r/blueteamsec is a subreddit with 73k members. The most common kinds of discussions are news and solution requests, and the community frequently discusses shellcode and cyber resilience.
We focus on technical intelligence, research and engineering to help operational [blue|purple] teams defend their estates and have awareness of the world.
Our primary home is on Lemmy after the great ban debacle of 2025.
Popular Themes in r/blueteamsec
#1
News
: "How Do You Investigate Windows Event Logs?"
43 posts
#2
Solution Requests
: "Netscaler zero day help"
2 posts
#3
Advice Requests
: "What’s a realistic SaaS misconfiguration review cadence for a small team?"
1 post
Popular Topics in r/blueteamsec
#1
Shellcode
1 post
#2
Cyber Resilience
1 post
Flair Used in r/blueteamsec
#1
intelligence (threat actor activity)
: "The Women Behind North Korea's IT Worker Operations"
17 posts
#2
tradecraft (how we defend)
: "MemGuard — Zero-Dependency LSASS Memory Shield & EDR Hook Detector"
13 posts
#3
low level tools|techniques|knowledge (work aids)
: "Hex-Rays IDA MCP Server"
10 posts
#4
exploitation (what's being exploited)
: "Inside the NetScaler Zero-Day Siege: Chained Pre-Auth RCEs Weaponized in the Wild (watchTowr Disclosure)"
8 posts
#5
malware analysis (like butterfly collections)
: "NeedyMantis: Unpacking a post-compromise malware family used in targeted operations"
8 posts
#6
highlevel summary|strategy (maybe technical)
: "Analysis: CVE-2026-88771 and CVE-2026-88772"
7 posts
#7
discovery (how we find bad stuff)
: "DFIR-Companion Update (DFIR AI Assistant)"
7 posts
#8
vulnerability (attack surface)
: "Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)"
6 posts
#9
research|capability (we need to defend against)
: "EDR Evasion: Process Injection Without WriteProcessMemory"
5 posts
#10
help me obiwan (ask the blueteam)
: "Netscaler zero day help"
4 posts
Member Growth in r/blueteamsec
Yearly
+15k members(25.2%)
Similar Subreddits to r/blueteamsec
r/AskNetsec
266k members
15.0% / yr
r/dfir
5k members
35.6% / yr
r/Malware
102k members
13.8% / yr
r/MalwareAnalysis
14k members
69.3% / yr
r/netsec
574k members
7.1% / yr
r/purpleteamsec
9k members
17.2% / yr
r/redteamsec
53k members
23.8% / yr
r/SecOpsDaily
16k members
463.8% / yr
r/threatintel
18k members
67.6% / yr
About
GummySearch helps people research Reddit communities by organizing activity, growth, themes, and post-level signals into one place.
This page gives a focused view of r/blueteamsec, including current member size, discussion patterns, product reviews, and related communities to explore.
This data is synced periodically so insights stay current and useful for ongoing research.
Last updated: October 1, 2026