Vendor-neutral · Free for practitioners
SecPeers is a vetted community of security leaders.
A person reviews every application.
Starting in four markets
25 founding seats in each market.
Peer Tables
Members host. We book the room, fill the table with 10 to 12 people who run IT or security, and pay the bill. Sponsors fund the evening and sit in to listen. They don't present, they don't pick the topic, and they never get the guest list.
Every story comes with one line on why it matters to buyers.
Senior IT and security leadership roles only.
Guides and templates members use when they evaluate, buy and budget.
Founding members
Southern California, Dallas–Fort Worth, South Florida and New York / New Jersey each open with 25 founding members. They help pick the first dinner topics, review the guidelines and get a seat at the launch dinner in their market.
News
Today's security and IT news, with one line on what to do about it.
The stories that matter most to IT and security leaders, each with what to do about it. Summaries are drafted with AI from the linked sources.
Themes from public discussions among security and IT practitioners on forums such as Hacker News and vendor communities, summarized in our own words. Links go to the original threads.
Headlines link to the original publisher. Picked stories are summarized in our own words.
Events
Chapter meetings, summits and conferences in the US and major cities worldwide, plus live online sessions with CPE credits. Every listing links to the organizer.
Webinars, virtual summits and online chapter meetings from ISC2, ISACA, SANS, IAPP, CSA and other organizers, with the CPE credits each one offers. Hybrid events, held at a venue with a live online option, appear here and under In person. Vendor-hosted sessions are hidden unless you ask for them.
Times and CPE credits are as published by each organizer, whose registration page is the final word. Credits count toward ISC2, ISACA and similar certifications under each body's own rules.
Off-the-record dinners hosted by members in their own city. You invite a few peers; we find the venue, fill the table, run the evening and cover the bill.
Intel
What was breached, what attackers are exploiting right now, and what security leaders should take from it. Every item links to the original source.
The day's most significant newly disclosed incidents, checked against company statements, SEC filings and regulator records, each with what security leaders can learn. Updated every morning.
Vulnerabilities CISA has confirmed attackers are exploiting, newest first. If you run the product, patch by CISA's deadline or sooner.
Source: CISA Known Exploited Vulnerabilities catalog. Refreshed hourly.
Breach, ransomware and incident reporting from security news outlets over the last 14 days. Early reports can change; check the confirmed status in the breach brief.
Public companies must file an 8-K under Item 1.05 within four business days of deciding a cybersecurity incident is material. These are the most recent Item 1.05 filings, newest first.
Source: SEC EDGAR full-text search. An 8-K/A updates an earlier disclosure. Open the filing for the company's own description.
Alerts and advisories from CISA, the UK's National Cyber Security Centre and the Canadian Centre for Cyber Security, last 30 days.
Threat research from security labs on attacker campaigns and techniques, last 30 days. These labs belong to security vendors; we link to their research because it is often the first detailed account.
Victims claimed on ransomware groups' leak sites in the last 7 days, counted by group, sector and country. Claims are not proof of a breach, and we don't list victim names.
Source: ransomware.live. Refreshed hourly.
Vendor & Pricing
Published prices for the security tools mid-size companies buy most, what buyers report actually paying, and the contract terms to watch. Every price links to its source.
These don't publish prices. Ask peers what they pay, and get at least two competing quotes.
Regulations
Cybersecurity, privacy and AI rules across the US, EU, UK, Canada and Australia: who they cover, what they require and what is due next. Each one links to the official source.
Cyber Insurance
Where cyber insurance prices are heading, the controls underwriters ask about, what the policy terms mean and what has changed lately. Every item links to its source.
Controls carriers commonly check before they quote or renew. Missing ones can raise your price, shrink your coverage or end the conversation.
Peer Tables
CISO Dinners you actually want to attend, with the topics that matter most to you, with the speakers you approve. SecPeers finds the venue, fills the table, runs the evening and covers the bill.
For sponsors
Sit at the table with 10 to 12 security and IT leaders in a city you sell into, hear what they are working on, and be the company that made the evening happen.
Pricing on request. Sponsors agree to the table rules, including no access to the guest list.
Careers
Where leaders find their next CISO, Deputy CISO, CIO, Head of Security, VP of IT and Director of IT roles across 20+ countries, with new roles added every day.
Hiring a security or IT leader? Listings are free during launch. We review each one to keep the board senior and vendor-neutral.
From published salary guides and compensation surveys by recruiters, executive search firms and research groups. Every figure links to its source. We update it when a new edition comes out.
What each certification is for, what it takes, what it costs and how to keep it, from each certifying body's own site.
Markets
How public cyber stocks, cyber ETFs and private security companies are priced. Useful context when a vendor tells you about their roadmap, their runway or their next acquisition.
Security products changing hands, and what customers should ask before their next renewal.
Cyber funding rounds, acquisitions and deals reported before they're announced.
Loading deals…
Every deal is rewritten in our own words from public reporting and press releases and links to the original source. "Reported" means talks or a round covered by the press but not confirmed by the companies. We follow CTech, Cybersecurity Ventures' VC Deal Flow and M&A Tracker, SecurityWeek and other outlets for leads. Not investment advice.
Market indices shown through their ETFs: SPY (S&P 500), QQQ (Nasdaq-100), DIA (Dow), IWM (Russell 2000). Returns exclude dividends, which add roughly 1–1.5 points a year for SPY, DIA and IWM and under 1 point for the cyber ETFs.
Equal-size tiles grouped by subsector, colored by Q3 return. Cyber pure-plays only. A white dot marks SecPeers Index (SPI) members. Tap a tile for details.
These four sell major security products, but their stock moves mostly on cloud, AI, ads and networking. They stay out of the cyber averages, breadth and heatmap.
Resources
Templates, study guides and the frameworks leaders use most, for buying, budgeting and reporting. Use them as is.
The frameworks IT and security leaders use most, in plain English: what each is for, who needs it and where to get the official version.
Summaries are ours. Each link goes to the framework owner. Free to use means public and reusable with credit; Free to read means free on the owner's site; Licensed means the owner sells or licenses the full text.
Responding to a Breach
What to do, who to call and which reporting clocks start when you find a serious incident. Written for security and IT leaders at mid-size companies. General guidance, not legal advice.
First hour
First 4 hours
First 24 hours
Days 2 and 3
After
The deadlines that most often apply. Several can run at once, and some start on discovery, not on confirmation. Your counsel decides which apply to you.
| Rule | Who it covers | Deadline | Clock starts |
|---|---|---|---|
| SEC Form 8-K, Item 1.05 | US public companies | 4 business days | When the company decides the incident is material |
| GDPR and UK GDPR | Anyone holding personal data of people in the EU or UK | 72 hours to the regulator | When you become aware of a personal data breach |
| NIS2 (EU) | Essential and important entities in the EU | 24 hours early warning, 72 hours notification, final report within 1 month | When you become aware of a significant incident |
| DORA (EU) | EU financial entities | Initial report within 4 hours of classifying it as major (and within 24 hours of detection), then 72 hours, then 1 month | When the incident is classified as major |
| HIPAA Breach Notification Rule | US health plans, providers and their business associates | Individuals within 60 days; HHS within 60 days if 500 or more people (smaller breaches yearly); media if 500 or more in one state | When the breach is discovered |
| NYDFS Part 500 | Financial companies licensed in New York | 72 hours; any extortion payment within 24 hours, with a written explanation within 30 days | When you determine a reportable incident occurred |
| DFARS 252.204-7012 | US defense contractors handling controlled unclassified information | 72 hours to the Department of Defense | When you discover the incident |
| US state breach laws | Anyone holding residents' personal data, in all 50 states | Varies: "without unreasonable delay" to fixed limits, often 30 to 60 days; some require notice to the attorney general | Usually on discovery |
| Canada (PIPEDA) | Private-sector organizations in Canada | As soon as feasible to the Privacy Commissioner and affected people | When you find a real risk of significant harm |
| CIRCIA Not yet in force | US critical infrastructure | 72 hours for covered incidents, 24 hours after a ransom payment | Starts only once the final rule takes effect. CISA sent the final rule for White House review on Oct 1, 2026. |
| Your insurance policy and contracts | You | Often "prompt" or a set number of hours | Read the notice clauses now, before you need them |
Checked Nov 10, 2026. Rules change; see the Regulations Tracker for what is due next.
Print it or keep it somewhere that still works if your email and file shares are down.
Peer Recommended Tech Stacks
The layers mid-size companies run, what to put in place first and what can wait. Product picks come only from members who run them. Never from sponsors.
Peer picks for each layer open once at least five members at a similar size have shared what they run. We publish picks only as totals, never your name or company.
CISO Course
A peer-led course for first-time CISOs, Heads of Security and IT leaders stepping up. Small groups, real problems, and six tools you build for your own company along the way.
Each week has under an hour of prep, then the session goes to your problems rather than to slides.
Week 1
Know who matters, what they need from you and what you'll deliver first.
You build: a 90-day plan and stakeholder map
Week 2
Explain your company's cyber risk in a way directors can act on.
You build: a board scorecard
Week 3
Make a budget case a finance leader can say yes to, and find spend to cut.
You build: a budget case
Week 4
Get the most from a small team and plan your next hire or your deputy.
You build: a team plan
Week 5
Spend less time and money on tools, and get better contract terms.
You build: a vendor renewal plan
Week 6
Be ready to lead a serious incident, and know what protects you personally.
You build: a personal protection checklist
No start dates yet. A group starts once enough members at a similar stage sign up. Not a member? Apply free first.
Members
The directory opens to members once the founding cohort is in. Search by role, industry or city.
No profiles yet. The first 25 founding members appear here first.
Peer Q&A threads and member vendor reviews. We hold them until there are enough members to keep them useful.
The Inner Room
Half-day closed sessions on the decisions you can't discuss in public. Membership is by invitation, and seats are limited in each market.
Join
Free for people who run, build or buy IT and security inside their own organization, from hands-on engineers to CISOs. A person reviews every application to keep vendors out. It takes about two minutes.
Members get the SecPeers Newsletter, the templates and guides, and first invitations to Peer Tables in their market. After you apply: you'll see a confirmation here, a reviewer checks your role, and we email you once you're approved.
Loading…
Blog
New posts every Tuesday and Thursday on the problems IT and security leaders raise most: burnout, boards, budgets, tool sprawl, AI, vendors and more. Plus Career Coach guides for every stage of your career.
Loading posts…
About
A peer community for the people who run and buy IT and security. Free for members, funded by labeled sponsorships and events.
Contact
Questions about membership, a listing, sponsoring a Peer Table, or your data. A person reads every message.
See also our privacy policy and terms.
Page not found
It may have moved. Head back to the home page or pick a section above.
