tomcat✓ Add us as a preferred source on Google
🔄 Data last refreshed 2 hours ago
🤝
Make a deal with tomcat
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
76
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🎁 Free analysisfor tomcat
📊 Post engagement
Recent posts · likes + reposts
Jul 11latest
1
Avg engagement / post
1–1
Typical post (engagement)
1.3%
Engagement vs followers
89/100
Very consistent reach
Nov 2022
On Mastodon since
Half of recent posts land between 1 and 1 likes + reposts (median 1) — a dependable floor a sponsored post can count on.
🔥 Top post: CrashStealer uses a signed and Apple-notarized macOS dropper to · 2 likes + reposts
📊 Activity & format
Posting cadence
9.3 / week
Toots daily — consistently active for a campaign window.
Content mix
Mostly text
Recent: 12 text · 0 image · 0 video.
Follower / following
3.8×
Follows 20 back. A more reciprocal / networked account.
Recent posts
View on Mastodon ↗
🚨 A malware operator left its server wide open, exposing a 1,048-file phishing toolkit.
A live campaign used a fake Mexican government site and WebDAV to drop an in-memory infostealer. The recovered files point to an AI-assisted build-and-…
It appears the bridge TeleSwap had a $735K+ exploit on July 15, 2026 and still has not disclosed the incident publicly after five days.
Shortly after the suspicious outflows its Bitcoin hot wallet stopped processing transactions. Two hours…
🛑 Hugging Face, the world’s largest AI model repository, says an autonomous AI agent breached its production systems through a malicious dataset.
It accessed internal data and service credentials, then moved across several clusters through…
🕷 Bugs Alerts
━━━━━━━━━━━━━━━━━━━━━
🚨 New Vulnerability!
🆔 CVE ID:
CVE-2026-12228
📊 Severity: 🟠 HIGH
📈 CVSS Score: 8.7
📅 Published: 2026-07-18 21:17 UTC
📝 Description:
A stored cross-site scripting (XSS) vulnerability exists in the POST /a…
⚡ UPDATE: #wp2shell now has two CVEs, and a working proof-of-concept is public.
> CVE-2026-63030 breaks REST batch routing
> CVE-2026-60137 injects SQL
Chained, they give an anonymous attacker code execution on affected WordPress sites.
Ho…
🛑 URGENT - A single anonymous HTTP request can run code on an unpatched #WordPress 6.9 or 7.0 site, even on a default install with zero plugins.
The new wp2shell flaw sits in core and still has no CVE for scanners to match.
Affected releas…
🛑 Two Scattered Spider hackers have been sentenced to 5.5 years each for the £29 million TfL attack.
The intrusion left 148 systems inoperable, disrupted Dial-a-Ride and payment services, and forced all 27,000 employees into the office for…
⚠️ Researchers found raw LLM reasoning and an AI safety disclaimer left inside TuxBot v3 Evolution.
The unfinished IoT botnet packs 1,496 Telnet credential pairs and exploit code for more than 30 device families.
What already works: https:…
🔥 Microsoft patched a record 622 CVEs, including two exploited zero-days in SharePoint Server and AD FS.
The SharePoint flaw allows remote, unauthenticated privilege escalation. The AD FS bug lets authenticated attackers elevate privileges…
🚨 Four malware clusters targeted Pakistani police with PlugX, ShadowPad, Remcos, and Cobalt Strike.
At Balochistan Police, attackers used a hacked complaint portal to deliver malware.
Read the full report: https://thehackernews.com/2026/07…
🚨 Zimbra has fixed a critical stored XSS flaw in its Classic Web Client.
A crafted email could run malicious code when opened and expose mailbox information, session data, or account settings.
Read the full story on THN 🠖 https://thehacker…
🐘 Community & instance
Home server
infosec.exchange
A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.
✅ Link-verified
Verified link
Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.
On Mastodon since
Nov 2022
Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.
💡 Facts
🗓️Joined Mastodon in 2022 — 3 years ago.
👁️Averages 1 views per post.
📤Posts about 9.3× per week.
🕵️ Fake follower check
Estimated52/100
Fair
Credibility score
76%
Mixed
Real audience
Medium
Fake-follower risk
High
Data confidence
- Est. 76% real, active audience · Medium fake-follower risk.
- Low engagement (~1.3% of followers engage each post) — a sign of an inflated or inactive audience.
- Verified account.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
If olive oil comes from olives 🫒 where does baby oil come from? 🤔 🥸
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →
Mastodon
＋
BeerIsGood ✓
@beerisgood@infosec.exchange
76
Followers
Mastodon
＋
Finley
@rolerunner@dice.camp
76
Followers
Mastodon
＋
ISKA Nürnberg
@iska@mastodon.social
76
Followers
Mastodon
＋
Sébastien NOBILI ✓
@pipoprods@fosstodon.org
76
Followers
Mastodon
＋
⚓Blosch⚓
@blosch@norden.social
76
Followers
Mastodon
＋
Andi ✓
@hattmann@troet.cafe
76
Followers
Frequently asked questions
How much does tomcat charge for a sponsorship?
tomcat hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact tomcat for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify tomcat, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does tomcat have?
tomcat has 76 followers on Mastodon.
✉ Message tomcat
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with tomcat
Booking an event / appearance is a Pro feature. Upgrade to book tomcat for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ tomcat gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove