
TryHackMe Co-founder ($30M+ ARR). User retention is everything.
Joined October 2012
- Tweets1.6K
- Following293
- Followers3.9K
- Likes1.1K
Pinned Tweet
"Who TryHackMe is" (youtu.be/aH0RMysu9lI).
We have quite an intense culture, it's not for everyone - but it means everyone here is so talented and hard working.
This video from our TA team captures just how impressive our people are. When I look back at what we've built and achieved this year, no company our size comes close.
If you clock watch at work, don't love Mondays, and finish at 5 on the dot, you're in the wrong job. If what you watch excites you, we're hiring (link in comments).
Ben Spring retweeted
Your manager might finally be useful 👀Get them to join our FREE Blue Team readiness webinar and score 2 BONUS prize tickets in our Strange & Unusual CTF! 🗓️ 26 Oct | 3 PM GMT
They learn. You get more chances to win. 🤝
🔗 Save their seat! luma.com/984k5d6v?utm_source…
Ben Spring retweeted
We’re hosting a live webinar next Thursday, 22nd Oct at 9:00 AM EDT / 2:00 PM BST, on Hacking & Securing Apps Where Devs Ship AI Written Code.
@springjben and @KevalJagani1 will cover the vulnerabilities AI tends to introduce, why it happens, and how to secure them.
Register now, link in comment 👇
Ben Spring retweeted
🚨 BLUE TEAMERS, THIS ONE'S FOR YOU 🚨 A NEW & EXCLUSIVE Blue Team CTF is coming to TryHackMe. Four simulators. Five days. Over $40,000 in prizes.
And absolutely nowhere to hide 😈
Tag your dream team below and join in ▶️ tryhackme.com/downtime?utm_s…
Ben Spring retweeted
Jira integration is now live on NoScope.
Every finding now syncs directly to the Jira dashboard, with severity, evidence and remediation steps attached to each ticket.
Ben Spring retweeted
We tested JEV and Grok 4.7 on 200 cases to see how well each catches harmful agent actions before they run. JEV answered in 324ms vs 16.44s for Grok, at about $0.084 vs $3.79 per 1,000 checks. Grok was more accurate, and the full numbers are in the post.
An AI agent’s next command could find a vulnerability or cause an outage. Before it runs, a guardrail has to make a decision: allow or block.
We wanted to understand where decision models fit into that process.
Can they catch harmful actions quickly enough to check an agent’s next step?
We compared JEV with Grok 4.7 on 200 synthetic cases, repeated three times per model. That’s 1,200 checks covering data deletion, credential leaks, service disruption and actions outside the agreed scope.
We measured three things:
Accuracy: Grok made more accurate decisions on the checks it completed, although some requests timed out.
Speed: JEV’s median response was 324 milliseconds, compared with 16.44 seconds for Grok.
Cost: About $0.084 per 1,000 checks for JEV versus $3.79 for Grok, using published pricing and reported usage respectively. These are different calculations, not verified invoice totals.
The examples show why context matters. In one case, a routine status check would replace authentication keys and sign users out. Both models caught the risk when given the application’s behavior.
This is a research experiment with synthetic cases. It does not measure NoScope’s production guardrails.
At NoScope, we combine the strengths of different approaches to stop harmful actions as effectively and efficiently as possible. Research like this helps us evaluate what each approach can contribute.
Read Using JEV for Security Guardrails for the results, limitations and concrete examples: noscope.com/blog/jev-agent-g…
Ben Spring retweeted
Just back from an amazing work trip in Malta with the @trynoscope and @tryhackme team.
We had deep convos on cyber in 5y, how AI changes it, and getting our customers ready for that shift
We had some intense days (and nights) building. We're dropping some insane research soon!
Ben Spring retweeted
Hold an OSCP+? Your PT2 exam is on us 🔓 We're giving away 100 free exam vouchers to certified pentesters and all we ask for is an honest public review.
Fill in the form to enter. Share this with an OSCP+ holder who needs to know 👊 ▶️ forms.gle/sasur1sfR1xsHzeK8
September 20 at 23:59 PM (UK time)
Ben Spring retweeted
Salesforce just listed SAL1 (TryHackMe’s entry level defensive certification) as a recognised cert for their Associate Incident Responder role. That's not just a milestone for TryHackMe. It's proof that the skills you're building here are the ones the industry is hiring for. If you're working toward SAL1, this is your sign to keep going. Go check it out 👉 linkedin.com/jobs/view/44603…
Ben Spring retweeted
Earn $5000+ & build your personal brand with TryHackMe's 8 million users by teaching live classes.
We're looking for industry practitioners to run live classes on TryHackMe. These are small, instructor-led sessions (30-45 people) that run from a few hours to a multi-week programme. You run the class with TryHackMe and we handle promotion, charging $200-$850 per seat (depending on topic and audience).
TryHackMe's audience consists of Fortune 500 companies, governments, and aspiring practitioners. There's existing demand for live classes, and we want to partner with experts to deliver them.
Whats in it for you:
💰 Earn a minimum of $5k per class
🎤 Build your personal brand across TryHackMe's 8M global security community
🪖 Share your war stories and shape other practitioners' careers
Who we're looking for:
▪️ Practitioners, managers, CISOs, or anything in between
▪️ People with real war stories worth sharing
▪️ (Optional) Experience at a well-known company
If you're interested, apply here: lnkd.in/eVUTpWCb
Know someone who'd make a great instructor? Tag them.
Ben Spring retweeted
New session alert!
⚡ Fight Fire With Fire: AI Pentesting in 30 Min
📅 Sep 8 | Free | Lucas Romano (SOC Manager @ Cequence, Previously Cisco and NSA)
Register free 👉 luma.com/tryhackme-muqx?utm_…
Ben Spring retweeted
AI pentesting isn't just prompt injection. You can learn more about AI security through our Live 1-Day Workshop, "Bash the Bot: AI Pentesting in a Day", taught by:
🧠 Max Robertson; built TryHackMe's AI Security Learning Path & AI1 cert
🧠 Christian Urcuqui; TryHackMe's content engineer & Cyber AI researcher
Sep 3, 2026 · Online on Zoom
luma.com/pfpgt4mw?utm_source…
Swipe through for more info➡️
TryHackMe.com was $10
NoScope.com was $35k
Ben Spring retweeted
We asked a Gitea server for a token we had no business getting.
It said 200 OK.
Here's how NoScope's AI agent found a 4-year-old flaw that exposed private container images on ~30,000 servers 🧵
Ben Spring retweeted
WordPress powers 500M sites. CVE-2026-63030 gives attackers an unauthenticated path to remote code execution. This vulnerability was discovered using a GPT prompt and $25 by a security engineer with 3 years of experience. Not a nation-state, not a specialist research team. WP2Shell is live. 👉 tryhackme.com/room/wordpress…
Ben Spring retweeted
Something I told 14 yo: People are going to stop reading books. I wish this wasn't so, but I fear it is. The silver lining in this cloud is that if you're one of the few people who still read, you'll have a huge advantage over everyone else.







































