r/threatintel

18k members
r/threatintel is a subreddit with 18k members. The most common kinds of discussions are advice requests and solution requests, and the community frequently discusses threat intel, apt 5, ai, vulnerability, and threat actor.
Sharing of information about threats, vulnerabilities, tools and trends across the security industry.

Popular Themes in r/threatintel

#1
Advice Requests
: "Best courses or training to learn dark web monitoring for CTI?"
7 posts
#2
Solution Requests
: "Alternatives to hunt.io"
3 posts
#3
Pain & Anger
: "Anyone else struggling to keep detection coverage aligned with changing threats?"
1 post
#4
Self-Promotion
: "Built a hands-on CTI training platform, looking for people to break it and tell me what's missing"
1 post

Popular Topics in r/threatintel

#1

Threat Intel

: "How do you show Threat Intel value to execs without calling it a return?"
8 posts
#2

Apt 5

: "Investigation into Apt 5 and their inner workings of PLA Troop 61786"
4 posts
#3

Ai

: "Ai assistant invents npm packages that don't exist — and attackers are registering those names with malware. I built ghostimport to catch them. Need testers & help evolving the risk-scoring."
3 posts
#4

Vulnerability

: "Share Point Vulnerability"
3 posts
#5

Threat Actor

: "Does anyone have information about the Threat Actor Antonkill?"
2 posts
#6

Phishing

: "Kratos PhaaS Surge: Updated Phishing Flow Reduces Triage Signals"
2 posts
#7

Cve

: "Inside Cve-2026-16232: Technical analysis of Check Point's actively exploited authentication bypass"
2 posts
#8

Training

: "Built a hands-on CTI Training platform, looking for people to break it and tell me what's missing"
2 posts
#9

Detection Rules

: "What's everyone using for turning threat intel reports into deployed Detection Rules in 2026?"
2 posts
#10

Platform

: "Built a hands-on CTI training Platform, looking for people to break it and tell me what's missing"
2 posts

Flair Used in r/threatintel

#1
Help/Question
: "How do you show threat intel value to execs without calling it a return?"
32 posts
#2
APT/Threat Actor
: "Got mass-BCC'd by an extortion crew trying to use me as a pressure channel against their victim"
18 posts
#3
OSINT
: "Spiderfoot Basics"
5 posts
#4
CVE Discussion
: "Langflow (CVE-2026-0768) and Rails (CVE-2026-66066) Exploitation Raises Credential Risks"
3 posts

Member Growth in r/threatintel

Yearly
+8k members(76.1%)

Similar Subreddits to r/threatintel

/r/blueteamsec

r/blueteamsec

72k members
26.2% / yr
/r/CTI

r/CTI

1k members
44.3% / yr
/r/CyberAdvice

r/CyberAdvice

21k members
30.7% / yr
/r/cybersecurity

r/cybersecurity

1.5M members
19.8% / yr
/r/cybersecurity_

r/cybersecurity_

672 members
111.3% / yr
/r/Cybersecurity101

r/Cybersecurity101

65k members
216.3% / yr
/r/purpleteamsec

r/purpleteamsec

9k members
19.5% / yr
/r/SecOpsDaily

r/SecOpsDaily

14k members
646.8% / yr
/r/SecurityBlueTeam

r/SecurityBlueTeam

21k members
16.7% / yr
/r/ThreathuntingDFIR

r/ThreathuntingDFIR

2k members
20.4% / yr

About

GummySearch helps people research Reddit communities by organizing activity, growth, themes, and post-level signals into one place.

This page gives a focused view of r/threatintel, including current member size, discussion patterns, product reviews, and related communities to explore.

This data is synced periodically so insights stay current and useful for ongoing research.

Last updated: September 3, 2026