Richard Bejtlich
🤝

Make a deal with Richard Bejtlich

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Every booking is a normal escrow-protected deal.

Followers
3K
Account age
3 yrs

Known for

📊 Post engagement

4
Avg engagement / post
0.1%
Engagement vs followers
Nov 2022
On Mastodon since

🔥 Top post: On average, the FreeBSD security team releases about 2 security · 12 likes + reposts

📊 Activity & format

Posting cadence
0.95 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly images
Recent: 0 text · 12 image · 0 video.
🔥 Top post On average, the FreeBSD security team releases about 2 security advisories per month. AI has changed this. In April, the project released 8 advisories, with 6 powered by AI. In May, the count decreased slightly to 7. Today I took a look at the FreeBSD Security Advisory page to… ★ 12
TIL there is a certification called Cisco Cyber Ops that uses such an old version of Security Onion that it is based on Sguil 0.9.0 (2014), Elsa (!), and other generally long-retired code! TBF Sguil offers more capability than many modern … ★ 1 Episode 19 of the Corelight podcast is live. I speak with our co-founder Greg Bell about our Provably Better Data initiative. Our research showed that you need high quality network evidence to perform well on capture the flag contests. The… I wrote a blog post about my new book. The book is free BTW, no email required. Blog post is here: https://corelight.com/blog/ndr-essentials-book ★ 6 Episode 18 of the Corelight podcast is live. I speak with Senior Sales Engineers Adam Donadeoto and Nico Roosenboom about their experiences at Locked Shields, the world’s largest international live-fire cyber defense exercise. We dive into… Episode 17 of the Corelight podcast is live. I speak with Ricky Lin about how he uses Zeek and Corelight to monitor his home network, and how networking has changed over the last 30 years. https://www.youtube.com/playlist?list=PLBKbF72bCp2… ★ 2 I enjoyed hearing my friends Kevin Mandia and Ron Bushar share their perspectives at the Northern Virginia Technology Council (NVTC) yesterday. We had a mini-Mandiant reunion. ★ 1 Episode 16 of the Corelight podcast is live. Dave Getman and I discuss the evolution of Corelight Investigator, the role of agentic triage in security operations, and how Corelight brings receipts to intrusion analysis. https://www.youtube… Episode 15 of the Corelight podcast is live. Greg Bell and I talk about Mythos and AI-accelerated vulnerability discovery and remediation. This was one of my favorite discussions thus far! https://www.youtube.com/playlist?list=PLBKbF72bCp… ★ 2 Episode 14 of the Corelight podcast is live. I speak with Vince Stoffer on post-quantum cryptography. We discuss how network security monitoring can help defensive teams understand and manage this technology. https://www.youtube.com/playli… ★ 2 Episode 13 of the Corelight podcast is live. I speak with our VP of research, Ali Islam. We discuss how a research lab functions within a modern security company. Ali has advice for anyone who wants to get into this fun technical field. ht… ★ 1 "Those two words which the writer set together have produced an effect which will never die, as long as [people] can read with understanding." - Shelby Foote, The Correspondence of Shelby Foote and Walker Percy ★ 7

🐘 Community & instance

Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 4 views per post.
📤Posts about per week.

🛡️ Audience credibility

52/100 Fair
  • Est. 76% real, active audience · Medium fake-follower risk.
  • Low engagement (~0.1% of followers engage each post) — a sign of an inflated or inactive audience.
  • Verified account.
  • Established account (3+ years old).
Est. authentic audience
76%
Fake-follower risk
Medium
Data confidence
Medium

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

I was a captain in the United States Air Force who formally trained as an intelligence officer. I later worked in information warfare. I promoted the concept that "prevention eventually fails" in my first book (2004) and developed tactics, operations, and strategy to detect and respond to nation-state and criminal computer intrusions. I created the GE-CIRT and was Mandiant's first CISO. I currently advocate #NetworkSecurityMonitoring for @corelight. My latest books are here #ad https://amzn.to/3B2AcMc

📸 Gallery

✉ Message Richard Bejtlich

Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.

See Pro $9.95/mo →

Already Pro? Log in.

🎤 Event / appearance with Richard Bejtlich

Booking an event / appearance is a Pro feature. Upgrade to book Richard Bejtlich for an in-person or virtual appearance — payment held safely in escrow until the event is done.

See Pro $9.95/mo →

Already Pro? Log in.