Cybersecurity community
Security work every system depends on.
Mobile money fraud, SIM swaps and social engineering cost people their savings every day, and new data protection laws now carry real fines. Most teams have no dedicated security person at all.
Open to every member. Join now and help shape what it builds next.
What we work on
Four problems define this community’s work right now. Every sprint, review and essay here comes back to one of them.
Fraud and account takeover
Detecting SIM-swap, phishing and mule accounts before the money leaves.
AI and LLM security
Red-teaming models, prompt injection defence and safe tool use in production.
Application security
Secure code review, threat modelling and hardening for small teams without a security function.
Data protection
Meeting data protection law in practice: consent, retention, breach response.
Questions we are working through
No one has settled these yet. They come up in every sprint, and members argue them out in essays and reviews.
- How do you stop a SIM-swap attack without locking out the customer who genuinely lost their phone?
- What does responsible disclosure look like when a company has no security contact?
- How do you red-team an LLM feature before it reaches customers?
Our impact
- System in Cybersecurity we have built and shipped
- 1
Shipped in Cybersecurity
- DhamanaFraud Detection · Nigeria · 2023
Real-time transaction scoring with a full audit trail — Kafka-native and horizontally scaled.
<50ms decision latency40k events / minute
From the field
No essays here yet. Members write about what actually happens on the ground, and every essay is edited before it is published. Apply to write
Your first build
New members pick one of these for their first month. Each is small enough to finish and real enough to show an employer or an investor.
A phishing-link checker
Score links shared by SMS and WhatsApp for phishing risk, and explain the score in plain words.
- Classification
- URL analysis
- APIs
A prompt-injection test suite
A set of attacks to run against an LLM feature before release, with a pass or fail report.
- LLMs
- Testing
- Threat modelling
A small-team security baseline
A one-day checklist and scripts that bring a five-person startup to a sensible security baseline.
- Cloud
- Automation
- Writing
Words you will hear
New here? These come up in your first week. Plain meanings, no jargon.
- SIM swap
- Moving a victim's number to a new SIM to intercept their codes and take over their accounts.
- Account takeover
- An attacker gaining control of a real user's account.
- Prompt injection
- Text that tricks an AI model into ignoring its instructions.
- Responsible disclosure
- Reporting a vulnerability privately so it can be fixed before it is made public.
Who you will meet
- Security engineers and analysts
- Developers who own security on their team
- Fraud and risk teams
- Researchers practising responsible disclosure
How the community runs
- Every week
Build sprint
Bring a real problem from your work in the sector. Leave with progress, reviewed by people who have shipped the same thing.
- Every week
Office hours
Drop in with a model that will not converge, a regulator question or a hiring decision. Practitioners answer.
- Every month
Demo day
Members show working systems to the community, mentors and invited investors. Demos, not decks.
The team behind it
Lead the Cybersecurity community
We are looking for experienced practitioners to lead this community: host one session a month, review members’ work and shape what it builds next.
Tell us about your workJoin the Cybersecurity community
One payment of $15 makes you a member for life: every community, its sprints, reviews and events. No subscription.