popular with practitioners for its breadth.

Cybersecurity Dive is a business-focused cybersecurity publication from Industry Dive, covering threats, policy, and the market. Its daily newsletter has strong reach among security leaders.

SecurityWeek is an independent cybersecurity news publication and event producer, covering threats, research, and industry news. It is known for its ICS Cyber Security Conference and Threat Intelligence Summit.

Start with Identity covers identity security, access management, zero trust, passwordless authentication, and compliance for IAM and enterprise security teams. Features breaking news, expert interviews, tool reviews, and a weekly newsletter.

tl;dr sec is the most-read cybersecurity newsletter, curated by Clint Gibler. Each issue summarizes the week in security tools, research, and conference talks for 50,000+ subscribers.

Infosecurity Magazine covers breaches, regulatory change, and enterprise security trends through daily news, features, and opinion columns, tied to the Infosecurity Group which also runs Infosecurity Europe.

The Deepak Gupta newsletter publishes at guptadeepak.com on cybersecurity, identity and access management, LLM and AI security, and B2B SaaS growth, written for security and marketing practitioners scaling companies.

Unsupervised Learning is Daniel Miessler's widely read newsletter and podcast curating the most important stories at the intersection of cybersecurity, AI, national security, technology, and society.

Venture in Security is one of the most widely read Substacks on the business of cybersecurity, covering go-to-market, product, investing, and how the security industry actually works.

Return on Security is a weekly newsletter by Mike Privette covering cybersecurity and privacy funding, M&A, and the economics of the security market.

Detection Engineering Weekly curates the most relevant research, tooling, and techniques for detection engineering, threat detection, and blue-team practitioners.

CloudSecList (The Cloud Security Reading List) is a weekly newsletter by Marco Lancini curating the best cloud-native security news, research, and tooling.

TLDR Information Security is a daily newsletter delivering the most important cybersecurity news, research, and tools in a quick, scannable format to a large practitioner audience.

This Week in Security (~this week in security~) is a long-running weekly newsletter by journalist Zack Whittaker summarizing the most important cybersecurity stories with a reporter's perspective.

Vulnerable U is a weekly newsletter by Matt Johansen blending cybersecurity news and analysis with a focus on the human side of security and personal resilience.

The API Security Newsletter (apisecurity.io) curates the latest API security breaches, vulnerabilities, standards, and best practices for developers and security teams.

BlockThreat (Blockchain Threat Intelligence) is a newsletter by Peter Kacherginsky covering cryptocurrency and Web3 security incidents, exploits, vulnerabilities, and defensive research.

SANS NewsBites is a semiweekly newsletter from the SANS Institute summarizing the most important cybersecurity news, with expert commentary from SANS instructors and fellows.

GRC Engineer is a newsletter by Ayoub Fandi focused on modern, engineering-driven approaches to security governance, risk, and compliance.

Infostealers by Hudson Rock publishes news, research, and reporting on infostealer malware and the credential-theft economy that fuels many modern breaches.

Hive Five by securibee (Pusha B) is a weekly newsletter delivering a curated set of the most useful infosec news, web application security, and bug bounty resources.

This Week in 4n6 is a weekly roundup by Phill Moore covering the latest in digital forensics and incident response (DFIR): research, tools, and blog posts from across the community.

Metacurity is a daily free newsletter curated by veteran technology analyst and author Cynthia Brumfield, who scans thousands of sources to summarize the day's most important infosec developments, with paid tiers offering original reporting and archives.

The Cyber Why is a weekly Substack newsletter by Tyler Shields, a fractional CMO and former VP of Product Marketing at Traceable, covering cybersecurity news, market structure, M&A, and investing for CISOs, practitioners, founders, and investors.

Cybersecurity Marketing Society is a 2,500+ member community for cybersecurity marketing professionals, with chapters, events, and a popular podcast.

ISC2 is a global nonprofit with 600,000+ certified members, best known for the CISSP certification. It runs chapters, education, and Security Congress for cybersecurity professionals worldwide.

ISACA is a global professional association for IT governance, risk, audit, and cybersecurity. It runs certifications including CISM, CISA, and CRISC, and has 180,000+ members worldwide.

The Cloud Security Alliance (CSA) is the global standards organization for cloud security best practices, research, and certification. It produces the Cloud Controls Matrix and the CCSK credential.

OWASP is a global nonprofit community behind the OWASP Top 10 and hundreds of open application security projects. It runs local chapters worldwide and AppSec Global conferences.

Women in CyberSecurity (WiCyS) is a nonprofit community dedicated to women in cybersecurity, with chapters across the US and globally. It runs an annual conference that has become a major industry recruiting and community moment.

InfraGard is a partnership between the FBI and the private sector focused on critical infrastructure protection. It has 70+ chapters across the US and tens of thousands of vetted members.

SANS Institute is the world's largest cybersecurity training and research organization, best known for its hands-on technical courses, GIAC certifications, and the Internet Storm Center. Trains hundreds of thousands of practitioners annually.

GIAC is a cybersecurity certification body founded in 1999, affiliated with SANS Institute. It offers 40+ practitioner-focused certifications across offensive security, defense, incident response, cloud, and leadership, with more than 200,000 credentials issued.

ISSA is an international professional association for cybersecurity practitioners with 10,000+ members across 100+ chapters worldwide. Runs local events, SIGs, the ISSA Journal, and annual International Conference.

IAPP is the world's largest information privacy community, with 80,000+ members across 160+ countries. Best known for CIPP, CIPM, and CIPT certifications and its Global Privacy Summit.

The FIDO Alliance is an open industry association with hundreds of members developing authentication standards (most notably passkeys) to reduce the world's reliance on passwords. Members include Apple, Google, Microsoft, Amazon, and Meta.

The Identity Defined Security Alliance (IDSA) is a vendor-neutral organization of IAM and security leaders defining best practices for identity-first security. Publishes the annual Trends in Securing Digital Identities report.

CREST is an international accreditation and certification body for penetration testing, threat intelligence, incident response, and SOC providers. Widely required for UK and APAC government contracts.

The National Cybersecurity Alliance (NCA) is a US-based nonprofit partnered with CISA to run Cybersecurity Awareness Month, Data Privacy Week, and consumer education programs via StaySafeOnline.org.

RH-ISAC is the threat intelligence sharing community for retail, hospitality, restaurant, gaming, and consumer-facing industries. Members share real-time cyber threat indicators and best practices.

The National Retail Federation is the largest retail trade association globally, with a dedicated cyber risk council and loss prevention programs. NRF's Big Show and PROTECT conferences draw retail security decision-makers.

The Executive Women's Forum (EWF) is the largest member organization for women executives in cybersecurity, information risk, and privacy. Runs the EWF National Conference and a national Fellowship program.

The Internet Society (ISOC) is a global nonprofit founded in 1992 that supports open standards, internet infrastructure, and policy. Houses the IETF, promotes Internet trust projects including MANRS (routing security) and encryption advocacy.

BSides San Francisco is an annual community-driven technical security conference held each April alongside RSA Conference. Known for accessible talks, research releases, and a strong Bay Area practitioner community.

TASK is a Toronto-based cybersecurity community that has run monthly technical meetups since 2003. One of the longest-running practitioner meetups in North America, drawing 300+ attendees per event.

CIPS is Canada's national body representing IT professionals, including those specializing in cybersecurity. Administers the I.S.P. and ITCP professional designations recognized across Canadian government and industry.

Cyversity (formerly the International Consortium of Minority Cybersecurity Professionals) is a nonprofit working toward consistent representation of women, underrepresented minorities, and veterans in cybersecurity.

WISP is a nonprofit advancing women and underrepresented communities in the converging fields of security and privacy through mentorship, education, networking, and scholarships, with free and open membership.

Blacks In Cybersecurity began in 2018 as an event series and meetup group and has grown into year-round conferences and worldwide meetup chapters highlighting the Black community's contributions to cybersecurity.

The Diana Initiative is an annual Las Vegas security conference held during DEF CON week supporting women, non-binary individuals, and underrepresented groups in information security.

Founded in 2022, Latinas in Cyber is a nonprofit community offering networking, education, and resources to elevate Latinas in cybersecurity and grow the next generation of Latina cyber leaders.

Start with Identity is a community-driven, independent nonprofit for IAM practitioners, covering workforce identity, CIAM, privileged access, machine identity, authorization, and emerging identity tech, with no sponsorship or pay-for-placement.

Jennifer 'JJ' Johnson leads global marketing at CrowdStrike, overseeing brand, demand, product marketing and communications for the endpoint and cloud security leader. She joined CrowdStrike as CMO in late 2022.

Kelly Waldher is Chief Marketing Officer at Palo Alto Networks, leading global marketing as the company scales its platformization strategy across network, cloud, and security operations.

Sally Jenkins is Chief Marketing Officer at SentinelOne, leading global marketing for the AI-native endpoint and XDR platform. She joined the company in April 2023.

Raaz Herzberg is CMO and VP Product Strategy at Wiz, where she has helped scale the cloud security company from its earliest days into one of the fastest-growing enterprise SaaS businesses in history, leading into the 2026 Google acquisition.

Sunil Frida is Chief Marketing Officer at Zscaler, appointed in January 2026. He leads global marketing (product marketing, brand, demand generation, corporate communications and GTM execution) as the company scales its Zero Trust and AI security business.

Shannon Duffy is Chief Marketing Officer at Okta, responsible for demand gen, product marketing, brand direction and overall marketing strategy as Okta positions identity as the foundation for securing the AI-driven enterprise.

Melton Littlepage is Chief Marketing Officer at 1Password, appointed in August 2023, leading brand, demand and product marketing as the company expands from a password manager into an extended access management platform.

Dan Larson is Chief Marketing Officer at Arctic Wolf, overseeing corporate marketing, brand, communications, technical marketing, demand generation, enablement, product marketing and marketing technology for the security operations leader.

Rachel Nislick is Chief Marketing Officer at Orca Security, appointed in March 2026. She leads global marketing strategy (brand, demand generation, product marketing and communications) as Orca scales its AI-powered cloud security platform.

Liz Kokoska joined Huntress as Chief Marketing Officer in May 2025, leading scalable revenue marketing programs and demand generation as the company extends its managed security platform further into the mid-market and SMB segments.

John Maddison is EVP of Products and Chief Marketing Officer at Fortinet, where he has led marketing and product strategy since 2012 for one of the largest network security companies in the world.

Brett Theiss is Chief Marketing Officer at Check Point Software, appointed in September 2025 to lead global brand and growth strategy for the long-standing network and cloud security leader.

Meg O'Leary is Chief Marketing Officer at Tenable, leading global marketing for the exposure management leader, brought in for her cybersecurity brand-building and communications track record.

Cynthia Stanton is Chief Marketing Officer at Rapid7, leading brand and go-to-market strategy with 16+ years across the global security services industry spanning sales, operations, marketing, and product.

Jeffrey Samuels is Chief Marketing Officer at Cloudflare, appointed in December 2025, leading marketing for the connectivity and security cloud as it continues its enterprise growth.

Cindy Zhou is Chief Marketing Officer at KnowBe4, overseeing global marketing, PR, and sales development for the security awareness training and human risk management leader.

Jaime Romero is Chief Marketing Officer at Cato Networks, appointed in early 2026 to lead global marketing through the SASE leader's next phase of growth.

Scott Hogrefe is Chief Marketing Officer at Netskope, leading global marketing for the SASE and cloud security platform after 11+ years building the company's brand and demand functions.

Chris Kozup is Chief Marketing Officer at Darktrace, leading global marketing and sales development for the AI cybersecurity company since mid-2023.

Shanta Kohli is Chief Marketing Officer at Sysdig, promoted in December 2024 to unify global marketing for the cloud and container security company.

Scott Holden is Chief Marketing Officer at Vanta, appointed in July 2025, overseeing brand, product marketing, demand generation, growth, communications, and field marketing for the trust management leader.

Arun Singh is Chief Marketing Officer at Drata, appointed in 2025 to lead product marketing and go-to-market strategy for the trust and compliance automation platform.

Upa Campbell is Chief Marketing Officer at Claroty, leading global marketing for the cyber-physical systems and OT security company.

Simon Mouyal is Chief Marketing Officer at CyberArk, overseeing global marketing strategy to extend the company's identity security market leadership.

Michael Cremen is President and Chief Revenue Officer at SentinelOne, leading global go-to-market including sales, channels and customer success as the company drives toward $1B+ in revenue.

Tom Nielsen is Chief Revenue Officer at Snyk, leading the developer security company's worldwide sales and GTM organization.

Kevin Moore is Chief Revenue Officer at Abnormal AI, responsible for worldwide revenue generation across sales and customer success as the email and behavioral security company continues to expand its platform.

Jesse Green was promoted to Chief Revenue Officer at Rubrik on February 4, 2026, succeeding Brian McCarthy. He leads Rubrik's global revenue organization across sales, channels and customer growth.

Dino DiMarino became Chief Revenue Officer at Tenable in March 2026, overseeing global sales, partner ecosystems and revenue operations as the company scales to meet enterprise demand for exposure management and AI security.

Gary Olson is Chief Revenue Officer at Sysdig, appointed in March 2025. He leads the cloud security company's global revenue organization as it scales enterprise adoption of Sysdig's runtime security and AI SecOps products.

Mike Rich is Chief Revenue Officer and President of Global Sales at Zscaler, owning worldwide revenue and sales as the zero-trust leader scales past $3.5B ARR.

Mike Pyle is Chief Revenue Officer at Cribl, leading global sales as the data and observability-security company scaled past $200M ARR.

Will May is Chief Revenue Officer at Arctic Wolf, leading the global go-to-market organization across sales and customer-facing teams for the security operations leader.

Raphaël Bousquet is Chief Revenue Officer and EVP of Worldwide Sales at Netskope, overseeing global sales and channel strategy for the now-public SASE leader.

Hein Hellemons is President and Chief Revenue Officer at KnowBe4, driving global sales strategy and market expansion for the human-risk and security-awareness leader.

Stevie Case is Chief Revenue Officer at Vanta, the trust-management and compliance-automation platform, leading global revenue for one of the fastest-growing companies in security.

Brent Thurrell is Chief Revenue Officer at BeyondTrust, responsible for the identity-security firm's global go-to-market strategy, revenue growth, sales enablement, and partner program.

Jon Addison is Chief Revenue Officer at Okta, responsible for driving the identity leader's growth worldwide and scaling its go-to-market operations.

Chelsea Strong was named Chief Revenue Officer of HiddenLayer in July 2025, leading global sales strategy, customer success, and GTM execution as the company scales its AI/ML security platform.

Russell Rosa became CRO of N-able in July 2026, taking full responsibility for global sales, channel/partner ecosystem, support, and sales operations at the publicly traded MSP software vendor.

Dave Woolwine joined Arkose Labs as CRO in October 2025, leading global revenue initiatives, channel strategy, and sales organization growth as a member of the executive leadership team.

Deepak Gupta is a repeat cybersecurity founder: he built identity platform LoginRadius, which scaled to serve 1B+ end users, and now runs GrackerAI, a Generative Engine Optimization platform for B2B cybersecurity vendors.

Nikesh Arora has served as Chairman and CEO of Palo Alto Networks since June 2018, driving its transformation into a platform-first security leader with three major pillars: network security, cloud security (Prisma) and AI-driven security operations (Cortex).

Jay Chaudhry is the founder, Chairman and CEO of Zscaler, a publicly traded zero-trust cloud security company he founded in 2007. A serial entrepreneur, he previously founded and exited SecureIT, AirDefense, CipherTrust and CoreHarbor.

George Kurtz is co-founder, President and CEO of CrowdStrike, the cloud-native endpoint protection and XDR company he co-founded in 2012. CrowdStrike went public on Nasdaq in 2019 (CRWD) and is one of the world's largest pure-play cybersecurity companies.

Assaf Rappaport is co-founder and CEO of Wiz, the cloud security platform he founded in 2020. Wiz became the fastest SaaS company to reach $100M, $500M and $1B in ARR. In March 2026, Google completed its $32B all-cash acquisition of Wiz.

Sumit Dhawan has been CEO of Proofpoint since November 2023, leading a global workforce of 4,500+ employees focused on email security, insider threat, data loss prevention and compliance. Proofpoint is owned by Thoma Bravo after a $12.3B take-private in 2021.

Kevin Mandia is the founder of Mandiant, former CEO of FireEye/Mandiant, and currently a General Partner at Ballistic Ventures. In 2026 he is also CEO of Armadin, an AI-focused cybersecurity company that launched with $189.9M in seed and Series A funding.

Yevgeny Dibrov is co-founder and long-time CEO of Armis, the cyber exposure management and unmanaged/IoT device security company he co-founded in 2015. Armis was acquired by Insight Partners in 2020 and subsequently by ServiceNow in 2026.

Shlomo Kramer is co-founder and CEO of Cato Networks, the SASE platform he founded in 2015. Cato surpassed $350M in ARR in 2025. Kramer previously co-founded Check Point Software in 1993 and Imperva in 2002, giving him a rare track record of building three multi-billion-dollar cybersecurity companies.

Kyle Hanslovan is co-founder and CEO of Huntress, the managed security platform he co-founded in 2015. Huntress protects more than 200,000 businesses, 4 million endpoints and 10 million identities. Hanslovan is a former NSA and Air Force offensive cyber operator.

Ken Xie is founder, Chairman and CEO of Fortinet, the publicly traded network security company he co-founded in 2000. Fortinet is one of the largest cybersecurity companies globally by revenue. Xie previously founded NetScreen (acquired by Juniper for $4B) and SIS.

Tomer Weingarten co-founded SentinelOne in 2013 and has led it as CEO since inception, building the AI-native endpoint and XDR vendor into a multibillion-dollar public company (NYSE: S).

Sanjay Beri co-founded Netskope in 2012 and has been CEO since inception, building it into a SASE/SSE leader that is now public and serves a large share of the Fortune 100.

Matthew Prince co-founded Cloudflare in 2009 and has been CEO since inception, taking it public in 2019 and building it into a leading internet security and infrastructure company.

Evan Reiser co-founded Abnormal Security (now Abnormal AI) in 2018 and serves as CEO, building it into a multibillion-dollar AI-native email and human-behavior security company trusted by thousands of organizations.

Mike Fey co-founded Island and serves as CEO, pioneering the enterprise browser category and scaling the company to a multibillion-dollar valuation in roughly five years.

Christina Cacioppo co-founded Vanta in 2018 and is CEO, scaling the trust-management and compliance-automation platform to thousands of customers and a multibillion-dollar valuation.

Mickey Bresman co-founded Semperis in 2014 and serves as CEO, building it into a leader in identity protection and Active Directory / Entra ID security and recovery.

Adam Markowitz co-founded Drata in 2021 and is CEO, growing the trust-management and compliance-automation platform to thousands of global customers as one of the fastest-growing software companies.

Phil Venables is one of the most respected security executives in the industry. After four years as the first CISO of Google Cloud, he now serves as a Partner at Ballistic Ventures, a Senior Advisor at Warburg Pincus, and a part-time strategic security advisor to Google Cloud.

Geoff Belknap is Corporate Vice President and Deputy CISO at Microsoft, leading security for core infrastructure, corporate applications, and M&A integration under the company's Secure Future Initiative.

Jason Chan built and led the Netflix information security team for over a decade before retiring from full-time operating roles in 2021. He is now an Operating Advisor at Bessemer Venture Partners and advises a range of cybersecurity startups.

Wendy Nather is one of the most widely read voices in CISO thought leadership. She is Senior Research Initiatives Director at 1Password and a Senior Fellow at the Atlantic Council's Cyber Statecraft Initiative.

Bobby Ford is Chief Strategy & Experience Officer at Doppel, helping define the emerging social engineering defense category. Previously he was Senior Vice President and Global CISO at Hewlett Packard Enterprise.

Dr. Chenxi Wang is the founder and managing general partner of Rain Capital, a cybersecurity-focused venture fund. She is a public board director, long-time security technologist, and prolific industry voice.

David Shipley is CEO and co-founder of Beauceron Security, a Canadian-headquartered cyber awareness and human risk platform used by more than 1,300 organizations and over one million users. He also serves as Beauceron's Field CSO.

Dan Lohrmann is Field CISO for Public Sector at Presidio, advising state and local government leaders across the U.S. on cybersecurity strategy, identity and AI-driven threats.

Helen Patton is a Cybersecurity Executive Advisor at Cisco and a prolific author and speaker, known for her work on security leadership, risk, and the cybersecurity workforce.

George Finney is Chief Security Officer at Southern Methodist University and CEO of Well Aware Security, and an award-winning author on zero trust and the human side of security.

Andy Ellis is Advisory CISO at Orca Security and Operating Partner at YL Ventures, a CSO Hall of Fame inductee and author known for his writing and speaking on security leadership.

Caleb Sima chairs the Cloud Security Alliance's AI Safety Initiative and is building WhiteRabbit, with 25+ years in cybersecurity and a prominent voice on AI security.

Jadee Hanson is Chief Information Security Officer at Vanta, overseeing security engineering, operations, IT, and GRC, and is a frequent speaker and media commentator on security leadership.

Emily Heath is a General Partner at venture firm Cyberstarts, advising early-stage security founders, and a former enterprise CISO and frequent keynote speaker.

Mike Hanley is VP and Chief Information Security Officer at General Motors, leading enterprise security for the automaker. He was previously a public voice on developer and supply-chain security as GitHub's CSO.

Diana Kelley has held CISO/security-executive roles at Noma Security, Protect AI, Microsoft (Cybersecurity CTO), IBM Security, and Symantec, and is co-author of the book Practical Cybersecurity Architecture.

Jamil Farshchi joined Equifax as CISO in the aftermath of its 2017 data breach and has been unusually public about the recovery process, frequently discussing transparency and post-breach culture change in national media.

Rachel Tobac is a hacker, social engineer, and CEO of SocialProof Security. One of cybersecurity's most visible voices with a large following on LinkedIn and X.

Troy Hunt is the creator of Have I Been Pwned and one of the most cited voices in consumer cybersecurity and breach reporting.

Mikko Hyppönen is one of cybersecurity's most recognizable faces globally, with decades of malware research and a reputation as a world-class keynote speaker.

Bruce Schneier is a cryptographer, computer security professional and best-selling author who has been shaping public thinking on security, privacy and power for three decades. His blog Schneier on Security and newsletter Crypto-Gram reach more than 250,000 readers.

Brian Krebs is an independent investigative reporter and author of KrebsOnSecurity.com, the award-winning cybersecurity news site he founded in 2009 after leaving The Washington Post.

Graham Cluley is an award-winning cybersecurity veteran, blogger and keynote speaker. He co-hosts the multi-award-winning 'Smashing Security' podcast and the newer 'The AI Fix' podcast, which has surpassed 10 million downloads.

Daniel Miessler is the founder of Unsupervised Learning, a newsletter, podcast and community focused on the intersection of cybersecurity, AI, national security, technology and culture.

Lesley Carhart (@hacks4pancakes) is a widely followed incident response leader focused on industrial control systems and OT security. They are Director of Incident Response for North America at Dragos.

Dave Kennedy is the founder of TrustedSec, an information security consulting firm, and Binary Defense, a managed detection and response provider. He is a former CSO of Diebold and has testified before U.S. Congress on cyber threats.

Tanya Janca, aka SheHacksPurple, is a best-selling author and application security educator who has trained thousands of developers and security professionals on secure coding and application security.

Katie Moussouris is founder and CEO of Luta Security, a consultancy focused on vulnerability coordination, bug bounty program design and security maturity.

Jake Williams (MalwareJake) is a well-known offensive security practitioner and educator. He is VP of R&D at Hunter Strategy, an IANS Faculty Member, and an independent security consultant focused on AI/ML and cybersecurity.

John Strand is founder of Black Hills Information Security and Active Countermeasures. He is a senior SANS instructor and widely regarded mentor in the offensive and defensive security communities.

Eva Galperin is Director of Cybersecurity at the Electronic Frontier Foundation, focusing on privacy and security for vulnerable populations, including journalists, activists and survivors of domestic abuse.

Deepak Gupta is a cybersecurity author and researcher who publishes at guptadeepak.com on identity, AI/LLM security, and Generative Engine Optimization (GEO), holds 5 patents spanning DDoS defense, IoT authentication, and searchable encryption, and has bylines in Forbes, Entrepreneur, VentureBeat, and Fast Company.

Kim Zetter is an award-winning independent investigative journalist who has covered cybersecurity and national security since 1999. She publishes the Zero Day newsletter, focused on espionage, surveillance and the intersection of cyber and national security.

John Hammond is a security researcher at Huntress and one of the most-watched cybersecurity educators on YouTube, with a large audience for his live malware analysis, exploitation, and CTF walkthroughs.

Eugene Kaspersky is the co-founder and CEO of Kaspersky, one of the world's best-known consumer and enterprise security brands, and a widely followed voice on global malware research.

Jason Haddix is the CEO of Arcanum Information Security and one of the most influential figures in bug bounty and offensive security, whose recon and web-hacking methodology shaped a generation of bug hunters.

Jeff Moss, known as The Dark Tangent, founded DEF CON and Black Hat, the two most influential hacker and security conferences in the world, and is a long-standing voice in hacker culture and security policy.

Alex Stamos is CISO at SentinelOne and a lecturer at Stanford. The former CSO of Facebook and Yahoo is a leading public voice on platform security, disinformation, and secure-by-design.

Nicole Perlroth is a bestselling author and former lead cybersecurity reporter at The New York Times, known for her reporting on the global zero-day arms race. She is now a venture partner and startup advisor.

Robert M. Lee is co-founder and CEO of Dragos, the dominant pure-play in industrial control systems and OT cybersecurity, and one of the most cited voices on protecting critical infrastructure.

Katie Nickels is Director of Intelligence at Red Canary and a SANS Certified Instructor, and one of the most accessible educators in cyber threat intelligence and MITRE ATT&CK-aligned detection.

Heath Adams, known as The Cyber Mentor, is one of the most popular ethical-hacking educators online, who founded and scaled TCM Security and created the practical PNPT certification.

Dr. Anton Chuvakin is a security advisor in Google Cloud's Office of the CISO and a longtime authority on SIEM, logging, and security operations, widely read for his analysis on modernizing the SOC.

Kelly Shortridge is the author of 'Security Chaos Engineering' and a leading thinker on applying resilience engineering and behavioral economics to security. She is Chief Product Officer at Fastly.

Keren Elazari is an internationally renowned security researcher and speaker whose TED talk on hackers has been viewed by millions. She founded BSidesTLV and the Leading Cyber Ladies network.

Theresa Payton is the founder and CEO of cybersecurity firm Fortalice Solutions and the first female White House CIO. She is a frequent media commentator and author on cyber threats, privacy, and disinformation.

Dr. Jessica Barker MBE is a leading authority on the human side of cybersecurity (culture, awareness, and behavior) and co-leads Cygenta. She is the bestselling author of 'Confident Cyber Security' and 'Hacked'.

Javvad Malik is a security awareness advocate at KnowBe4 known for entertaining, accessible cybersecurity content across video, blog, and stage, and a longtime industry storyteller.

Dr. Magda Chelly is the co-founder and Managing Director of Responsible Cyber, a TEDx speaker, author, and one of APAC's most prominent advocates for diversity in cybersecurity.

Rinki Sethi is a veteran security leader and CSO at Upwind Security who has run security programs at Twitter, BILL, Rubrik, Walmart, IBM, and Palo Alto Networks, and is a sought-after board director and early-stage investor.

Raj Samani is SVP and Chief Scientist at Rapid7 and a 25-year industry veteran who leads threat research, producing widely cited threat-landscape and ransomware reports.

Ed Skoudis is President of the SANS Technology Institute and the founder of the SANS Penetration Testing curriculum, NetWars, and the Holiday Hack Challenge, having trained tens of thousands of professionals.

Window Snyder is the founder and CEO of device-security startup Thistle Technologies and a veteran security leader who held senior roles at Apple, Square, Fastly, Intel, and Mozilla.

Sivan Tehila is the founder and CEO of Onyxia Cyber, an AI-driven cybersecurity performance-management platform for CISOs, and a cybersecurity professor and women-in-cyber advocate.

Shira Rubinoff is a cybersecurity executive, analyst, and author of 'Cyber Minds', widely cited as one of the top female cybersecurity social-media influencers and a frequent keynote speaker.

Richard Stiennon is the founder and chief research analyst of IT-Harvest, which tracks thousands of cybersecurity vendors, and the author of ten books on the security industry.

Robert Herjavec founded Herjavec Group (now Cyderes), one of the world's largest managed security services providers, and is known to mainstream audiences as a longtime investor on ABC's Shark Tank.

Ross Haleliuk is the author of Venture in Security, one of the most widely read Substacks in cybersecurity, and of the bestselling book Cyber for Builders. Advises cybersecurity founders on go-to-market, product, and growth.

Gianna Whitver is co-founder and CEO of the Cybersecurity Marketing Society and co-host of the Breaking Through in Cybersecurity Marketing podcast. Advises cybersecurity and tech companies on marketing and GTM.

Maria Velasquez is co-founder and Chief Growth Officer of the Cybersecurity Marketing Society, with 10+ years of in-house cybersecurity marketing experience. Currently Director of Growth Marketing at Brinqa.

Dani Woolf is CEO and host of Audience 1st, a cybersecurity buyer research and podcasting firm, and co-founder of CyberSynapse. 15+ years in B2B tech demand generation, with a focus on cybersecurity since 2018.

Casie Abello is a fractional CMO for cybersecurity companies with prior senior marketing roles at SecurityScorecard, Securonix, Absolute Software, Dtex, and FireEye. Runs CyberSec CMO.

Mark Gabrielli is a fractional CMO and COO with 15+ years of marketing leadership experience across SaaS, health tech, logistics, and cybersecurity. Focuses on $2M-$30M ARR cyber vendors.

Jane Frankland MBE is a 30+ year cybersecurity veteran, founder of KnewStart, and a globally ranked LinkedIn cyber influencer. Advises brands on positioning, thought leadership, and executive visibility.

Ron Eddings is a cybersecurity practitioner turned media entrepreneur. Co-founded Hacker Valley Media, which produces podcasts and video shows for the cybersecurity industry.

Andrew Monaghan is an independent sales effectiveness consultant with 27 years in cybersecurity sales, running Unstoppable.do to help cyber startups win larger deals. He hosts the Cybersecurity Go-To-Market Podcast.

Allan Alford is a former five-time CISO who runs a consulting practice offering fractional CISO and strategic cyber advisory services, and is well known as a cyber content creator and podcast host.

Alan Shimel is a media entrepreneur who founded Techstrong Group (formerly MediaOps), publisher of Security Boulevard and DevOps.com, and is a widely cited cyber and DevSecOps commentator.

Carolyn Crandall is a veteran cybersecurity CMO now operating as a fractional CMO and GTM advisor through Marticulate, specializing in category creation, positioning, and analyst relations.

George Kamide is a cybersecurity brand and communications strategist and co-host of the Bare Knuckles and Brass Tacks podcast, focused on repairing the divide between security vendors and buyers.

Scott Taschler is a fractional product marketing consultant with 25+ years in cyber technical sales and marketing, formerly at CrowdStrike and McAfee, helping security vendors with messaging and PMM strategy.

Franklyn Jones is a fractional CMO for early-stage cybersecurity and SaaS companies, known for building category-defining GTM strategies and offering part-time marketing leadership on demand.

Daniel Kelley pivoted from a well-publicized hacking conviction into security research and content marketing, founding Cyberou to produce technical, practitioner-authored content for security brands.

Melanie Ensign built and led security/privacy communications programs at Facebook, Uber, and AT&T before founding Discernible, a consultancy that helps security and privacy teams communicate credibly with press, regulators, and the public.

Shaw has run Everclear as a growth-marketing shop for 20+ years, with particular depth in early-stage cybersecurity go-to-market work, including a multi-year mentoring stint at the MACH37 Cyber Accelerator.

The Verizon DBIR analyzes thousands of confirmed breaches and security incidents contributed by law enforcement, forensic firms, and cyber insurers to map how breaches happen and who is behind them. Published annually, it is the most widely cited breach benchmark in the industry.

IBM's Cost of a Data Breach Report surveys hundreds of breached organizations across more than a dozen countries to quantify average breach cost, time to identify and contain, and cost factors such as AI governance and shadow AI. Research is conducted independently by the Ponemon Institute.

Mandiant's M-Trends draws on hundreds of thousands of hours of incident-response engagements to report on dwell time, initial infection vectors, and threat-actor tactics. A 17+ year staple for defenders, now published under Google Cloud.

The CrowdStrike Global Threat Report summarizes the Counter Adversary Operations team's analysis of eCrime and nation-state activity, popularizing metrics such as 'breakout time' and named adversary groups. Published annually and widely referenced by SOC and CISO audiences.

The ENISA Threat Landscape identifies prime threats, threat actors, and attack techniques across the EU, with mitigation guidance for technical and policy audiences. Published annually, it is the authoritative European public-sector threat reference.

Red Canary's Threat Detection Report ranks the most prevalent threats and techniques observed across customer environments via human-led investigation, mapped to MITRE ATT&CK. A practitioner-favored, detection-engineering-oriented benchmark published annually.

The ISC2 Cybersecurity Workforce Study surveys 14,000+ practitioners worldwide to size the workforce, quantify the talent and skills shortage, and gauge job sentiment and budget pressures. Published annually, it is the most-cited source on the cybersecurity skills gap.

Coalition's Cyber Claims Report analyzes actual claims across more than 100,000 policyholders to report on ransom demands, business email compromise and funds-transfer-fraud frequency, claims severity by company size, and recovery outcomes.

The Picus Red Report analyzes over a million malware samples annually, mapping millions of observed behaviors to MITRE ATT&CK to rank the techniques attackers use most, such as process injection and defense evasion. A focused, actionable prioritization reference for defenders.

The Chainalysis Crypto Crime Report uses blockchain analytics to quantify funds flowing to illicit and sanctioned crypto addresses, scams, ransomware, and stolen funds. Published annually, it is the standard reference for crypto-crime figures.

The Microsoft Digital Defense Report synthesizes insights from the trillions of daily security signals Microsoft processes to map nation-state activity, cybercrime, and emerging AI-era threats. Published annually, it is one of the broadest threat assessments available.

The IBM X-Force Threat Intelligence Index reports on the most common attack vectors, top actions on objective, and industry targeting based on IBM's incident response and threat intelligence data. Published annually, it is a key benchmark for how attackers gain and use access.

The Unit 42 Global Incident Response Report analyzes hundreds of incident response cases to surface trends in ransomware, extortion, initial access, and attacker dwell time. It is a practitioner-focused view grounded in real engagements.

The Fortinet Global Threat Landscape Report from FortiGuard Labs analyzes exploit, malware, and botnet activity across Fortinet's global sensor network to highlight the most active threats and attacker behaviors.

Sophos's State of Ransomware surveys thousands of IT and security leaders worldwide to quantify ransomware frequency, root causes, ransom payments, and recovery costs. Published annually, it is one of the most-cited ransomware benchmarks.

The Verizon Mobile Security Index assesses the state of mobile and IoT security, surveying organizations on threats, incidents, and the maturity of their mobile defenses. It is a leading reference for mobile-specific risk.

Sonatype's State of the Software Supply Chain analyzes open-source consumption, malicious package trends, and dependency risk across millions of projects. Published annually, it is the leading benchmark for software supply chain security.

Veracode's State of Software Security analyzes scan data from hundreds of thousands of applications to report on flaw prevalence, security debt, and remediation rates. It is one of the longest-running data-driven AppSec reports.

Orca Security's State of Cloud Security Report analyzes real cloud environments to surface the most common misconfigurations, exposures, and risky attack paths across AWS, Azure, and Google Cloud.

The Google Cloud Threat Horizons Report delivers cloud-focused threat intelligence and forecasts from Google's security teams, covering credential abuse, misconfigurations, and emerging cloud attack trends.

Europol's IOCTA is the European Union's flagship law-enforcement assessment of the cybercrime landscape, covering ransomware, online fraud, child sexual exploitation, and the criminal ecosystem enabling them.

The Imperva Bad Bot Report (by Thales) analyzes global web traffic to quantify the share of traffic driven by automated bots, including credential stuffing, scraping, and account takeover. It is the leading benchmark on bot activity.

State of the Phish is Proofpoint's annual report analyzing real-world phishing simulation data alongside global end-user and security-professional survey findings, a widely cited benchmark for security-awareness content.

The Thales Data Threat Report is an annual research study examining how enterprises approach data security, encryption, cloud risk, and compliance, based on a large-scale survey fielded by S&P Global Market Intelligence's 451 Research.

Allie Mellen is a Principal Analyst at Forrester covering security operations and the use of automation, ML, and AI in detection-and-response tooling. She advises Fortune 500 CISOs and security teams and is a frequent industry and press commentator.

Katell Thielemann is a Distinguished VP Analyst at Gartner focused on risk and security of cyber-physical systems. She is widely credited with reviving and popularizing the "cyber-physical systems" (CPS) terminology industry-wide starting in 2022.

Frank Dickson leads IDC's Security & Trust research group, guiding clients on ransomware defense and security architectures. He joined IDC with 20 years of industry-analyst experience across security, mobile, telecom, and computing.

Garrett Bekker is a Principal Research Analyst leading identity and access management coverage at S&P Global Market Intelligence (451 Research). He joined 451 Research in 2014, which S&P Global acquired in 2019.

Run by Cybersecurity Insiders, this long-running, community-driven awards program recognizes vendors, products, and professionals across 100+ cybersecurity categories, with a public "Community Choice" vote alongside judged tracks.

The SC Awards from SC Media/CyberRisk Alliance recognize vendors, solutions, and security leaders, with winners revealed each year at RSA Conference. Now in its 29th year as of 2026.

The Globee Awards for Cybersecurity is one of eleven award programs run by Globee Awards, a San Jose-based awards company founded in 2003, drawing entrants from 100+ countries for merit-based judged evaluation.

Cyber Defense Magazine's Global InfoSec Awards recognize infosec vendors and executives, announced annually during RSA Conference and promoted via CDM's always-on Cyber Defense TV coverage. The program has run for over a decade.

Risky Business, hosted by Patrick Gray, is one of the most influential cybersecurity podcasts and newsletters. Its weekly news and interview format is a must-listen for many CISOs and senior practitioners.

Darknet Diaries is an acclaimed independent narrative podcast by Jack Rhysider covering hackers, breaches, hacktivism, and cybercrime. Launched in 2017, its deeply produced storytelling episodes reach millions of listeners.

Smashing Security is a multi-award-winning weekly podcast by security veteran Graham Cluley and co-hosts, delivering cybercrime and privacy news with humor and expert guests. It has surpassed 10 million downloads.

Malicious Life, hosted by Ran Levi and produced by Cybereason, tells the histories and human stories behind cybercrime, hacking culture, and major cyber attacks, reaching hundreds of thousands of monthly listeners.

Click Here is a podcast hosted by veteran journalist Dina Temple-Raston for Recorded Future News, going behind the scenes of major cyber and intelligence stories. It is distributed to public radio via PRX.

CyberWire Daily, hosted by Dave Bittner and produced by N2K Networks, delivers weekday cyber news summaries plus interviews with industry, academic, and research experts. It anchors N2K's broad cyber podcast network.

CISO Series, founded by tech journalist David Spark, is a media network publishing 10+ episodes weekly across shows like the CISO Series Podcast, Defense in Depth, Cyber Security Headlines, and Super Cyber Friday.

Security Weekly is a multi-show podcast network covering hacking, application security, business security, and security news, hosted by working practitioners rather than journalists.

CyberSecJobs.com is a niche job board dedicated to cybersecurity and cyber-cleared roles, operated by veteran-owned ClearedJobs.Net. It combines online job search/alerts with in-person cleared job fairs for direct-hire employers.

CyberSN is a cybersecurity-specific talent-matching and workforce-intelligence platform founded in 2014 by Deidre Diamond, combining a jobs marketplace with staffing/recruiting services built entirely around a cybersecurity skills taxonomy.

CyberSecurityJobsite.com is a UK-focused, dedicated cybersecurity job board, part of SATOS Media's niche job-board portfolio, covering permanent and contract roles across information security, information assurance, and cyber security.