GitHub Security Lab✓ Add us as a preferred source on Google

Q: How much does GitHub Security Lab charge for a sponsorship?

GitHub Security Lab hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.

Q: How do I contact GitHub Security Lab for a brand deal or collaboration?

Send a paid deal or collab request right here on SocialDB — we notify GitHub Security Lab, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.

Q: How many followers does GitHub Security Lab have?

GitHub Security Lab has 407 followers on Mastodon.

Mastodon @githubsecuritylab@infosec.exchange

⚔ Compare ☆ Follow Own this channel?

🔄 Data last refreshed 12 days ago

🤝

Make a deal with GitHub Security Lab

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Followers

407

Account age

3 yrs

🎁 Free analysisfor GitHub Security Lab

🕵️Fake Followers CheckReal-audience % & bot risk→ 📊Engagement rateBenchmarked vs. peers→ 💰What they chargeFair sponsored-post price→

Known for

Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. Read more at https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/

9 views Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. Read more at https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/

Your mother tongue is the new programing language for creating exploits.
For maintainer month, we took inspiration from #OpenClaw and built ProdBot! An intentionally vulnerable agent wired up with MCPs, skills, agentic workflows, and multi-agent capabilities. You will learn from it, while having fun!
Play now at: gh.io/secure-code-game
Learn more: https://github.blog/security/hack-the-ai-agent-bui

3 views Your mother tongue is the new programing language for creating exploits. For maintainer month, we took inspiration from #OpenClaw and built ProdBot! An intentionally vulnerable agent wired up with MCPs, skills, agentic workflows, and multi-agent capabilities. You will learn from it, while having fun! Play now at: gh.io/secure-code-game Learn more: https://github.blog/security/hack-the-ai-agent-bui

What happens when you hand an AI agent its own tools, memory, and a path to production?
Season 4 of the Secure Code Game is live, and this time the target is agentic AI security.
Meet ProdBot. An AI agent built to be broken. It runs on MCP servers, skills, and multi-agent workflows, and every layer is a door someone could walk through. Your job is to find the cracks before an attacker does.
Play n

2 views What happens when you hand an AI agent its own tools, memory, and a path to production? Season 4 of the Secure Code Game is live, and this time the target is agentic AI security. Meet ProdBot. An AI agent built to be broken. It runs on MCP servers, skills, and multi-agent workflows, and every layer is a door someone could walk through. Your job is to find the cracks before an attacker does. Play n

📊 Post engagement

📊 Activity & format

Posting cadence

0.86 / week

A lower-frequency account — each post lands with more weight.

Content mix

Mostly text

Recent: 8 text · 1 image · 3 video.

Follower / following

204×

Follows 2 back. A strong ratio — an audience that follows them, not a follow-for-follow network.

Recent posts

View on Mastodon ↗

▶ 🔥 Top post Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. Read more at https://s… ★ 9

Hey bounty hunters! GitHub updates its bug bounty program to improve how the company partners with the security research community. The new structure is designed to reduce ambiguity, prioritize the areas of highest risk, and improve the sp… Are you in Krakow for EuroPython? Getting started with finding vulnerabilities and securing software can seem daunting, but doesn’t have to be. Join Sylwia Budzynska for “Introduction to security research. Find a CVE with CodeQL.” to learn… ★ 1 6 GitHub security settings every maintainer should enable this week. These won't make your project unhackable. Nothing will. What they do is close the easy doors... the ones attackers try first. Free, fast, and worth the few minutes it tak… ★ 1

▶ What happens when you hand an AI agent its own tools, memory, and a path to production? Season 4 of the Secure Code Game is live, and this time the target is agentic AI security. Meet ProdBot. An AI agent built to be broken. It runs on MCP… ★ 2 Attending BSides Vilnius? Don't miss 📌 @yarlob 's session "LLM-assisted vulnerability hunting: hype vs. reality" to hear about the practical experience of using LLM for finding vulnerabilities in OSS such as Signal or 7-Zip! 📅 June 4, 16:4… ★ 1 Who's at DevTalks? Join @jkcso and discover practical ways to use AI for security through 12 GitHub Copilot demos from secure coding, to informed supply chain decisions, and secure SDLC. 📅 June 4, 14:00 EEST 📍 Bucharest, Romania 👉 https:/…

Attending AI DevCon? Join Joseph Katsioloudes and discover practical ways to use AI for security through 12 GitHub Copilot demos from secure coding, to informed supply chain decisions, and secure SDLC. 📅 June 1, 10:00 AM BST 📍 London, UK &…

▶ Your mother tongue is the new programing language for creating exploits. For maintainer month, we took inspiration from #OpenClaw and built ProdBot! An intentionally vulnerable agent wired up with MCPs, skills, agentic workflows, and multi… ★ 3 On 25th April at 10AM, join @blazingwindsec for the workshop "Introduction to security research. Find a CVE with CodeQL" at the Linux Session organized by Akademickie Stowarzyszenie Informatyczne in Wroclaw, Poland! More information on t… Building with AI? 🤖 Then you won’t want to miss tomorrow’s @devoxxfr workshop with @xcorail and @jkcso — all about how to build robust AI-powered applications. Shall we play a Game? LLM Security in Practice https://m.devoxx.com/events/devo… Catch Shelby Cunningham on stage at CVE/FIRST VulnCon 2026 in Scottsdale, Arizona. Her panel, “Supply Chains and Malware Campaigns: Is CVE the Right Way to Name the Game?”, examines whether CVE is the right tool for tracking open-source su…

🐘 Community & instance

Home server

infosec.exchange

A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.

✅ Link-verified

Verified link

Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.

On Mastodon since

Nov 2022

Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.

👁️Averages 3 views per post.

📤Posts about 0.9× per week.

🕵️ Fake follower check

Estimated

52/100

Fair Credibility score

76%

Mixed Real audience

Medium Fake-follower risk

High Data confidence

Est. 76% real, active audience · Medium fake-follower risk.
Low engagement (~0.7% of followers engage each post) — a sign of an inflated or inactive audience.
Verified account.
Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

https://securitylab.github.com/

📸 Gallery

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

Chris :nixos: :GrapheneOS: 14%

scottymarinara 14%

Thilo, EE 🤘🏼⚛️ 🇪🇺🎗️🇺🇦🇵🇸 12%

Computer, HW & Retrocomputer 12%

Karl Schwartz, Artist advocate 11%

William Canna-bass 11%

More like this

Find more →

Mastodon ＋

Karl Schwartz, Artist advocate

@lymphomation@mastodon.social

407 Followers

Mastodon ＋

Thilo, EE 🤘🏼⚛️ 🇪🇺🎗️🇺🇦🇵🇸 ✓

@vintageproject@oldbytes.space

407 Followers

Mastodon ＋

Chris :nixos: :GrapheneOS:

@ryukurisu@fosstodon.org

407 Followers

Mastodon ＋

scottymarinara

@scottrossi@mastodon.social

407 Followers

Mastodon ＋

William Canna-bass

@jizzeletbass@kolektiva.social

407 Followers

Mastodon ＋

Computer, HW & Retrocomputer

@computer@mastodon.uno

407 Followers

Frequently asked questions

How much does GitHub Security Lab charge for a sponsorship?

GitHub Security Lab hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.

How do I contact GitHub Security Lab for a brand deal or collaboration?

Send a paid deal or collab request right here on SocialDB — we notify GitHub Security Lab, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.

How many followers does GitHub Security Lab have?

GitHub Security Lab has 407 followers on Mastodon.

Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove

GitHub Security Lab✓ Add us as a preferred source on Google

Make a deal with GitHub Security Lab

Known for

📊 Post engagement

📊 Activity & format

Recent posts

🐘 Community & instance

💡 Facts

🕵️ Fake follower check

About

📸 Gallery

🔀 Audience overlap

More like this

Frequently asked questions

✉ Message GitHub Security Lab

🎤 Event / appearance with GitHub Security Lab