CISA Cyber engagement report
@CISACyber - 302K followers on X
Measured over 34 original posts from a 30-day window, last computed on September 5, 2026.
Engagement
A typical post picks up 53 interactions against 302K followers, an engagement rate of 0.018%. Measured over 34 original posts, its engagement rate beats 32% of 6,874 tracked accounts of a similar size, which puts it in the middle of its size range rather than at either end. Posts are seen about 10K times each, and 0.519% of those impressions turn into an interaction. That is about 3.38% of the follower count, which is the gap between an audience on paper and an audience in a timeline. Posting runs at about 1.2 post a day over the last 30 days, with activity on roughly 67% of days. Most posts go out around 17:00 UTC, and Tuesday is the busiest day of the week. Of the 34 posts sampled, 100% carry an image or video and 100% link out. The account's strongest tracked post pulled 208 interactions, about 3.9x its own typical post. Recurring topics include #cybersecurity, #infosec, #ics.
Measured over 34 original posts from a 30-day window, last computed on September 5, 2026. Recurring tags: #cybersecurity, #infosec, #ics.
Compared with accounts its own size
CISA Cyber's engagement rate beats 32% of the tracked X accounts closest to it in follower count (6,874 accounts, accounts of similar size (decile 7 of 10)). A percentile is spread evenly by construction, so 50 really is the middle of that group and 90 really is its top tenth.
On engagement per impression rather than per follower it beats 30% of the same group. When those two numbers disagree, the gap is about how far its posts travel rather than how people react to them.
Where this sits in the catalog
At 0.018%, CISA Cyber sits above the 25th percentile of the 68,576 accounts in this comparison. That places it in the below the median band, which runs 0.016% to 0.1%.
Show the percentile table
| Percentile | Engagement rate |
|---|---|
| 10th percentile | 0.002% |
| 25th percentile | 0.016% |
| 50th percentile | 0.1% |
| 75th percentile | 0.5% |
| 90th percentile | 2.09% |
| 99th percentile | 116.4% |
This ruler is the whole measured catalog, not a size-matched group: it shows where the raw rate falls across every account we can measure, all of which are large. For a like-for-like comparison, read the size-band percentile above instead. See how the bands are built
Posting timing
This account posts most often around 17:00 UTC, and Tuesday is its busiest day of the week. The bars below are the catalog-wide pattern, with this account's own busiest slot marked. They do not show how this account performs at each hour: we keep one aggregate per account, not one per hour, so that measurement does not exist in our data.
Show engagement by hour posted, utc as a table
| Hour (UTC) | Vs author median | Posts |
|---|---|---|
| 00:00 UTC | -1% | 89K |
| 01:00 UTC | -2% | 90K |
| 02:00 UTC | -3% | 88K |
| 03:00 UTC | -4% | 94K |
| 04:00 UTC | -5% | 76K |
| 05:00 UTC | -4% | 75K |
| 06:00 UTC | -5% | 86K |
| 07:00 UTC | -5% | 93K |
| 08:00 UTC | -4% | 108K |
| 09:00 UTC | -4% | 124K |
| 10:00 UTC | -3% | 129K |
| 11:00 UTC | -3% | 141K |
| 12:00 UTC | -3% | 154K |
| 13:00 UTC | -3% | 167K |
| 14:00 UTC | -4% | 173K |
| 15:00 UTC | -2% | 176K |
| 16:00 UTC | -3% | 171K |
| 17:00 UTC | -3% | 159K |
| 18:00 UTC | -2% | 149K |
| 19:00 UTC | -2% | 141K |
| 20:00 UTC | -1% | 131K |
| 21:00 UTC | 0% | 116K |
| 22:00 UTC | -2% | 100K |
| 23:00 UTC | -1% | 90K |
Show engagement by day of week as a table
| Day | Vs author median | Posts |
|---|---|---|
| Sunday | +5% | 393K |
| Monday | +1% | 483K |
| Tuesday | -2% | 520K |
| Wednesday | -3% | 472K |
| Thursday | -2% | 430K |
| Friday | -3% | 447K |
| Saturday | +2% | 393K |
Formats this account uses
Its own posting mix on the left, and what each of those formats does across every account we track on the right. Only formats where the effect clears our publish test appear here, so an empty row is a format we could not measure rather than one that does nothing.
| Format | This account | Catalog effect | 95% interval | Accounts behind it |
|---|---|---|---|---|
| Image or video | 100% of posts | +111% | +108% to +115% | 34K |
| Outbound link | 100% of posts | -41% | -42% to -40% | 32K |
| Typical length | - | no effect | -2% to -1% | 42K |
- 100% of this account's sampled posts carry an image or video. Across the catalog, posts with an image or video run 111% above the same accounts' other posts.
- 100% of its posts carry a link off X. Across the catalog, posts with an outbound link run 41% below the same accounts' other posts, so a large share of this account's output sits in the weakest bucket we measure.
- Its average post runs 252 characters, which falls in the 180 - 280 characters band. Across the catalog, posts of 180 to 280 characters match the same accounts' other posts almost exactly.
These are catalog-wide differences applied to this account's own posting mix, not a measurement of how each format performs for this account specifically. We keep one median per account, not one per format per account, so the second thing is not something this data can tell you.
Best tweets
- Sep 3, 20263.9x their median
Quantum computing advancements pose a real threat to public-key encryption. Our call to action with G7 partners urges orgs to inventory cryptographic assets, map dependencies, develop phased transition plans, & integrate PQC into procurement. Read more 🔑 https://t.co/VRhLvwLPg6 https://t.co/SkJOGkoXnF
- Aug 19, 20262.6x their median
Cyber threat actors are using internet scanning & AI-generated scripts to target Siemens S7 Series programmable logic controllers (PLCs) across #CriticalInfrastructure. Read our advisory for mitigations within the broader threat landscape of PLCs👉 https://t.co/cIHvUZgnGQ https://t.co/UX7hZvffTK
- Aug 18, 20262.6x their median
Medusa ransomware actors are using vulnerability announcements to exploit new CVEs before they’re patched. Read our updated advisory with @FBICyberDiv and @HHSgov for the latest on Medusa threat activity + detection & incident response guidance 👉 https://t.co/tUwR6hhTv6 https://t.co/8t65H75uzM
- Aug 26, 20261.8x their median
Cyber risk isn’t an IT problem; it’s a business & national security risk. Our review baselines the vulnerability landscape before AI-enabled discovery becomes widespread & shows the impact of #SecurebyDesign + KEV prioritization. Read more 📊 https://t.co/cQhtb5LuzK https://t.co/IjkEK5KWGE
- Aug 25, 20261.7x their median
Same tactics, different results. Our new advisory compares two red team assessments and highlights what drove faster detection and response, including key actions for alert tuning, SOC procedures, and cloud identity and application security 👉 https://t.co/FqlYBaTwps https://t.co/iKqrafQ8Af
- Aug 26, 2026
🛡️ We added 6 CVEs to our Known Exploited Vulnerabilities Catalog. Visit https://t.co/myxOwap1Tf & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec https://t.co/d6XNuh1Op1
- Aug 31, 2026
🛡️ We added 2 PaperCut NG/MF vulnerabilities to our KEV Catalog: CVE-2026-81578, a missing authentication for critical function vulnerability, and CVE-2026-82078, an unsafe reflection vulnerability. Visit https://t.co/myxOwap1Tf & apply mitigations to protect your org. https://t.co/w5JDfzw9SJ
- Aug 14, 2026
We implemented Gold Eagle to simplify the path from AI-enabled vulnerability discovery to remediation by streamlining triage, validation, & deduplication. Learn more about the software capability and how it augments VINCE: https://t.co/aCykLjU8zI https://t.co/MXKklkLy1q
- Aug 27, 2026
🛡️ We added ownCloud vulnerability CVE-2023-49105, Linux kernel vulnerability CVE-2026-53362 & JFrog Artifactory vulnerability CVE-2026-66384 to our KEV Catalog. Visit https://t.co/myxOwap1Tf & apply mitigations to protect your org from cyberattacks. #Cybersecurity https://t.co/m8GtYPbXsP
- Aug 17, 2026
📢 Stay informed on the latest vulnerabilities with @CISAgov's Vulnerability Bulletin & gain valuable insights into emerging threats. 💡Check out the latest updates: https://t.co/ZTZStmnajT #Cybersecurity #InfoSec #VulnerabilityManagement https://t.co/3ooU0Mr8QT
Ranked by total interactions across everything we have tracked for this account, which is a longer history than the 30-day window the rates above use. The multiple compares each post to this account's own median.
Recurring topics
The most frequent hashtags in the sampled posts. They describe what this account writes about; they are not a performance signal, and the catalog-wide breakdown on the hub shows how little hashtag count moves.
Buy or sell X accounts - escrow-protected
PlayerSells is an escrow marketplace for X accounts. Every deal is protected, with no middleman risk.
Reading these numbers
A typical post picks up 53 interactions against 302K followers, an engagement rate of 0.018%. Measured over 34 original posts, its engagement rate beats 32% of 6,874 tracked accounts of a similar size, which puts it in the middle of its size range rather than at either end. Posts are seen about 10K times each, and 0.519% of those impressions turn into an interaction. That is about 3.38% of the follower count, which is the gap between an audience on paper and an audience in a timeline. Posting runs at about 1.2 post a day over the last 30 days, with activity on roughly 67% of days. Most posts go out around 17:00 UTC, and Tuesday is the busiest day of the week. Of the 34 posts sampled, 100% carry an image or video and 100% link out. The account's strongest tracked post pulled 208 interactions, about 3.9x its own typical post. Recurring topics include #cybersecurity, #infosec, #ics.
- What is CISA Cyber's engagement rate on X?
- CISA Cyber (@CISACyber) has an engagement rate of 0.018%, based on the median interactions across 34 original posts from the last 30 days against 302,142 followers. Replies, reposts and quote-posts of other people are excluded from that sample.
- Is that a good engagement rate?
- At 0.018%, CISA Cyber sits above the 25th percentile of the 68,576 accounts in this comparison. Those comparison accounts are all large ones, because our scanning cadence is weighted towards big accounts, so this is a ranking among peers of similar scale rather than a ranking across X.
- Does @CISACyber have real engagement?
- Its engagement rate beats 32% of the tracked X accounts closest to it in follower count (6,874 accounts), which puts it in the middle of its size range group. Ranking inside a size band matters because engagement rate falls as accounts grow, so a raw rate would mostly re-measure the follower count. It is a starting point for a look at follower quality, not a verdict on it.
- When does @CISACyber post?
- Most posts go out around 17:00 UTC, and Tuesday is its busiest day, at roughly 1.17 posts per day across the measured window.