Cybersecurity is one of the most conversation-driven industries in the world, and X (formerly Twitter) is where much of that conversation happens in real time. When a zero-day vulnerability drops, when a major data breach makes headlines, or when a new ransomware campaign emerges, the people you want to be reading are already posting their analysis on X — often before the mainstream press has even caught up. For security professionals, brand marketers, and enterprise leaders alike, following the right cybersecurity creators on X is less of a preference and more of a professional necessity.

This guide spotlights the top cybersecurity creators on X (Twitter) globally in 2026, covering a diverse mix of investigative journalists, ethical hackers, seasoned CISOs, and security educators. Whether you're a practitioner looking to sharpen your threat intelligence feed, or a brand seeking credible influencer partnerships in the security space, this ranked and categorized list gives you a clear starting point. We've also included practical guidance on how to evaluate creator authenticity and engagement — two factors that matter far more than raw follower count when it comes to meaningful cybersecurity influence.

Why X (Twitter) Is the Cybersecurity Community's Home Base

No other social platform concentrates cybersecurity expertise quite like X. The platform functions as a living feed of threat intelligence, vulnerability disclosures, policy debates, and practitioner insights — all updated in real time. For security teams and technology professionals, X serves as a professional network, a news aggregator, and a research shortcut rolled into one. New attack techniques, regulatory changes, and emerging tools surface in these feeds before they hit mainstream press, giving followers an informational edge that newsletters and blogs simply cannot match on speed.

For brands operating in the cybersecurity space, this makes X an exceptionally valuable channel for influencer marketing. Cybersecurity buyers tend to be skeptical of polished advertising — they trust practitioners and independent experts who speak from lived experience. Partnering with credible cybersecurity voices on X means reaching a technically sophisticated, highly engaged audience through channels they already trust. The challenge, of course, is identifying which creators truly move the needle and which simply generate noise.

How We Ranked These Creators

This list was built around three primary signals: follower reach, consistency of output, and demonstrated expertise within the cybersecurity field. Raw follower counts provide a baseline, but they don't tell the full story. A creator with 150,000 highly engaged security practitioners often delivers more measurable brand value than an account with 500,000 general-tech followers. For each creator featured here, we considered their professional credentials, the quality and originality of their content, cross-platform recognition, and their sustained influence over time. You can explore verified influencer metrics and engagement benchmarks for creators across every niche — including cybersecurity — through the StarNgage Influencer Ranking tool.

Top Investigative Journalists & News Voices

Investigative journalists in the cybersecurity space are the field's truth-tellers. They break stories on data breaches, cybercriminal networks, and government surveillance operations, often drawing on primary source relationships and technical expertise that general reporters lack. Their X feeds are must-follows for anyone who needs to stay ahead of emerging threats at both a tactical and strategic level.

Brian Krebs (@briankrebs)

Brian Krebs is widely regarded as one of the most authoritative independent cybersecurity journalists in the world. His blog, KrebsOnSecurity, is the go-to destination for breaking news on cybercrime, data breaches, and criminal underground markets. Krebs came to the field not through formal training but through personal experience — a malware infection on his own network in 2001 sparked a career pivot that would eventually see him become a household name in information security circles. His award-winning book Spam Nation further cemented his reputation as a journalist capable of turning complex cybercrime into compelling narrative. On X, his posts are consistently among the first to surface major breach stories, making him an indispensable follow for anyone in the security space.

• Handle: @briankrebs
• Focus: Cybercrime investigations, data breach reporting, criminal underground markets
• Best For: Breaking news, threat intelligence updates

Dan Goodin (@dangoodin001)

Dan Goodin is a senior security editor at Ars Technica and one of the most reliable names in cybersecurity reporting. His coverage spans malware, computer espionage, botnets, and hardware hacking, and he is frequently the first mainstream journalist to surface technically accurate accounts of major incidents. Goodin's writing style translates deeply technical subject matter for a broad professional audience without sacrificing accuracy — a rare combination that makes him an essential feed for both practitioners and decision-makers. With over 40,000 followers on X, his influence punches well above the follower count.

• Handle: @dangoodin001
• Focus: Malware, espionage, botnets, hardware security
• Best For: Technically accurate breaking news, vendor-neutral reporting

Nicole Perlroth (@nicoleperlroth)

Nicole Perlroth is a cybersecurity journalist and author best known for her New York Times reporting and her critically acclaimed book This Is How They Tell Me the World Ends, which explores the global zero-day vulnerability market and the geopolitics of cyberwarfare. Her X presence brings the same depth of sourcing and narrative craft to her social posts, making her one of the sharpest policy and threat-landscape voices on the platform. For brands with interests in national security, critical infrastructure, or enterprise risk, Perlroth's audience represents a particularly valuable segment of the cybersecurity community.

• Handle: @nicoleperlroth
• Focus: Cyberwarfare, zero-day exploits, national security policy
• Best For: Government/enterprise cybersecurity audiences

Leading Ethical Hackers & Security Researchers

Ethical hackers and security researchers form the technical backbone of the cybersecurity creator community on X. Their posts often include real vulnerability analyses, penetration testing insights, and hands-on breakdowns of attack techniques — content that resonates deeply with practitioners and carries serious credibility with security-aware buyers.

SwiftOnSecurity (@swiftonsecurity)

SwiftOnSecurity is arguably the most distinctive voice in cybersecurity on X, blending sharp operational insight with a uniquely dry, often humorous commentary on security culture and the realities of working in a SOC (Security Operations Center). With over 414,000 followers, the account has built an enormous audience by cutting through vendor marketing noise and speaking plainly about how security actually works in practice. The account is particularly notable for its Microsoft MVP recognition in Security (2018–2023) and for making complex endpoint security topics accessible to practitioners at all levels. For brands in the enterprise security tooling space, SwiftOnSecurity's audience is a goldmine of technically engaged buyers.

• Handle: @swiftonsecurity
• Followers: ~414,800
• Focus: Security operations, endpoint security, SOC culture
• Best For: Enterprise security tools, EDR/XDR vendors

John Hammond (@_johnhammond)

John Hammond is a cybersecurity researcher at Huntress Labs and one of the most engaging technical educators on the platform. With over 308,000 followers, he brings a hands-on, tutorial-driven approach to security content that resonates with both aspiring professionals and experienced practitioners. Hammond's background includes CTF (Capture the Flag) competitions, malware analysis, and offensive security training, giving his content a practical authenticity that's hard to replicate. He is also known for his work with JustHacking Training, where he helps bridge the gap between academic security knowledge and real-world skills. Brands targeting the next generation of security talent — from security certification providers to career development platforms — will find Hammond's audience particularly well-aligned.

• Handle: @_johnhammond
• Followers: ~308,800
• Focus: CTF challenges, malware analysis, offensive security education
• Best For: Security training platforms, cybersecurity career tools

Troy Hunt (@troyhunt)

Troy Hunt is one of the most recognized names in consumer-facing cybersecurity, particularly known for creating Have I Been Pwned — a widely used breach notification service that helps individuals and organizations check whether their credentials have appeared in known data leaks. A Microsoft Regional Director and Pluralsight author, Hunt has spent years making web security concepts accessible to developers and non-technical users alike. His X feed covers everything from data breach disclosures and password security to broader privacy debates, and with over 242,000 followers, he commands one of the platform's most engaged and genuinely diverse cybersecurity audiences.

• Handle: @troyhunt
• Followers: ~242,100
• Focus: Data breaches, password security, developer security, privacy
• Best For: Consumer security tools, developer security products, privacy tech

Mikko Hyppönen (@mikko)

Mikko Hyppönen is a Finnish cybersecurity researcher and one of the most widely recognized global voices in the field. As Chief Research Officer at F-Secure, he has spent decades on the front lines of malware research, having tracked and analyzed threats for over 30 years. Hyppönen has appeared at TED Talks, been featured in the New York Times and WIRED, and was named among the 50 most important people on the web by PC World. With around 187,000 followers on X and a truly global audience, he brings a geopolitical and historical depth to cybersecurity commentary that few creators can match. His posts are a reliable mix of threat intelligence, privacy analysis, and commentary on the broader societal implications of digital security.

• Handle: @mikko
• Followers: ~187,000
• Focus: Malware research, threat intelligence, cybersecurity policy, privacy
• Best For: Global security brands, enterprise threat intelligence tools

Influential CISOs & Security Executives

Security executives and CISOs bring a strategic and organizational dimension to cybersecurity content that technical researchers often don't cover. Their posts address risk management, board-level communication, regulatory compliance, and the business case for security investment — content that resonates strongly with enterprise decision-makers and helps shape the purchasing choices of large organizations.

Bruce Schneier (@schneierblog)

Described by The Economist as a "security guru," Bruce Schneier is one of the most intellectually influential figures in global cybersecurity. An internationally renowned security technologist, cryptographer, author, and policy expert, Schneier is a fellow and lecturer at Harvard's Kennedy School, a board member of the Electronic Frontier Foundation, and the Chief of Security Architecture at Inrupt, Inc. He has been writing about security issues since 2004, and his prolific output — spanning books, academic papers, and blog posts — has shaped how an entire generation of security professionals thinks about risk, privacy, and digital governance. On X, his account (@schneierblog) reflects this breadth, covering everything from cryptographic policy to AI governance, with over 142,000 followers consistently engaged with his analysis.

• Handle: @schneierblog
• Followers: ~142,300
• Focus: Cryptography, cybersecurity policy, AI governance, digital rights
• Best For: Policy-focused audiences, enterprise security leadership

Jake Williams (@malwarejake)

Jake Williams is a cybersecurity practitioner, VP of R&D at Hunter Strategy, and a widely respected voice in the CTI (Cyber Threat Intelligence) and DFIR (Digital Forensics and Incident Response) community. Holding certifications including GSE #150, he is an IANS Security faculty member and a go-to commentator on threat actor attribution and defensive strategy. With over 134,000 followers on X, Williams delivers technically grounded analysis with a refreshingly candid tone — rarely pulling punches on industry trends, vendor claims, or practitioner realities. Brands targeting enterprise security teams and CISO-level buyers will find strong alignment in Williams' audience.

• Handle: @malwarejake
• Followers: ~134,200
• Focus: Threat intelligence, incident response, offensive security
• Best For: Enterprise security platforms, CTI and DFIR tools

Rinki Sethi (@rinkisethi)

Rinki Sethi is one of the most accomplished cybersecurity executives in the industry, currently serving as CISO and CSO at Upwind Security and a founding partner at Lockstep. Her career includes senior security leadership roles at Twitter, Rubrik, BILL, IBM, Walmart.com, Intuit, eBay, and Palo Alto Networks — a track record that spans virtually every dimension of enterprise security, from product security and cloud infrastructure to executive strategy. Sethi is an authoritative voice for organizations looking to understand how large-scale security programs are built and maintained, and her X presence reflects the practical, executive-level lens she brings to every topic she covers.

• Handle: @rinkisethi
• Focus: CISO strategy, enterprise security programs, cloud security
• Best For: Enterprise security vendors, cloud security platforms

Security Educators, Advocates & Rising Voices

Security educators and advocates fill a critical gap that technical researchers and executives sometimes leave open: they make cybersecurity accessible, relatable, and actionable for a broader audience. From social engineering demonstrations to digital rights advocacy, these creators build the kind of broad security awareness that ultimately makes organizations and individuals safer — and they do so in formats that resonate well beyond traditional security circles.

Kevin Mitnick (@kevinmitnick)

Few names in cybersecurity carry the same cultural weight as Kevin Mitnick. Once on the FBI's most-wanted list as one of the most prolific hackers in history, Mitnick transformed his story into one of the field's most compelling redemption arcs, becoming a trusted security consultant to Fortune 500 companies and the Chief Hacking Officer of KnowBe4, a global leader in security awareness training. With over 286,000 followers on X, Mitnick's posts blend practical security advice with the kind of insider perspective that only someone who has spent time on both sides of the security divide can offer. His creative storytelling approach to security education — a frequent guest on CNN, FOX News, and BBC — translates directly into highly engaging social content.

• Handle: @kevinmitnick
• Followers: ~286,300
• Focus: Social engineering, security awareness, ethical hacking
• Best For: Security awareness training platforms, enterprise risk management tools

Eva Galperin (@evacide)

Eva Galperin is the Director of Cybersecurity at the Electronic Frontier Foundation and a technical advisor for the Freedom of the Press Foundation. With over 100,000 followers on X, she has built a reputation as one of the most important voices at the intersection of technology, surveillance, and civil liberties. Her work on stalkerware, targeted digital attacks, and nation-state threats gives her content a human dimension that broader security communities often overlook. Galperin is a uniquely valuable creator for brands addressing privacy tech, digital rights, or security solutions aimed at at-risk populations — journalists, activists, and vulnerable communities who need practical tools, not just enterprise-grade compliance frameworks.

• Handle: @evacide
• Followers: ~100,000+
• Focus: Surveillance, digital rights, stalkerware, civil liberties
• Best For: Privacy tools, consumer security apps, digital rights organizations

Shira Rubinoff (@shirastweet)

Shira Rubinoff is a globally recognized cybersecurity and AI advisor, keynote speaker, and author who has built two cybersecurity product companies and championed women in technology throughout her career. As one of the top-ranked cybersecurity influencers globally, her influence extends beyond X — her YouTube channel has surpassed 300,000 subscribers — making her a genuinely cross-platform creator with consistent reach across multiple audiences. Rubinoff's book Cyber Minds highlights the intersection of human behavior and cybersecurity, a theme that runs through much of her social content. For brands looking to reach a broad, diverse cybersecurity audience that spans technical practitioners, executives, and aspiring professionals, Rubinoff is a compelling partner.

• Handle: @shirastweet
• Followers: ~56,300
• Focus: Cybersecurity and AI advisory, women in tech, executive education
• Best For: Cybersecurity brands targeting diverse and executive audiences

Why Brands Should Partner With Cybersecurity Creators on X

Cybersecurity buyers are among the most skeptical audiences in the B2B landscape. They have seen too many vendor claims, too many sponsored posts, and too many generic endorsements from people with little real-world security experience. Traditional advertising formats — cold outreach, banner ads, sponsored content from anonymous accounts — rarely move them. What actually builds trust and drives purchasing decisions in this niche is credibility earned through practitioner-led voices who speak with authority and authenticity.

This is precisely where influencer marketing becomes a strategic asset in the cybersecurity space. Collaborating with respected X creators means positioning your brand inside conversations that your target buyers are already having — on their terms, with voices they already trust. Whether the goal is brand awareness, product launches, thought leadership, or lead generation, the right cybersecurity partnership on X delivers signal, not just impressions. Brands looking for an edge should explore the StarNgage Brand Ranking to benchmark performance and identify what top-performing brands in adjacent categories are doing differently.

How to Find and Vet the Right Cybersecurity Influencer

Identifying the right cybersecurity creator for your brand requires more than scrolling through follower counts. The most effective partnerships start with a thorough vetting process that looks at audience quality, content consistency, engagement rates, and whether a creator's specific focus area aligns with your product category and target buyer. A creator focused on nation-state threat intelligence, for example, may have little relevance for a brand selling password management tools aimed at SMBs — even if both technically operate in the cybersecurity space.

There are several practical steps brands should take before reaching out to any cybersecurity creator on X:

• Audit follower quality. Inflated follower counts are common across all social platforms. Use a dedicated fake follower checker — like the one available through StarNgage's Fake Follower tool — to verify that an account's audience is genuine and engaged, not padded with bots.
• Review content history. Look at the creator's last three to six months of posts. Are they consistent? Do they maintain a clear focus, or do they post on anything and everything? Consistency of topic signals genuine expertise.
• Check engagement rates against follower size. Accounts with micro to mid-tier follower counts (20K–200K) often outperform larger accounts in engagement rate, especially in B2B niches like cybersecurity. A smaller, tighter audience of practitioners frequently delivers better ROI than a large but passive following.
• Assess brand alignment. Review any prior brand partnerships the creator has been involved in. Do those brand relationships make sense? Has the creator maintained their credibility and voice through commercial partnerships, or do their sponsored posts feel jarring and out of place?
• Use platform intelligence. Tools like StarNgage's Influencer Ranking can surface verified performance data on creators across platforms, including engagement metrics, audience demographics, and brand affinity scores — making the discovery and vetting process significantly more efficient.

For brands that want to go deeper on influencer strategy and see how other companies in the cybersecurity and tech space have successfully executed creator campaigns, the StarNgage case studies offer a library of real-world examples across multiple industries.

Final Thoughts

X (Twitter) remains the most dynamic and real-time platform for cybersecurity knowledge sharing in 2026, and the creators featured in this guide represent some of the most trusted, well-credentialed voices in the global security community. From investigative journalists like Brian Krebs and Nicole Perlroth who surface the stories everyone else misses, to ethical hackers like SwiftOnSecurity and John Hammond who make technical security tangible, to policy voices like Bruce Schneier who help the industry navigate the broader implications of a connected world — these creators are genuinely shaping how organizations understand and respond to digital threats.

For brands looking to reach security-minded buyers, partnering with the right cybersecurity creator on X is one of the highest-trust, highest-ROI channels available. The key is doing the work upfront: vetting audiences, aligning on niche fit, and approaching creators as long-term partners rather than one-off media placements. Get that foundation right, and the cybersecurity community on X becomes one of the most valuable audiences your brand can access.