Back to @CISACyber's profile

CISA Cyber engagement report

@CISACyber - 309K followers on X

Measured over 33 original posts from a 30-day window, last computed on October 18, 2026.

Engagement

Middle of its size range
Per follower
0.015%
of 309K followers
Per impression
0.539%
8.7K views on a typical post
Reach
2.87%
of its followers see a post
Typical post
47
interactions (median)
Saved
0.069%
6 bookmarks on a typical post
Posting rate
1.3/day
active 60% of days
Peak time
19:00 UTC
Friday

A typical post picks up 47 interactions against 309K followers, an engagement rate of 0.015%. Measured over 33 original posts, its engagement rate beats 29% of 21,185 tracked accounts of a similar size, which puts it in the middle of its size range rather than at either end. Posts are seen about 8.7K times each, and 0.539% of those impressions turn into an interaction. That is about 2.82% of the follower count, which is the gap between an audience on paper and an audience in a timeline. Posting runs at about 1.3 post a day over the last 30 days, with activity on roughly 60% of days. Most posts go out around 19:00 UTC, and Friday is the busiest day of the week. Of the 33 posts sampled, 97% carry an image or video and 100% link out. The account's strongest tracked post pulled 216 interactions, about 4.6x its own typical post. Recurring topics include #cybersecurity, #infosec, #ics.

Measured over 33 original posts from a 30-day window, last computed on October 18, 2026. Recurring tags: #cybersecurity, #infosec, #ics.

Compared with accounts its own size

CISA Cyber's engagement rate beats 29% of the tracked X accounts closest to it in follower count (21,185 accounts, accounts of similar size (decile 9 of 10)). A percentile is spread evenly by construction, so 50 really is the middle of that group and 90 really is its top tenth.

On engagement per impression rather than per follower it beats 28% of the same group. When those two numbers disagree, the gap is about how far its posts travel rather than how people react to them.

Where this sits in the catalog

At 0.015%, CISA Cyber sits above the 10th percentile of the 212,741 accounts in this comparison. That places it in the bottom 25% band, which runs below 0.025%.

p100.004%
p250.025%
p50 (median)0.146%
p750.697%
p902.61%
p9982.8%
Engagement rate as a share of followers, across the 212,741 accounts we have scanned enough to measure. The axis is logarithmic, because the top and bottom of this population are about 22,375 times apart and a linear axis would flatten everything below the median into a single point.
Show the percentile table
Engagement rate percentiles
PercentileEngagement rate
10th percentile0.004%
25th percentile0.025%
50th percentile0.146%
75th percentile0.697%
90th percentile2.61%
99th percentile82.8%

This ruler is the whole measured catalog, not a size-matched group: it shows where the raw rate falls across every account we can measure, all of which are large. For a like-for-like comparison, read the size-band percentile above instead. See how the bands are built

Posting timing

This account posts most often around 19:00 UTC, and Friday is its busiest day of the week. The bars below are the catalog-wide pattern, with this account's own busiest slot marked. They do not show how this account performs at each hour: we keep one aggregate per account, not one per hour, so that measurement does not exist in our data.

Engagement by hour posted, UTCTwenty-four bars, one per UTC hour. Each bar shows how posts published in that hour compare with their own authors' median engagement. Bars above the centre line ran higher than the median, bars below ran lower. A marker flags Busiest hour: 19:00 UTC.
0003060912151821
Above the authors' own mediansBelowScale: plus or minus 111%Busiest hour: 19:00 UTC
Show engagement by hour posted, utc as a table
Engagement by hour posted, UTC
Hour (UTC)Vs author medianPosts
00:00 UTC-1%89K
01:00 UTC-2%90K
02:00 UTC-3%88K
03:00 UTC-4%94K
04:00 UTC-5%76K
05:00 UTC-4%75K
06:00 UTC-5%86K
07:00 UTC-5%93K
08:00 UTC-4%108K
09:00 UTC-4%124K
10:00 UTC-3%129K
11:00 UTC-3%141K
12:00 UTC-3%154K
13:00 UTC-3%167K
14:00 UTC-4%173K
15:00 UTC-2%176K
16:00 UTC-3%171K
17:00 UTC-3%159K
18:00 UTC-2%149K
19:00 UTC-2%141K
20:00 UTC-1%131K
21:00 UTC0%116K
22:00 UTC-2%100K
23:00 UTC-1%90K
Engagement by day of weekSeven bars, one per weekday, Sunday first. Each bar shows how posts published on that day compare with their own authors' median engagement. Bars above the centre line ran higher than the median, bars below ran lower. A marker flags Busiest day: Friday.
SunMonTueWedThuFriSat
Above the authors' own mediansBelowScale: plus or minus 111%Busiest day: Friday
Show engagement by day of week as a table
Engagement by day of week
DayVs author medianPosts
Sunday+5%393K
Monday+1%483K
Tuesday-2%520K
Wednesday-3%472K
Thursday-2%430K
Friday-3%447K
Saturday+2%393K
See what moves engagement across the whole catalogWhat counts as a good engagement rate at this size

Formats this account uses

Its own posting mix on the left, and what each of those formats does across every account we track on the right. Only formats where the effect clears our publish test appear here, so an empty row is a format we could not measure rather than one that does nothing.

This account's posting mix compared with catalog-wide effects
FormatThis accountCatalog effect95% intervalAccounts behind it
Image or video97% of posts+111%+108% to +115%34K
Outbound link100% of posts-41%-42% to -40%32K
Typical length-no effect-2% to -1%42K
  • 97% of this account's sampled posts carry an image or video. Across the catalog, posts with an image or video run 111% above the same accounts' other posts.
  • 100% of its posts carry a link off X. Across the catalog, posts with an outbound link run 41% below the same accounts' other posts, so a large share of this account's output sits in the weakest bucket we measure.
  • Its average post runs 255 characters, which falls in the 180 - 280 characters band. Across the catalog, posts of 180 to 280 characters match the same accounts' other posts almost exactly.

These are catalog-wide differences applied to this account's own posting mix, not a measurement of how each format performs for this account specifically. We keep one median per account, not one per format per account, so the second thing is not something this data can tell you.

Best tweets

  • Sep 3, 20264.6x their median

    Quantum computing advancements pose a real threat to public-key encryption. Our call to action with G7 partners urges orgs to inventory cryptographic assets, map dependencies, develop phased transition plans, & integrate PQC into procurement. Read more 🔑 https://t.co/VRhLvwLPg6 https://t.co/SkJOGkoXnF

    1524810613K viewsView on X
  • Oct 8, 20264.0x their median

    Chinese government-linked threat actors enabled by the Integrity Technology Group are using automated & hands on hacking tools to target #CriticalInfrastructure + orgs worldwide, exfiltration data & establish persistence. Read our advisory w/@FBICyberDiv 👉https://t.co/5oBrX19ka8 https://t.co/L4jIsZTWFf

    128467512K viewsView on X
  • Sep 15, 20263.5x their median

    JUST RELEASED: Our finalized interagency report with @NIST shares technical recommendations for safeguarding the identity tokens & assertions that underpin single sign-on, federation, & application programming interface-based access scenarios. More 👉 https://t.co/VWA0Pvn52B https://t.co/8WsgIh691q

    120372622K viewsView on X
  • Sep 15, 20263.4x their median

    We’ve updated our guidance with @ASDGovAU & partners on Microsoft Active Directory compromises—including expanded sections on detecting DCSync compromise & shadow credentials + new attack methods. Read it 👉 https://t.co/IzzXJXLoYZ https://t.co/pKvBXxznFq

    113412214K viewsView on X
  • Oct 14, 20263.0x their median

    🚨 We added Ivanti Connect Secure vulnerability CVE-2026-104935 to the KEV Catalog after observed exploitation. A remote attacker could bypass authentication to execute commands, steal credentials, and exfiltrate data. Update now and review our Alert. 🔗 https://t.co/2PVRlm2P4B https://t.co/7jHAwbBfyz

    101345112K viewsView on X
  • Aug 19, 20262.9x their median

    Cyber threat actors are using internet scanning & AI-generated scripts to target Siemens S7 Series programmable logic controllers (PLCs) across #CriticalInfrastructure. Read our advisory for mitigations within the broader threat landscape of PLCs👉 https://t.co/cIHvUZgnGQ https://t.co/UX7hZvffTK

    79488312K viewsView on X
  • Aug 18, 20262.9x their median

    Medusa ransomware actors are using vulnerability announcements to exploit new CVEs before they’re patched. Read our updated advisory with @FBICyberDiv and @HHSgov for the latest on Medusa threat activity + detection & incident response guidance 👉 https://t.co/tUwR6hhTv6 https://t.co/8t65H75uzM

    9532929.3K viewsView on X
  • Oct 16, 20262.9x their median

    We’ve released 10 practices developed w/@NIST & partners for managing super intelligence (SI) control incidents that occur during training & evaluation—to include restricting access & strengthening containment before resuming agent activity. Read here 👉 https://t.co/8HqcpapBsZ https://t.co/eY0M4k4vRb

    85331159.2K viewsView on X
  • Sep 8, 20262.7x their median

    Industrial-Scale AI distillation campaigns are targeting U.S. frontier AI models using subscription exploitation, centralized request routing, metadata sanitization, & more. Our joint advisory with @NSAGov + @FBI outlines recommended actions. Read more 👉 https://t.co/MKg6YQ84o5 https://t.co/2oSGMms2nj

    84314611K viewsView on X
  • Sep 16, 20262.2x their median

    Looking for practical ways to improve detection? Our new guidance explains how cyber decoys like tripwires & honeytokens can help defenders detect & disrupt malicious activity early in the intrusion lifecycle. Read it here 🔗 https://t.co/s3H2BQMtJ6 https://t.co/5mO7aIqVP1

    81221111K viewsView on X

Ranked by total interactions across everything we have tracked for this account, which is a longer history than the 30-day window the rates above use. The multiple compares each post to this account's own median.

Recurring topics

#cybersecurity#infosec#ics#criticalinfrastructure#cve

The most frequent hashtags in the sampled posts. They describe what this account writes about; they are not a performance signal, and the catalog-wide breakdown on the hub shows how little hashtag count moves.

Buy or sell Twitter (X) accounts - escrow-protected

PlayerSells is an escrow marketplace for Twitter (X) accounts. Every deal is protected, with no middleman risk.

Reading these numbers

A typical post picks up 47 interactions against 309K followers, an engagement rate of 0.015%. Measured over 33 original posts, its engagement rate beats 29% of 21,185 tracked accounts of a similar size, which puts it in the middle of its size range rather than at either end. Posts are seen about 8.7K times each, and 0.539% of those impressions turn into an interaction. That is about 2.82% of the follower count, which is the gap between an audience on paper and an audience in a timeline. Posting runs at about 1.3 post a day over the last 30 days, with activity on roughly 60% of days. Most posts go out around 19:00 UTC, and Friday is the busiest day of the week. Of the 33 posts sampled, 97% carry an image or video and 100% link out. The account's strongest tracked post pulled 216 interactions, about 4.6x its own typical post. Recurring topics include #cybersecurity, #infosec, #ics.

What is CISA Cyber's engagement rate on X?
CISA Cyber (@CISACyber) has an engagement rate of 0.015%, based on the median interactions across 33 original posts from the last 30 days against 309,393 followers. Replies, reposts and quote-posts of other people are excluded from that sample.
Is that a good engagement rate?
At 0.015%, CISA Cyber sits above the 10th percentile of the 212,741 accounts in this comparison. Those comparison accounts are all large ones, because our scanning cadence is weighted towards big accounts, so this is a ranking among peers of similar scale rather than a ranking across X.
Does @CISACyber have real engagement?
Its engagement rate beats 29% of the tracked X accounts closest to it in follower count (21,185 accounts), which puts it in the middle of its size range group. Ranking inside a size band matters because engagement rate falls as accounts grow, so a raw rate would mostly re-measure the follower count. It is a starting point for a look at follower quality, not a verdict on it.
When does @CISACyber post?
Most posts go out around 19:00 UTC, and Friday is its busiest day, at roughly 1.3 posts per day across the measured window.

Keep going