Post once.
Land in eleven publications.
A creator network built for cybersecurity and privacy. You earn commission on security hardware, compliance workbooks and merch — and every piece you make gets syndicated across our publications, newsletter and daily podcast.
No follower minimum. No exclusivity. Approval is usually same-day.
- → breached.company
- → compliancehub.wiki
- → hackernoob.tips
- → scamwatchhq.com
- → myprivacy.blog
- → secureiot.house
- → secureiotoffice.world
- → securitycareers.help
- → cannasecure.tech
- → cryptoimpacthub.com
- → cyberbrief.news
- → CISO Insights
Two kinds of payment.
Most affiliate programs give you a link and wish you luck. We own the publications, so we can pay you in audience as well as cash.
Commission
Up to 40% on digital products, recurring on memberships, and per-sale on hardware and merch. One dashboard, one payout, whatever you sold and wherever you sold it.
Distribution
Your work gets clipped and syndicated across our publications, the newsletter and the podcast — with your name and a link back. Most creators find this is worth more than the commission.
Hardware to review
Security keys, data blockers, privacy laptops and mini PCs, sent to you to keep. Allocation is based on audience fit, not follower count.
Three lanes, three mechanics.
These look like one programme and they are not. Running a single mechanic across all three is the mistake that makes creators feel underpaid and makes the maths stop working — so we keep them apart, on one account and one ledger.
Affiliate
Paid per transactionProducts. Self-serve, open signup, one code and one link, paid on the sale. Zero relationship overhead — it scales to hundreds of people and it is the wrapper everything else sits inside. Every approved creator gets this lane.
- ›Open signup, same rates for everyone
- ›Code + tracked link across the whole catalog
- ›Live offer feeds from ciso.coupons and ciso.promo
- ›Paid on cleared transactions, monthly
Creator
Paid per placement, or in distributionAmplification. A creator who posts a breach explainer is not driving a cart — they are driving audience into the funnel, and paying them per sale would price that wrong. So this lane pays in reach, gear, bylines and podcast slots, or a flat fee per placement. Smaller roster, higher touch, invited.
- ›Flat fee per brand placement, quoted per creator
- ›Syndication across 11 publications with your byline
- ›Review hardware, podcast slots, co-created pieces
Referral partner
Paid on closed-wonServices. A completely different animal — assessments, vCISO, VRM and due-diligence work close over weeks against a scope, not a cart. It runs on a separate agreement, pays on first-year contract value once the deal is won, and is mostly how working practitioners participate.
- ›10–15% of first-year ACV, paid on closed-won
- ›Separate agreement — not the affiliate terms
- ›Check your employer’s outside-income policy first
One application covers all three. Everyone approved starts on the affiliate lane; the creator roster and the referral agreement are added when they fit, and you can sit on all three at once. The affiliate programme is the same catalog and the same ledger if you would rather just take a code and skip the roster entirely.
Rates are set by margin, not by tier.
Everyone gets the same rate on the same product from day one. Nothing is gated behind a follower count — but the rate does differ by product, because the margin does.
| Lane | Product | Rate | Paid on |
|---|---|---|---|
| Affiliate | Compliance workbooks & policy templatesciso.diy · cyberpolicy.shop | 35–40% | Sale, released immediately |
| Affiliate | Memberships & marketplace credits | 20–25% | Recurring, 12 months |
| Affiliate | Desk mats, posters, apparelsecuritybydesign.shop | 15–20% | Sale, after return window |
| Affiliate | Security hardware, privacy laptops & mini PCsNitrokey · NovaCustom | Quoted per product | Sale, after return window |
| Creator | CyberAdX placement for a partner brand | Flat fee | Per campaign, quoted per creator |
| Referral | Services referral — assessments, vCISO, VRM | 10–15% first-year ACV | Closed-won |
Why hardware is quoted per product
Commission here is a share of contribution margin — price minus landed cost including duty and freight, marketplace referral fee, processing, shipping subsidy and returns reserve — never a flat share of revenue. What changes the answer most is who is actually selling the thing.
When it's us, the rate is generous whether you buy on securitygadgets.shop or find the same listing on Amazon, eBay or Etsy — those marketplaces take a referral fee out of our margin, so the rate drops a few points, but it's still our margin to share. When the vendor sells it themselves and we're only the affiliate, all we receive is the commission their programme pays us, and your share comes out of that much smaller number. Same product, same price, and the two cases are several times apart — which is why the rate is published per product rather than per category.
What that means for you
Your rate is published per product before you promote it, and it does not get cut retroactively on sales you already made. When our landed cost moves, the rate moves forward from a dated change we tell you about — it does not quietly get absorbed. The upside of the discipline is that we can afford to keep paying: a programme that prices commission above margin stops paying eventually, usually without warning.
Attribution runs on our own first-party pixel rather than third-party cookies, so your referrals still track when your audience blocks trackers — which, given who watches you, most of them do.
If you can point at a real security problem, that referral is worth more than a cart.
Practitioners in the audience usually can't promote their way to a big number — but they know which organisations need an assessment. That's the third lane, and it pays on a different clock.
10–15% of first-year ACV
Paid on closed-won, not on a lead or a meeting. On a typical engagement that is worth more than a year of catalog commission.
A separate agreement
It isn't the affiliate terms and it isn't the creator roster. Deal registration, a named opportunity, and a defined protection window so two people can't claim the same account.
What qualifies
Assessments and pentest, physical security, vCISO and fractional leadership, VRM, M&A cyber due diligence — the CISO Marketplace services catalog.
One caution, because it matters more here than anywhere else on this page. If you work in security full time, referral income against your employer's customers or vendors is exactly the kind of thing an outside-income policy exists to govern. Check yours before you register a deal, not after. We would rather lose the referral than put you in front of your own compliance team.
Two feeds of live offers, not just a product list.
Beyond the catalog you get two running streams of things worth posting about — one is member savings, the other is vendor deals. Both are tracked to your code.
Member savings across the ecosystem
Curated member-benefit discounts — most unlock with a CISO Marketplace membership, some are open to everyone. These redeem on our own checkout, so the economics are ours end to end and the commission is a share of real margin.
The natural creator angle is the membership itself: at 20–25% recurring for twelve months, one member who stays is worth more than a dozen one-off product sales.
Live vendor and partner deals
Cybersecurity deals from sourcing partners, CyberAdX network vendors and hardware brands. Some convert on our checkout; most send the buyer to the vendor, where the partner network reports the sale back to us.
Rates on these are a share of what the vendor programme pays us, so they are lower than digital and quoted per deal. They clear on the network's confirmation rather than instantly — worth knowing before you plan around one.
If a deal and your code land on the same cart
Every discount lowers the price, and commission is drawn from what's left — so a member coupon stacked on a vendor deal stacked on your code can take a sale underwater. Each product carries a stacking rule, published with its rate: offers combine, or the best single offer wins and you still keep attribution. You keep the credit for the referral either way; what changes is the amount, and you can see the rule before you post.
Where your work ends up.
These are our own properties — not a media buy, not rented placement. When we syndicate you, it runs on infrastructure we control.
Application to first link in ten minutes.
Apply
A short form about where you post, who watches you, and what you'd want to promote. Under five minutes. Most applications are approved the same day.
Get your code and catalog
One tracked link and one discount code that work across everything we sell — hardware, workbooks, merch, memberships. One ledger, one payout.
Post whatever you want
No scripts, no approval queue, no mandated talking points. We send a monthly creative pack — hooks, b-roll, product shots — if you want a starting point. Ignore it freely.
We amplify it
Your post gets clipped and syndicated across the network with attribution. You keep the original, we widen the reach.
Get paid, and get asked
Monthly payouts by transfer or store credit at 1.25× value. Once you're converting, you become eligible for review hardware and for paid placements from partner brands.
Where we stand on synthetic content.
Our audience is the most likely on the internet to spot an undisclosed AI persona and say so publicly. We'd rather publish the rule than get caught by it.
- Using AI tools is fine.
- AI editing, generated b-roll, script assistance, synthetic voice — these are production techniques. If your name and reputation are behind the account, use whatever tools you like.
- Fully synthetic personas can earn commission, but are never sold as endorsements.
- An account with no accountable human behind it is welcome to be an affiliate. It will not be presented to a partner brand as a human recommendation. We flag it and we say so.
- We run AI-produced content on our own channels, and we label it.
- Some CyberAdX content is AI-generated. It is disclosed as ours, and it is never counted as third-party endorsement in anything we sell.
- Affiliate relationships get disclosed on every post.
- FTC endorsement rules and their local equivalents apply to you and to us. It's in the agreement, and we'd enforce it even if it weren't.
This is the creator-facing half of one rule that governs everything we publish: synthetic presents, human testifies. The full standard — per-platform disclosure, what we never generate, and the terms every SOW carries — is in the AI & synthetic media policy.
Creator placements, on the same rate card as everything else.
Most agencies can book you cybersecurity creators. None of them also own the publications those creators get syndicated into. A campaign here runs across both at once, measured on one attribution chain.
Creator placements
Practitioner-led video, shorts and posts from creators matched on audience composition rather than follower count. Quoted per creator.
Publication & newsletter
Sponsored articles, hands-on reviews and display across eleven owned properties, served first-party so ad blockers and DNS filtering don’t erase your impressions.
Vendor pricing →Bundled campaigns
Creator, publication and podcast in one package, on one report, with attribution from first view through to purchase.
Campaign packages →Human creators or synthetic presenters — you can buy either, and most brands buy both
A creator endorsement means a named person actually used the product. A synthetic presenter states sourced facts at volume and never claims experience. They do different jobs: creators carry credibility, presenters carry consistency and scale. Production for the synthetic half is scoped separately.
Before you apply.
Is there a follower minimum?+
No. A creator with six thousand followers whose audience already owns hardware keys outsells a career channel with two hundred thousand, every time. We match on audience, not size.
Do I have to be exclusive?+
No. Promote whoever you want. We only ask that you tell us about arrangements that would directly conflict, so we don't send you a brief you can't accept.
Who decides what I post?+
You do. We send optional creative packs and we'll tell you what's converting, but there's no approval queue and no required script. Brief-only creators tend to perform better here anyway.
How do I get review hardware?+
Sample allocation opens after your first conversion, and it's scored on audience fit, posting consistency and whether you already film hardware. Stock is limited and genuinely allocated, not sprayed.
When and how do I get paid?+
Monthly, by bank transfer or PayPal, once you clear the minimum. You can also take store credit at 1.25× the cash value if you'd rather have product.
Do you take a cut of brand deals you send me?+
Yes — that’s how the network side works, and the rate is in the agreement before you accept any placement. Direct deals a brand brings you outside the network are yours entirely.
I work in security full time. Is that a conflict?+
Often not, but check your employer's outside-income policy first. Practitioners are also who we approach about referring assessment and advisory work, which is a separate agreement and pays on closed business.
Tell us who watches you.
Five minutes. No follower minimum, no exclusivity, no call required. If it's a fit you'll have your link the same day.