r/cybersecurity rules, stats, and what to post

Read the FAQ before posting: Please read the [FAQ](https://www.reddit.com/r/cybersecurity/wiki/faq) before posting a question, as it may contain the answer you are looking for. Please also check the collections we have, such as the [Breaking In to Cybersecurity](https://www.reddit.com/r/cybersecurity/wiki/faq/breaking_in) FAQ, which contains a *ton* of useful information for people looking to go into cybersecurity! Due to repetition, posts containing questions which are answered in the FAQ will be removed.

Must be relevant to cybersecurity professionals: This is a discussion-oriented sub for people who are, or aspire to be, cybersecurity professionals. The rule of thumb we apply is: if professionals would find it insightful or would enjoy insightful discussions around it, then it's appropriate here. Questions about personal or "home" cybersecurity MUST be posted on r/cybersecurity_help or r/techsupport. Memes, "security fails," homework help, etc. historically don't drive conversation, and will generally be removed.

No low effort / poor quality posts: This is a community of cybersecurity professionals - the people reading and replying to threads are actual people taking time out of their day. If you aren't putting effort into writing something, why should anyone put effort into reading it? "AI"/machine generated content, whether linked to or posted directly, is explicitly forbidden across this subreddit and will be removed when discovered. Copywritten content, SEO farming, and other slop are similarly forbidden.

Security first / no editorializing: This is the guiding principle for all posts. No editorializing and no political agendas. Posts discussing political issues that affect security are fine, but the post must be geared towards the security implication. Such posts will be heavily monitored and comments may be locked as needed.

No advertising: Want to share information or resources? Please review these guidelines: https://www.reddit.com/r/cybersecurity/wiki/advertising_guidelines You would rather build a relationship with the /r/CyberSecurity community than get banned! Educational articles or blogs that contain advertisement to a service are to flair their posts with "Corporate Blog." Soliciting DMs/calls/etc instead of posting answers directly has been used by marketers to try to circumvent this rule, and may also result in a ban.

No excessive promotion: All promotion (i.e. self-promotion) on this subreddit must be both: * Under 10% of your posts and comments on this subreddit. * Once per week at most per promoted entity. This rule is enforced to curb spam and unwanted promotional posts by non-community-members. We must always be a community member *first*, and self-interested *second*. A full explanation with examples is available on our [wiki](https://www.reddit.com/r/cybersecurity/wiki/rules/promotion).

No personally-identifiable information.: Do not post personally-identifiable information, unless the source has consented to it. Moderation staff can and will request proof. Do not request personally identifiable information, or link to sites gating information/articles/documents/etc. and requiring personally identifiable information to proceed. A "free" sign-up to view content requiring your email is not "free as in freedom."

Civility: We're all professionals. Be excellent to each other.

Ongoing security incidents are to be collated into one thread: During ongoing major incidents - hacks, vulnerabilities, etc - in order to collate all discussion into one area, threads will be locked or removed and discussion redirected to one or few megathreads.