The professional network for cybersecurity
Tunnyl is where security practitioners talk shop. A person reads every application, badges say exactly what was checked, and your feed is the people you chose, newest first.
Applications are read by a person, usually within two business days.
The problem
Recruiter InMail. Vendor pitches disguised as thought leadership. Engagement-farmed posts with zero technical depth. Your actual peers are silent.
X / Twitter
Algorithmically-amplified outrage. Bots everywhere. The real conversations happen in DMs you're not in. Attention is currency, accuracy is optional.
Discord / Slack
Valuable threads vanish in hours. No professional credibility layer. Twenty servers, none of them comprehensive. Knowledge doesn't accumulate.
What Tunnyl is
We would rather tell you exactly what Tunnyl checks than promise more than it can. Here is what that looks like.
01 — Reviewed membership
We ask what security work you do, and someone reads the answer. That keeps out most bots, vendors and audience-builders. Not all of them, so members can report anyone who slipped through.
02 — Checked, not claimed
A certification confirmed with its issuer reads "Certification verified". A confirmed work email reads as exactly that. Anything a member typed themselves is marked self-reported, and every profile shows what Tunnyl checked.
03 — Your feed
Posts from your connections and communities, in the order they were written. Switch to Top this week and reactions decide, counting for more from members whose credentials Tunnyl checked. Views and time spent never count. News comes from twelve named sources, including CISA, NVD and Project Zero.
04 — Proof of the work
Link your CTFtime team or HackerOne profile and prove it is yours with a code in its bio. Tunnyl shows what the source publishes, with the date it was read.
Security, honestly
You break things for a living, so we won't call Tunnyl unbreakable. This is what is in place today, and what we don't claim.
Found a vulnerability? Email [email protected].
Who it's for
Share techniques and build a reputation with people who understand what you do.
Stay current on threats, crowdsource solutions, connect with practitioners who've faced it.
Feeds from twelve security sources, and practitioners to discuss them with.
Talk shop with practitioners, and see what their credentials actually are.
Publish findings, discuss CVEs, and show your CTF and bug bounty record.
Framework discussions and peer advice from practitioners, not vendors.
How it works
One form: what security work you do. Company and a link are optional. No LinkedIn required. No follower counts.
Usually within two business days, and we email you either way. If it's a no, we say why, and you can apply again after 30 days.
Communities, security news, direct messages and a chronological feed. Add proof to your profile whenever you're ready.
Ready?
Growing carefully. Every application read by a person.
Apply for Access