Jay ๐ฆ @jay.bsky.team Founder & Chief Innovation Officer @ Bluesky
Working on @attie.ai
๐ฑ ๐ชด ๐ณ
Meredith Whittaker @meredithmeredith.bsky.social President of Signal, Chief Advisor to AI Now Institute 
Andy Gill @zephrfish.yxz.red Defcon goon, Adversarial Architect. Photography, Driving, Blog and general purveyor of chaos. Metal/DnB Fan creator and owner of https://lms.zsec.red
The Mysterious Bookshop @mysteriousbookshop.com The world's oldest mystery fiction specialty shop, located at 58 Warren Street, NYC. Home to Penzler Publishers and all its imprints, Mysterious Press, Scarlet, Crime Ink, and American Mystery Classics.
Voted USA Today's #1 Indie Bookshop 2025
ProPublica @propublica.org Investigative journalism in the public interest. Headlines and (sometimes literal) receipts.
propublica.org
Nein.Quarterly @neinquarterly.bsky.social A Compendium of Utopian Negation. Editor: Eric Jarosinski, Failed Intellectual (Emeritus)
New York, NY
Annique @annique.bsky.social Just me..
Jake Godin @godin.bsky.social Senior Researcher, Bellingcat. Previously at Scripps News. 
Giancarlo Fiorella @giancarlofiorella.bsky.social Director of Research and Training | Bellingcat
Assistant Professor | Utrecht University
PhD, Criminology & Sociolegal Studies | University of Toronto
www.giancarlofiorella.com
Opinions my own
Logan Williams @obtusatum.bsky.social Mountains and websites; maps and birds; context collapse. Projects: https://subject.space/. Work: Data, research and technology for investigations @bellingcat.com. Personal account, posts/opinions are my own. New York via Amsterdam and Oregon.
Tristan Lee @tristanl.ee Journalist @decoherence.media using open sources to expose far-right networks
Other bylines @bellingcat.com @texasobserver.org
Foeke Postma @foeke.bsky.social Investigator & trainer at Bellingcat
Hisham Almiraat @almiraat.bsky.social 
Nick Waters @nickwaters.bsky.social Award winning journalist, still interested in using open source information for accountability.
Eliot Higgins @eliothiggins.bsky.social Founder and creative director of Bellingcat and director of Bellingcat Productions BV. Author of We Are Bellingcat.
Michael Sheldon @michaelsheldon.bsky.social Senior Investigator @ CIR
Formerly: Bellingcat, DFRLab
Aric Toler @aric.bsky.social Visual Investigations at The New York Times
Miguel Ramalho @msramalho.bsky.social Investigative Technologist @bellingcat.com
Data, Tech, Human Rights, Conflict & Financial Investigations
Signal @miguel.351
https://github.com/msramalho
Konrad Iturbe @konraditurbe.dev cosas varias
Madrid, Espaรฑa
Attacks on Civilians with Small Drones: A Global Picture @littleflyingrobots.bsky.social Documenting, analyzing, and mapping the growing global problem of attacks on civilians with small drones, from @faineg.bsky.social. View the map of global attacks here: https://map.faineg.com/public/index.html
Faine Greenwood @faineg.bsky.social civilian drone technology and GIS/spatial data consultant, journalist and writer, monitors small drones in the Ukraine war, humanitarian-aid adjacent, always annoying online. they/them pronouns. read my newsletter: https://little-flying-robots.ghost.io
Aram Shabanian @aramshabanian.bsky.social Perhaps the real watch list was the friends we made along the way. Keyboard Inghimasi. Sic semper tyrannosaurus rex. --Dire Straits Appreciation Zone-- #Flowers4Qanon
Michael Colborne @colborne.bsky.social @bellingcat.com journalist etc focused on the transnational far right. i give trainings. i take pictures of stickers. Signal: michaelcolborne.01
Kolina Koltai @koltai.bsky.social Senior investigator & Trainer @Bellingcat.com
Investigating explicit non-consensual deepfakes/AI and disinfo w/OSINT
"I am a doctor, but not that kind of doctor."
Christiaan Triebert @trbrtc.bsky.social Visual Investigations reporter at The New York Times. Previously with Bellingcat and Airwars.
Shayan Sardarizadeh @shayan86.bsky.social BBC Verify senior journalist | verification, AI, disinformation, conspiracy theories, open source investigations | shayan.sardarizadeh@bbc.co.uk
Olga Robinson @olgar.bsky.social Assistant Editor, BBC Verify and BBC Monitoring 
Wim Zwijnenburg @wammezz.bsky.social Environmental open-source investigations, tracking drone warfare, research based advocacy for PAX, contributer Bellingcat.
Gabรฒr Friesen @gaborfriesen.bsky.social Freelance Open Source Researcher.
Studying Research Architecture @Goldsmiths
Geo-&Chronolocation/3D Modeling/CNNs/Social Media Analysis and Remote Sensing
Previous collaborations: Al Haq, Al Jazeera, Airwars/AFP, Bellingcat, CIR, CNN, The Washington Post.
Sarah Stoecklin @sarahstoecklin.bsky.social Technical writing, UX, open source research (DR Congo, misogyny, SGBV).
Extremely Online at http://discord.gg/bellingcat
CongoEye member, Bellingcat contributor. Reds and Tolkien fan. Views my own.
Malachy Browne @malachy.bsky.social I report and run projects on the Visual Investigations team at The New York Times where we collect and analyze audio-visual evidence. Ireland and New York. nytimes.com/visual-investigations
Peter Barth @oldpete45.bsky.social covering organized crime @Bellingcat.com. texan up north. views my own.
Alison Killing @alisonkilling.bsky.social Visual investigations at the FT. Architect who won a Pulitzer. 
Robert Evans (the Only Robert Evans) @iwriteok.bsky.social I am the host of Behind the Bastards and overlord of podcasts at Cool Zone Media
Dave Brookes @tehuringa.bsky.social Digital flรขneur | Open Source Researcher| GEOINT| Bellingcat GAP Project | Research ไธญๅฝ & Central Africa | drinks wine & writes stuff |Views are my own |RSs โ endorsements
Jakub Janovsky @rebel44cz.bsky.social Military history, SCW, OSINT, space, electric cars. NATO/EU/Ukraine supporter. Oryx Blog Administrator.
http://ko-fi.com/rebel44cz
Benjamin Strick @bendobrown.bsky.social Investigator | Human Rights | Hybrid Wars
- Makes videos on maps, data & #OSINT
- Director of Investigations at @cen4infores.bsky.social
- Prev at BBC Africa Eye. Bellingcat contributor.
Chris Osieck @chrisosieck.bsky.social I digitally investigate stuff, somehow my findings travel from spreadsheets to international media and research collectives; views are my own.
Brenna Smith @brennasmith.bsky.social WSJ visual investigative reporter.
Past: Baltimore Banner, New York Times, & Bellingcat.
Megan OโToole @meganotoole.bsky.social Award-winning investigative/data journalist. Senior editor @MiddleEastEye, former MENA editor @AlJazeera, Global Authentication Project member @Bellingcat, meganotoole.ca
Eman El-Sherbiny @emansh.bsky.social Open source investigations consultant @ICC. Former @ICRC.org @Bellingcat.com @Lighthouse Reports, @Cen4InfoRes & @Sudanese_archive overarching #osint chronically online http://emanel-sherbiny.com/ ๐ The Hague
Teemu Nieminen @niemisentee.bsky.social Doctoral researcher focusing on right-wing extremism @helsinki.fi | ex-Bellingcat Volunteer
Avery Schmitz @averyschmitz.bsky.social Open-source reporting @cnn.com
Views my own | avery.schmitz@cnn.com
Timmi Allen @timmi-allen.bsky.social Former member of Bellingcat - Berlin, Germany
Merel Zoet @merelzoet.bsky.social Producer @Bellingcat.com
Bosphorus Observer @yoruk.bsky.social Obsessive ship-spotting by the Bosphorus -.-. .-. .. -- . .- / .. ... / ..- -.- .-. .- .. -. . 50501
Veli-Pekka Kivimรคki @vpkivimaki.bsky.social Intelligence analyst by day, OSINT in academia, engineer at heart. Now: Finnish Security and Intelligence Service. Adjunct, Johns Hopkins. Past: Finnish Defence Forces, Bellingcat, Microsoft, Nokia.
Eoghan @eoghanmacguire.bsky.social Journalist. Editor @Bellingcat.com. @jskstanford.bsky.social alum
Galen Reich @galen.reich.me.uk Bellingcat | Formerly BBC | PhD in Electrical Engineering | He/Him
๐ https://galen.reich.me.uk
Beau Donelly @beaudonelly.bsky.social Editor @bellingcat.com. Previously @thetimes.com, The Age & The Sydney Morning Herald. Author: The Woman Who Fooled The World.
beaudonelly.com
Pooja Chaudhuri @poojachaudhuri.bsky.social Researcher and trainer @bellingcat.com
Viktorija Ign @viktorija-ign.bsky.social 6Cs Rule: ๐ Communication, ๐ฑ Community, ๐บ๏ธ Culture, โ Coffee, ๐ฐ Cake, ๐ Cats | Community Builder & Strategist | bellingcat.com
Simon Bennetts @psiinon.bsky.social ZAP Project Lead
ZAP by Checkmarx @zaproxy.org The Worlds Most Popular Web App Scanner.
kingthorin_rm @kingthorin.bsky.social IT Sec guy, zaproxy co-lead, WSTG co-lead, VWAD co-lead, OWASP Ottawa volunteer, Hacโบ3r, supporter of oxford commas, #INTJ. (Opinions == mine) ๐
OWASP Juice Shop @owasp-juice.shop Probably the most modern and sophisticated insecure web application. Only we offer a 100% @owasp.org Top Ten incompliance guarantee! Skeets by @bkimminich.bsky.social
OWASP London Chapter @owasplondon.bsky.social #OWASP London Chapter
Follow us on X/Facebook/Meetup/Eventbrite/LinkedIN/YouTube. Mastodon: https://infosec.exchange/@owasplondon
๐ Webpage: https://owasp.org/london
๐ Meetup: https://meetup.com/OWASP-London
๐บ YouTube: https://youtube.com/OWASPLondon
OWASP Ottawa @owaspottawa.bsky.social The OWASP Chapter for Canada's Capital region.
https://owasp.org/ottawa/
Join us for monthly meetups discussing a variety of security topics.
PortSwigger Research @portswiggerres.bsky.social Web security research from the team at PortSwigger.
PortSwigger @portswigger.net We are a leading provider of software and learning on web security. We make Burp Suite and the Web Security Academy.
Dafydd Stuttard @dafyddstuttard.bsky.social Founder and Chief Swig at PortSwigger. Creator of Burp Suite and the Web Security Academy. Author of The Web Application Hacker's Handbook.
David Paterson @djpaterson.dev Software Engineer at PortSwigger and Man City season ticket holder
Sam Stepanyan @securestep9.bsky.social OWASP London Chapter Leader. #OWASP Global Board Member. OWASP #Nettacker Project Leader. #AppSec Consultant, #CISSP. Follow me on Twitter/X and Mastodon https://twitter.com/securestep9 https://infosec.exchange/@securestep9
Josh Grossman (tghosth ๐ป) @joshcgrossman.com Friendly AppSec Ghost ๐ป
https://appsecg.host
Dominique Righetto @righettod.eu ๐จโ๐ป AppSec enthusiast | ๐ถ Addicted to Shetland Sheepdogs | ๐ Open Source/AppSec/OWASP junkie | ๐ OWASP Secure Headers Project Leader.
๐ฉ Opinions mentioned are mine.
garthoid @garthoid.bsky.social Father,Husband,Software Security Architect, Ethical Hacker,Musician,& Karate Geek.OWASP Ottawa Chapter Leader. Trying to learn Kendo. Devious-Plan.com founder. He/Him
Mastodon is better @garthoid@infosec.exchange
๐๐จ๐ฆ
Tanya Janca | SheHacksPurple @shehackspurple.bsky.social Secure Code Trainer - Best-selling author of Alice and Bob Learn Secure Coding & Alice and Bob Learn Application Security. #AppSec she/her
https://shehackspurple.ca ๐ป
Mastering Burp Suite @mastering-burp.agarri.fr Tips and tricks for Burp Suite Pro ๐ ๏ธ
Not affiliated with @portswigger.net ยฉ๏ธ
Managed by @agarri.fr ๐ซ๐ท
Additional free resources ๐
http://hackademy.agarri.fr/freebies
Bjรถrn Kimminich @bkimminich.bsky.social IT Product Group Lead at Kuehne+Nagel; @owasp-juice.shop Project Leader; @owasp-de.bsky.social Chapter Co-Leader; @owasp.org Project Committee Chair; @magic.wizards.com Amateur Player @mull2five.bsky.social
Liran Tal @lirantal.com ๐ฆ Node.js Secure Coding: http://nodejs-security.com
๐ @GitHub Star
๐
@OpenJS Pathfinder award for Security
๐ฅ DevRel at @snyksec
Erlend Oftedal @webtonull.bsky.social Security researcher at Crosspoint Labs. AppSec. Tweets are my own and do not express the opinion of my employer. OWASP. retire.js
Jeremy Long @ctxt.bsky.social Builder, infosec, SCA and SAST enthusiast, blue team.
Founder of OWASP dependency-check.
https://github.com/sponsors/jeremylong
Dan @basic-123.bsky.social 
Gerald Benischke @beny23.github.io Maker, breaker and fixer of software. Adventures in #appsec and #agile: beny23.github.io he/him
SeanWrightSec @seanwrightsec.com Principal Application Security Engineer focused on all things #AppSec. Occasionally dabble in my own research. Also keen gamer and aspiring photographer.
Soroush Dalili ๐๐ @irsdl.bsky.social Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker, X: @irsdl
https://secproject.com/
https://soroush.me/
https://burpsuite.ninja/
Adriana Porter Felt @apf.bsky.social I like writing silly skeets, but that doesn't pay so I also make Google Chrome. mamรก, Eng Director, volunteer at Second Harvest. ๐บ๐ฒ๐จ๐ท
Twitter: @__apf__
Emily Stark @estark.bsky.social Encryption, HTTPS, certificates, web security, security UX, software engineering and management, TMI about parenting. Opinions are my own.
Eiji Kitamura / ใใผใ @agektmr.com Google Chrome DevRel Identity Tech Lead - Anything about browser identity features: passwords, OTPs, passkeys, identity federation, digital credentials, etc
Philippe De Ryck @philippederyck.bsky.social I help developers protect companies through better web security
Web Security Academy @websecacademy.bsky.social Free web security training from PortSwigger.
Koto @kkotowicz.bsky.social Security ninja wannabe / board game geek / photon catcher
Michal ล paฤek @spazef0rze.bsky.social In your web, securing your app. Hacker, webdev, speaker, engineer. Security shoptet.cz, ex-report-uri.com, ex-teenager. HTTPS = How To Transfer Private Sh๐ฉ. Also https://infosec.exchange/@spazef0rze
Marco Squarcina @minimalblue.bsky.social Senior Scientist @TU Wien / Web & Mobile Security / #drumandbass DJ
๐ฉ with @mhackeroni.bsky.social We_0wn_Y0u kukhofhackerei Team Austria
๐ https://minimalblue.com/
Michele Spagnuolo @miki.it ๐ผ: Staff Information Security Engineer at Google. ๐ ๏ธ: Rosetta Flash, BitIodine. ๐: web security, โ , โฟ, finance. Data is the most dangerous form of opinion.
Ben Stock @benstock.bsky.social Tenured Faculty @c-i-s-p-a.bsky.social Helmholtz Center for Information Security
Dag Flachet @dagflachet.bsky.social Co-founder of Codific. Professor and board member of the Geneva Business School. Doctorate in behavioral psychology. Entrepreneur and Appsec champion.
Louis Columbus @louiscolumbus.bsky.social VentureBeat contributor on cybersecurity; husband & dad; writer and speaker on AI, cybersecurity, ERP, and zero trust.
LinkedIn: https://www.linkedin.com/in/louiscolumbus/
VentureBeat: https://venturebeat.com/author/louis-columbus/
Sandy Carielli @sandycarielli.bsky.social VP & Principal Analyst at Forrester, covering #appsec. Post about security, the Muppets, #NHLBruins, my beagle. All opinions are my own. she/her
Grant Ongers @rewtd.bsky.social AppSec guy, OWASP member for life and general beardness.
Physics World @physicsworld.bsky.social News, views and information for the global physics community. physicsworld.com
puerco @puerco.mx Adolfo Garcรญa Veytia / Tech Lead Kubernetes SIG Release
Founder @carabiner.dev | @openssf.org Governing Board
Historian / dad / World Cyclist
Engineer working on #SBOM and other supply chain security stuff. Founder of @protobom.dev, OpenVEX, uServers :)
Luke Hinds @lukehinds.bsky.social Old Security Hack - Creator of https://sigstore.dev https://nono.sh - former distinguished engineer at Red Hat, now CEO of alwaysfurther.ai
OpenSSF @openssf.org Open Source Security Foundation (OpenSSF)
Together, we're securing the open source ecosystem
http://openssf.org
#OSSSecurity #OpenSSFCommunity
cpanato (aka comedordexis) @cpanato.dev - Grumpy
- Hipster SWE at @chainguard.bsky.social
- TOC CD Foundation
- Grumpy
- Tech Lead K8s SIG-Release
- OpenSourceDoer
- like to do lattes and cocktails and grill meat
- Grumpy
Mikael Barbero @mikael.barbero.tech Head of Security @ Eclipse Foundation
We build our computers (systems) the way we build our cities: over time, without a plan, on top of ruins โ Ellen Ullman
Eddie Knight @eddieknight.dev Securing open source software is good for everyone.
FINOS TOC; OpenSSF Baseline; CNCF TAG Security & Compliance
Aditya @adityasaky.bsky.social Software Supply Chain Security @bloomberglp.bsky.social | http://in-toto.io Maintainer | Building https://gittuf.dev | Prev. Ph.D. at NYU
Jason Hall @imjasonh.com World's Okayest Dad, pizza enthusiast, single-hyphenate, container nerd at Chainguard
Jon Johnson @jon.dag.dev gzip enthusiast