Community
Community guidelines
Post in good faith
Disagree with the argument, not the person. Blunt technical criticism is welcome; personal attacks, harassment and pile-ons are not.
Source your claims
If you are attributing activity, naming a threat actor or citing indicators, say where it came from and how confident you are. Unsourced attribution gets removed.
No operational harm
Nothing that helps someone attack a system they do not own: no working exploits against live third-party targets, no stolen credentials or dumped data, no malware hosting, no requests for hacking-for-hire. Proof-of-concept research and defensive tooling are fine.
Respect disclosure timelines
Do not publish vulnerability details here ahead of a coordinated disclosure date. If a vendor is still inside its window, wait.
Nobody else's privacy
No doxxing, no personal data about people who did not consent, no screenshots that leak a colleague's or customer's information. Redact before you post.
No spam or self-promo
Sharing your own writing or tool is fine when it is on topic and you take part in the discussion. Drive-by links, affiliate spam and recruitment blasts are removed.
If a post breaks these
Use the Report link on the post rather than replying to argue. Moderators can lock, remove or, for repeat behaviour, suspend an account. Every moderator action is recorded.