TCM Security engagement report
@TCMSecurity - 220K followers on X
Measured over 49 original posts from a 30-day window, last computed on October 3, 2026.
Engagement
A typical post picks up 19 interactions against 220K followers, an engagement rate of 0.009%. Measured over 49 original posts, its engagement rate beats 22% of 21,185 tracked accounts of a similar size. That is a reason to look at how the audience behaves - reply depth, saves, whether the followers are recent - rather than a conclusion about it on its own. Posts are seen about 5.2K times each, and 0.363% of those impressions turn into an interaction. That is about 2.38% of the follower count, which is the gap between an audience on paper and an audience in a timeline. Posting runs at about 2.3 posts a day over the last 30 days, with activity on almost every day in the window. Most posts go out around 20:00 UTC, and Friday is the busiest day of the week. Of the 49 posts sampled, 92% carry an image or video and 92% link out. The account's strongest tracked post pulled 239 interactions, about 13x its own typical post. Recurring topics include #cybersecurity, #ctf, #hiring.
Measured over 49 original posts from a 30-day window, last computed on October 3, 2026. Recurring tags: #cybersecurity, #ctf, #hiring.
Compared with accounts its own size
TCM Security's engagement rate beats 22% of the tracked X accounts closest to it in follower count (21,185 accounts, accounts of similar size (decile 9 of 10)). A percentile is spread evenly by construction, so 50 really is the middle of that group and 90 really is its top tenth.
On engagement per impression rather than per follower it beats 20% of the same group. When those two numbers disagree, the gap is about how far its posts travel rather than how people react to them.
Where this sits in the catalog
At 0.009%, TCM Security sits above the 10th percentile of the 213,004 accounts in this comparison. That places it in the bottom 25% band, which runs below 0.025%.
Show the percentile table
| Percentile | Engagement rate |
|---|---|
| 10th percentile | 0.004% |
| 25th percentile | 0.025% |
| 50th percentile | 0.147% |
| 75th percentile | 0.698% |
| 90th percentile | 2.61% |
| 99th percentile | 82.8% |
This ruler is the whole measured catalog, not a size-matched group: it shows where the raw rate falls across every account we can measure, all of which are large. For a like-for-like comparison, read the size-band percentile above instead. See how the bands are built
Posting timing
This account posts most often around 20:00 UTC, and Friday is its busiest day of the week. The bars below are the catalog-wide pattern, with this account's own busiest slot marked. They do not show how this account performs at each hour: we keep one aggregate per account, not one per hour, so that measurement does not exist in our data.
Show engagement by hour posted, utc as a table
| Hour (UTC) | Vs author median | Posts |
|---|---|---|
| 00:00 UTC | -1% | 89K |
| 01:00 UTC | -2% | 90K |
| 02:00 UTC | -3% | 88K |
| 03:00 UTC | -4% | 94K |
| 04:00 UTC | -5% | 76K |
| 05:00 UTC | -4% | 75K |
| 06:00 UTC | -5% | 86K |
| 07:00 UTC | -5% | 93K |
| 08:00 UTC | -4% | 108K |
| 09:00 UTC | -4% | 124K |
| 10:00 UTC | -3% | 129K |
| 11:00 UTC | -3% | 141K |
| 12:00 UTC | -3% | 154K |
| 13:00 UTC | -3% | 167K |
| 14:00 UTC | -4% | 173K |
| 15:00 UTC | -2% | 176K |
| 16:00 UTC | -3% | 171K |
| 17:00 UTC | -3% | 159K |
| 18:00 UTC | -2% | 149K |
| 19:00 UTC | -2% | 141K |
| 20:00 UTC | -1% | 131K |
| 21:00 UTC | 0% | 116K |
| 22:00 UTC | -2% | 100K |
| 23:00 UTC | -1% | 90K |
Show engagement by day of week as a table
| Day | Vs author median | Posts |
|---|---|---|
| Sunday | +5% | 393K |
| Monday | +1% | 483K |
| Tuesday | -2% | 520K |
| Wednesday | -3% | 472K |
| Thursday | -2% | 430K |
| Friday | -3% | 447K |
| Saturday | +2% | 393K |
Formats this account uses
Its own posting mix on the left, and what each of those formats does across every account we track on the right. Only formats where the effect clears our publish test appear here, so an empty row is a format we could not measure rather than one that does nothing.
| Format | This account | Catalog effect | 95% interval | Accounts behind it |
|---|---|---|---|---|
| Image or video | 92% of posts | +111% | +108% to +115% | 34K |
| Outbound link | 92% of posts | -41% | -42% to -40% | 32K |
| Typical length | - | +15% | +14% to +16% | 32K |
- 92% of this account's sampled posts carry an image or video. Across the catalog, posts with an image or video run 111% above the same accounts' other posts.
- 92% of its posts carry a link off X. Across the catalog, posts with an outbound link run 41% below the same accounts' other posts, so a large share of this account's output sits in the weakest bucket we measure.
- Its average post runs 606 characters, which falls in the over 280 characters band. Across the catalog, posts over 280 characters run 15% above the same accounts' other posts.
These are catalog-wide differences applied to this account's own posting mix, not a measurement of how each format performs for this account specifically. We keep one median per account, not one per format per account, so the second thing is not something this data can tell you.
Best tweets
- Sep 1, 202613x their median
What are 3 cybersecurity books you should add to your reading list? Andrew Bellini (aka @d1gitalandrew)'s got a few picks for you today, including: - "From Day Zero to Zero Day" by Eugene Lim - "Alice and Bob Learn Application Security" by Tanya Janca - "The Black Mass" by vxunderground What would you add to his list?! Comment below, and let us know! Reading is one part of the learning equation; practical, hands-on #cybersecurity training is another. Get started today with the TCM Security Academy: https://t.co/vpW4qy1YJS
- Sep 27, 20267.5x their median
Happy Sunday! We've got some good news to start the week - we are #hiring penetration testers! We're looking for folks who are mid-level as well as senior folks. These are remote, contract roles, and there is the potential to go full time eventually. If you're a self-starter who is passionate about #cybersecurity, we want to talk with you. 🫵 Apply here: https://t.co/4HB9E4ua4E
- Sep 26, 20265.6x their median
A #cybersecurity tool you should know ⚡ Can you spot command-and-control traffic hiding in normal network activity? RITA (which stands for 𝗥𝗲𝗮𝗹 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 𝗧𝗵𝗿𝗲𝗮𝘁 𝗔𝗻𝗮𝗹𝘆𝘁𝗶𝗰𝘀) helps you dig into Zeek logs and identify suspicious communication patterns, including potential C2 beaconing. If you work in a #SOC, blue team environment, or just want to get better at network traffic analysis, this is one worth knowing: https://t.co/ohY0Z7c54A Have you used RITA before? Share your thoughts in the comments! Want to become a better blue teamer? Sign up for the TCM Security Academy - we have several blue teaming courses starting with the beginner-level SOC 101. https://t.co/cQJqfUyO0d
- Aug 24, 20265.5x their median
We have several 𝗙𝗥𝗘𝗘 educational #cybersecurity resources up for grabs at the TCM Security website. These resources include guides like: 🔶 𝗛𝗼𝘄 𝘁𝗼 𝗕𝗲 𝗮𝗻 𝗘𝘁𝗵𝗶𝗰𝗮𝗹 𝗛𝗮𝗰𝗸𝗲𝗿 (𝘂𝗽𝗱𝗮𝘁𝗲 𝗰𝗼𝗺𝗶𝗻𝗴 𝘀𝗼𝗼𝗻!) 🔶 𝗪𝗲𝗯 𝗔𝗽𝗽 𝗣𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗧𝗼𝗼𝗹𝘀 🔶 𝗢𝘂𝗿 𝗙𝗮𝘃𝗼𝗿𝗶𝘁𝗲 𝗣𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗧𝗼𝗼𝗹𝘀 🔶 𝗠𝗼𝗯𝗶𝗹𝗲 𝗣𝗲𝗻𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗧𝗼𝗼𝗹𝘀 We have plans to add more soon, too! But what do 𝘺𝘰𝘶 want to see? Share your thoughts with us - we are listening! Check out what we have available here: https://t.co/wcY0Oheho1
- Aug 21, 20264.0x their median
Missing Vegas and #DEFCON already! Take us back! (next year?) Have a great weekend <3 https://t.co/bEdrULkEUg
- Sep 20, 20263.8x their median
Did you know that we offer several free PowerShell intro videos on our YouTube? We also have a free #PowerShell course that will be coming in the near future! Watch it here: https://t.co/VhdAyWg8uM https://t.co/ewUCYK3Nzz
- Sep 1, 20263.7x their median
Today we're sharing some resources for Linux privilege escalation. Use this as a starter pack whether you're currently working on a penetration test or studying for the PNPT. Find resources for automated #privesc, escalation paths in SUDO, and more. We plan on updating this quarterly, so let us know what we missed in the comments! Get the PNPT (Practical Network Penetration Tester) package here: https://t.co/G0I3vCCpJ6
- Sep 13, 20263.2x their median
At TCM Security, we offer several web app courses, ranging from 𝗯𝗲𝗴𝗶𝗻𝗻𝗲𝗿 to 𝗶𝗻𝘁𝗲𝗿𝗺𝗲𝗱𝗶𝗮𝘁𝗲. We even have an expert-level course, which is exclusively available as part of the PWPE (Practical Web Pentest Expert) package. As of right now, the web app courses include: 🔹𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗕𝘂𝗴 𝗕𝗼𝘂𝗻𝘁𝘆 - Our beginner-friendly web app course and the steppingstone to the Practical Web Pentest Associate (PWPA) cert. 🔸𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗣𝗜 𝗛𝗮𝗰𝗸𝗶𝗻𝗴 & 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗪𝗲𝗯 𝗛𝗮𝗰𝗸𝗶𝗻𝗴 - These intermediate courses will help you better understand more advanced web exploitation techniques and prep you for the PWPP (Practical Web Pentest Professional). Sign up for the TCM Security Academy and start web hacking: https://t.co/qRJ64lnolB
- Sep 6, 20263.2x their median
Advance your blue team skillset with the PSAA (Practical SOC Analyst Associate) and its more intermediate counterpart, the PSAP (Practical SOC Analyst Professional). https://t.co/O9PpEevxfN Looking to build your #DFIR skillset ... but not sure what resources are actually worth your attention? Here are 5 books to add to your reading list that deserve your time. Let's go: 📕5️⃣"𝗧𝗵𝗲 𝗗𝗙𝗜𝗥 𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝘃𝗲 𝗠𝗶𝗻𝗱𝘀𝗲𝘁" 𝗯𝘆 𝗕𝗿𝗲𝘁𝘁 𝗦𝗵𝗮𝘃𝗲𝗿𝘀 - What makes this book valuable is its focus on approaching an investigation, covering things like forming hypotheses, avoiding bias, and documenting findings. Tools can change, but mindset remains timeless. 📕4️⃣"𝗔𝗽𝗽𝗹𝗶𝗲𝗱 𝗜𝗻𝗰𝗶𝗱𝗲𝗻𝘁 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗲" 𝗯𝘆 𝗦𝘁𝗲𝘃𝗲 𝗔𝗻𝘀𝗼𝗻 - This book is packed full of practical techniques for detecting, investigating, and responding to advanced attacks across both networks and endpoints. 📕3️⃣"𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝗥𝗲𝗴𝗶𝘀𝘁𝗿𝘆 𝗙𝗼𝗿𝗲𝗻𝘀𝗶𝗰𝘀: 𝗔𝗱𝘃𝗮𝗻𝗰𝗲𝗱 𝗗𝗶𝗴𝗶𝘁𝗮𝗹 𝗙𝗼𝗿𝗲𝗻𝘀𝗶𝗰 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀 𝗼𝗳 𝘁𝗵𝗲 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝗥𝗲𝗴𝗶𝘀𝘁𝗿𝘆" 𝗯𝘆 𝗛𝗮𝗿𝗹𝗮𝗻 𝗖𝗮𝗿𝘃𝗲𝘆 - There's a lot to discover in the Windows Registry, and this book is an amazing way to become better acquainted with this vast evidence source. 📕2️⃣ "𝗙𝗶𝗹𝗲 𝗦𝘆𝘀𝘁𝗲𝗺 𝗙𝗼𝗿𝗲𝗻𝘀𝗶𝗰 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀" 𝗯𝘆 𝗕𝗿𝗶𝗮𝗻 𝗖𝗮𝗿𝗿𝗶𝗲𝗿 - Want to learn the deep inner workings of file systems? This book is the authoritative resource on the file system. Although it's older than the other titles (published in 2005), its focus on the fundamentals is unmatched. 📕1️⃣ "𝗧𝗵𝗲 𝗔𝗿𝘁 𝗼𝗳 𝗠𝗲𝗺𝗼𝗿𝘆 𝗙𝗼𝗿𝗲𝗻𝘀𝗶𝗰𝘀" 𝗯𝘆 𝗠𝗶𝗰𝗵𝗮𝗲𝗹 𝗛𝗮𝗹𝗲 𝗟𝗶𝗴𝗵, 𝗔𝗻𝗱𝗿𝗲𝘄 𝗖𝗮𝘀𝗲, 𝗝𝗮𝗺𝗶𝗲 𝗟𝗲𝘃𝘆, 𝗮𝗻𝗱 𝗔𝗔𝗿𝗼𝗻 𝗪𝗮𝗹𝘁𝗲𝗿 - Finally, this massive book is the masterwork on memory forensics. It features everything from memory acquisition and analysis to investigating malware, rootkits, and much more. Hopefully this list gives you a starting point for enhancing your DFIR knowledge. Happy reading!
- Aug 31, 20263.2x their median
Intro to Windows Forensics dropped earlier this year! Have you checked it out yet? This course covers essential forensics concepts, like: - Understanding the investigative mindset 🕵️ - Learning digital evidence sources 🔎 - Getting to know #DFIR software & hardware 🖥️ Sign up for the TCM Security Academy here (if you're not a member already): https://t.co/PDL3qWerg0
Ranked by total interactions across everything we have tracked for this account, which is a longer history than the 30-day window the rates above use. The multiple compares each post to this account's own median.
Recurring topics
The most frequent hashtags in the sampled posts. They describe what this account writes about; they are not a performance signal, and the catalog-wide breakdown on the hub shows how little hashtag count moves.
Buy or sell Twitter (X) accounts - escrow-protected
PlayerSells is an escrow marketplace for Twitter (X) accounts. Every deal is protected, with no middleman risk.
Reading these numbers
A typical post picks up 19 interactions against 220K followers, an engagement rate of 0.009%. Measured over 49 original posts, its engagement rate beats 22% of 21,185 tracked accounts of a similar size. That is a reason to look at how the audience behaves - reply depth, saves, whether the followers are recent - rather than a conclusion about it on its own. Posts are seen about 5.2K times each, and 0.363% of those impressions turn into an interaction. That is about 2.38% of the follower count, which is the gap between an audience on paper and an audience in a timeline. Posting runs at about 2.3 posts a day over the last 30 days, with activity on almost every day in the window. Most posts go out around 20:00 UTC, and Friday is the busiest day of the week. Of the 49 posts sampled, 92% carry an image or video and 92% link out. The account's strongest tracked post pulled 239 interactions, about 13x its own typical post. Recurring topics include #cybersecurity, #ctf, #hiring.
- What is TCM Security's engagement rate on X?
- TCM Security (@TCMSecurity) has an engagement rate of 0.009%, based on the median interactions across 49 original posts from the last 30 days against 219,513 followers. Replies, reposts and quote-posts of other people are excluded from that sample.
- Is that a good engagement rate?
- At 0.009%, TCM Security sits above the 10th percentile of the 213,004 accounts in this comparison. Those comparison accounts are all large ones, because our scanning cadence is weighted towards big accounts, so this is a ranking among peers of similar scale rather than a ranking across X.
- Does @TCMSecurity have real engagement?
- Its engagement rate beats 22% of the tracked X accounts closest to it in follower count (21,185 accounts), which puts it in the bottom quarter for its size group. Ranking inside a size band matters because engagement rate falls as accounts grow, so a raw rate would mostly re-measure the follower count. It is a starting point for a look at follower quality, not a verdict on it.
- When does @TCMSecurity post?
- Most posts go out around 20:00 UTC, and Friday is its busiest day, at roughly 2.3 posts per day across the measured window.