🤝
Make a deal with Stephen Shaffer
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
16
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🎁 Free analysisfor Stephen Shaffer
Known for
3 views
#EPSS gives us a lens into global exploit pressure.
But to further understand our vulnerability risk posture, we need to adjust that pressure through the lens of our own controls — and their measured effectiveness.
In my latest blog, I show you how to take EPSS asset-level exploit likelihoods (EPSSg) and update them with #Bayesian inference to reflect control effectiveness.
It’s a simple but power
2 views
So, you want to prioritize vulnerabilities based on EPSS.
Where do you begin?
It's human to try to make sense of things, including EPSS, through categorization, labeling, or binning.
EPSS should never be used in a vacuum, but depending on your organization's size, remediation capacity, and budget, you may be looking for guidance on how to put it into practice.
I offer a variety of perspectives he
1 views
‼️ On Monday, March 17th 2025, EPSS v4 will be released and replace the current version (v3).
❓ What does this mean?
The model is being updated and expanded to include more data sources and is more accurate than v3. The Coverage/Efficiency Curve (Precision/Recall) indicates better performance at every threshold and therefore you get better risk management at all risk appetites.
➡️ Do I have to do
📊 Post engagement
4
Avg engagement / post
25%
Engagement vs followers
Feb 2023
On Mastodon since
🔥 Top post: RE: https://infosec.exchange/@adulau/117076198484622585 Couldn’t · 11 likes + reposts
📊 Activity & format
Posting cadence
0.05 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly images
Recent: 3 text · 7 image · 0 video.
Follower / following
0.1×
Follows 168 back. A more reciprocal / networked account.
Recent posts
View on Mastodon ↗
#EPSS gives us a lens into global exploit pressure.
But to further understand our vulnerability risk posture, we need to adjust that pressure through the lens of our own controls — and their measured effectiveness.
In my latest blog, I sho…
‼️ On Monday, March 17th 2025, EPSS v4 will be released and replace the current version (v3).
❓ What does this mean?
The model is being updated and expanded to include more data sources and is more accurate than v3. The Coverage/Efficiency…
Happy to announce I’ll be speaking #VulnCon25 next month. I’ll be chatting about Asset EPSSg, which is a concept that orients you to the exploitation exposure risk at the asset level, rather than the CVE level. More info here: https://step…
How can we best operationalize EPSS in our environment by utilizing its mathematical properties?
Been working on this one on and off, but finally got it over the finish line.
#epss #infosec #cve #vulnerability #cybersecurity
https://stephe…
I just joined an #ottoneu league by taking over a roster and immediately traded Judge away. Don’t know if that’s good or bad, but time will tell.
Patrick Garrity coming in hot with a Tecmo Super Bowl-themed data viz showcasing the vulnerabilities added to the CISA KEV during the 2023-2024 NFL Season.
Patrick Knows Vulns!
https://www.linkedin.com/posts/patrickmgarrity_cybersecurity-…
As a follow-up to my blog post, I'm sharing an amazing slide from Chris Madden's Security BSides Dublin talk that articulates some considerations to ponder when analyzing what thresholds to use for EPSS scores.
🌶 🌶 Of course, the real ans…
So, you want to prioritize vulnerabilities based on EPSS.
Where do you begin?
It's human to try to make sense of things, including EPSS, through categorization, labeling, or binning.
EPSS should never be used in a vacuum, but depending on…
So important to balance technical debt management with new features, O&M, and internal process enhancements. If you’re struggling with technical debt, start dedicating entire sprints to it if you can.
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
On Mastodon since
Feb 2023
An established account with real history on the platform.
💡 Facts
🗓️Joined Mastodon in 2023 — 3 years ago.
👁️Averages 4 views per post.
📤Posts about 0.1× per week.
🕵️ Fake follower check
Estimated76/100
Good
Credibility score
97%
Real
Real audience
Low
Fake-follower risk
Medium
Data confidence
- Est. 97% real, active audience · Low fake-follower risk.
- Strong engagement (~0.3× of followers engage each post) — an active, real audience.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Engineering risk model-informed decisions
#infosec #risk #elm
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →
Mastodon
＋
ThreatNoir
@threatnoir@infosec.exchange
16
Followers
Mastodon
＋
@PeteDaGuru
@petedaguru@universeodon.com
16
Followers
Mastodon
＋
Niclas ✓
@niclas@infosec.exchange
16
Followers
Mastodon
＋
eM
@em@toot.community
16
Followers
Mastodon
＋
James McCullough ✓
@foursides@mstdn.ca
16
Followers
Mastodon
＋
Anthony
@anthonypower@mstdn.ca
16
Followers
Frequently asked questions
How much does Stephen Shaffer charge for a sponsorship?
Stephen Shaffer hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact Stephen Shaffer for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify Stephen Shaffer, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does Stephen Shaffer have?
Stephen Shaffer has 16 followers on Mastodon.
✉ Message Stephen Shaffer
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with Stephen Shaffer
Booking an event / appearance is a Pro feature. Upgrade to book Stephen Shaffer for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ Stephen Shaffer gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove