OffSec engagement report
@offsectraining - 331K followers on X
Measured over 28 original posts from a 30-day window, last computed on September 15, 2026.
Engagement
A typical post picks up 26 interactions against 331K followers, an engagement rate of 0.008%. Measured over 28 original posts, its engagement rate beats 22% of 15,519 tracked accounts of a similar size. That is a reason to look at how the audience behaves - reply depth, saves, whether the followers are recent - rather than a conclusion about it on its own. Posts are seen about 8.3K times each, and 0.309% of those impressions turn into an interaction. That is about 2.49% of the follower count, which is the gap between an audience on paper and an audience in a timeline. Posting runs at about 0.93 post a day over the last 30 days, with activity on roughly 70% of days. Most posts go out around 14:00 UTC, and Tuesday is the busiest day of the week. Of the 28 posts sampled, 82% carry an image or video and 100% link out. The account's strongest tracked post pulled 424 interactions, about 16x its own typical post.
Measured over 28 original posts from a 30-day window, last computed on September 15, 2026. Recurring tag: #kali.
Compared with accounts its own size
OffSec's engagement rate beats 22% of the tracked X accounts closest to it in follower count (15,519 accounts, accounts of similar size (decile 9 of 10)). A percentile is spread evenly by construction, so 50 really is the middle of that group and 90 really is its top tenth.
On engagement per impression rather than per follower it beats 19% of the same group. When those two numbers disagree, the gap is about how far its posts travel rather than how people react to them.
Where this sits in the catalog
At 0.008%, OffSec sits above the 10th percentile of the 156,596 accounts in this comparison. That places it in the bottom 25% band, which runs below 0.022%.
Show the percentile table
| Percentile | Engagement rate |
|---|---|
| 10th percentile | 0.003% |
| 25th percentile | 0.022% |
| 50th percentile | 0.127% |
| 75th percentile | 0.604% |
| 90th percentile | 2.32% |
| 99th percentile | 83.4% |
This ruler is the whole measured catalog, not a size-matched group: it shows where the raw rate falls across every account we can measure, all of which are large. For a like-for-like comparison, read the size-band percentile above instead. See how the bands are built
Posting timing
This account posts most often around 14:00 UTC, and Tuesday is its busiest day of the week. The bars below are the catalog-wide pattern, with this account's own busiest slot marked. They do not show how this account performs at each hour: we keep one aggregate per account, not one per hour, so that measurement does not exist in our data.
Show engagement by hour posted, utc as a table
| Hour (UTC) | Vs author median | Posts |
|---|---|---|
| 00:00 UTC | -1% | 89K |
| 01:00 UTC | -2% | 90K |
| 02:00 UTC | -3% | 88K |
| 03:00 UTC | -4% | 94K |
| 04:00 UTC | -5% | 76K |
| 05:00 UTC | -4% | 75K |
| 06:00 UTC | -5% | 86K |
| 07:00 UTC | -5% | 93K |
| 08:00 UTC | -4% | 108K |
| 09:00 UTC | -4% | 124K |
| 10:00 UTC | -3% | 129K |
| 11:00 UTC | -3% | 141K |
| 12:00 UTC | -3% | 154K |
| 13:00 UTC | -3% | 167K |
| 14:00 UTC | -4% | 173K |
| 15:00 UTC | -2% | 176K |
| 16:00 UTC | -3% | 171K |
| 17:00 UTC | -3% | 159K |
| 18:00 UTC | -2% | 149K |
| 19:00 UTC | -2% | 141K |
| 20:00 UTC | -1% | 131K |
| 21:00 UTC | 0% | 116K |
| 22:00 UTC | -2% | 100K |
| 23:00 UTC | -1% | 90K |
Show engagement by day of week as a table
| Day | Vs author median | Posts |
|---|---|---|
| Sunday | +5% | 393K |
| Monday | +1% | 483K |
| Tuesday | -2% | 520K |
| Wednesday | -3% | 472K |
| Thursday | -2% | 430K |
| Friday | -3% | 447K |
| Saturday | +2% | 393K |
Formats this account uses
Its own posting mix on the left, and what each of those formats does across every account we track on the right. Only formats where the effect clears our publish test appear here, so an empty row is a format we could not measure rather than one that does nothing.
| Format | This account | Catalog effect | 95% interval | Accounts behind it |
|---|---|---|---|---|
| Image or video | 82% of posts | +111% | +108% to +115% | 34K |
| Outbound link | 100% of posts | -41% | -42% to -40% | 32K |
| Typical length | - | +15% | +14% to +16% | 32K |
- 82% of this account's sampled posts carry an image or video. Across the catalog, posts with an image or video run 111% above the same accounts' other posts.
- 100% of its posts carry a link off X. Across the catalog, posts with an outbound link run 41% below the same accounts' other posts, so a large share of this account's output sits in the weakest bucket we measure.
- Its average post runs 555 characters, which falls in the over 280 characters band. Across the catalog, posts over 280 characters run 15% above the same accounts' other posts.
These are catalog-wide differences applied to this account's own posting mix, not a measurement of how each format performs for this account specifically. We keep one median per account, not one per format per account, so the second thing is not something this data can tell you.
Best tweets
- Aug 25, 202616x their median
🚨 CVE-2026-72898: A critical unauthenticated SQL injection vulnerability in Metabase is being actively exploited. The vulnerability affects the password-reset flow and can ultimately allow an attacker to gain administrator access to a vulnerable Metabase instance. Our latest technical breakdown covers: → How CVE-2026-72898 works → Affected Metabase versions → The exploitation flow and potential impact → What defenders should look for → Mitigation steps → How to safely validate the vulnerability in OffSec’s Offensive Cyber Range Read the full analysis: https://t.co/jKO2ZRFroi Explore the lab: https://t.co/w9oIUXPUbG #CVE #Cybersecurity #Metabase #VulnerabilityResearch #OffSec
- Mar 31, 20269.8x their median
#OSAI is officially here! 📣🐺 OffSec’s newest certification for hands-on offensive operations against AI-enabled systems is now available for purchase with Learn One, Course & Cert Bundle, and Learn Enterprise. Built for practitioners who want to apply an adversary mindset to modern AI systems and stay ahead as the attack surface evolves. 🔗 https://t.co/SRN3DaGaNi
- Sep 8, 20266.3x their median
🚨 ICYMI: CVE-2026-72898: Critical Metabase SQL injection, CVSS 10.0, no authentication required — and active exploitation has been confirmed. See how it works, what to look for, how to mitigate it, and how to safely test it in OffSec's Offensive Cyber Range. Explore the lab: https://t.co/e8EGvFrXdr #CVE #Cybersecurity #Metabase #VulnerabilityResearch #OffSec
- Aug 10, 20266.1x their median
🤩 PEN-200 LEARNERS! NEW PREP OFFERING! Introducing HackTrack, a free 10-week, mentor-led learning program for PEN-200 learners with active lab access. Preparing for the OSCP certification takes more than completing labs—it takes consistent practice, proven methodology, and accountability. ✏️ OffSec Student Mentors will guide you through complete walkthroughs of carefully selected OSCP-style machines while demonstrating the methodology, decision-making process, and troubleshooting techniques used throughout the OSCP exam. 📅 Starts: August 15 🕓 Saturdays at 16:00 GMT 🎯 Free for PEN-200 learners with active lab access Register today and stay on track toward OSCP success. Register Now: https://t.co/LWbShoGyGl #TryHarder
- Aug 24, 20264.7x their median
You can't learn penetration testing just by reading about it. You have to get your hands dirty. 🛠️ 🏆 That's why our PEN-200 (OSCP) and PEN-300 (OSEP) courses and certifications are considered the gold standard in the industry. PEN-200/: Drops you into realistic labs to master the fundamentals of enumeration, exploitation, and Active Directory attacks. PEN-300: Takes those skills to the next level, forcing you to develop custom tools to bypass modern enterprise defenses (EDR/AV). Both end with brutal, hands-on, live-environment exams. If you pass, you didn't just memorize answers—you proved you can actually do the job. Where are you at in your journey? 🐉 PEN-200 (OSCP) > https://t.co/VqI9wO8n6U 🥷 PEN-300 (OSEP) > https://t.co/0UC6HJzqWC #OSCP #OSEP #OffensiveSecurity #PenTest
- Aug 7, 20263.9x their median
Are you a SOC Analyst tired of just chasing false positives? 🚨 SOC-200 takes you under the hood of real-world attacks. You won't just learn how to use a SIEM; you'll learn how to parse Windows/Linux logs, detect Active Directory abuse, and counter spear-phishing tactics. The OSDA exam proves you can handle the pressure of a live simulated corporate breach. Build your intuition. Defend the network. Start here ➡️ https://t.co/4v3GzWV6W3 #BlueTeam #CyberDefense #IncidentResponse #OffSec
- Sep 10, 20263.5x their median
"I built an autonomous security agent" is a demo. "I built an eval that shows where it breaks" is engineering. 🛠️🧠 OffSec Community Member Ali Abdollahi just published a brilliant piece on why building powerful offensive AI is easy, but teaching it "what not to attack" is incredibly hard. If you are following the AI agent hype, read this reality check: https://t.co/UTlGvuS78S #AISecurity #OffSec #RedTeam #MachineLearning #InfoSec
- Sep 2, 20263.4x their median
There are certs that get you an interview, and then there are certs that get you a nod of respect from the senior red teamer. The OSCP does both. 🤝💻 🏁 Hiring managers want it because it proves you can actually hack, not just pass a multiple-choice test. ☕ Your peers respect it because they know exactly how much coffee, frustration, and "Try Harder" moments went into earning it. Are you ready to join the club? 🔗 https://t.co/VqI9wO8n6U #OSCP #OffSec #TryHarder #RedTeam #CyberSecurity #PenTesting
- Aug 21, 20262.8x their median
⭕ NEW! HackTrack! Join OffSec Student Mentors for a guided walkthrough of Robust, where you'll learn the methodology behind approaching an OSCP-style machine. This week's focus: 🌐 Web Application Enumeration 💉 SQL Injection 🔐 Post-Exploitation Credential Discovery Build a repeatable approach to moving from enumeration to exploitation—skills you'll use throughout PEN-200 and on exam day. 📅 Saturday, August 21 🕓 16:00 GMT Register Now: https://t.co/LWbShoGyGl #TryHarder
- Sep 5, 20262.7x their median
Sirens going off? Blue Team, it's time to step up. 🚨🛡️ 🔵 SOC-200 teaches you to triage alerts, analyze logs, and hunt threats using industry tools like ELK and Splunk. No multiple-choice tests. Just a 24-hour, hands-on exam to earn your OSDA certification. Prove you can defend a live corporate network against active attackers under pressure. Ready to hold the line? Explore SOC-200: https://t.co/LBPSZyuiU3 #BlueTeam #OffSec #OSDA #CyberSecurity #SOCAnalyst #InfoSec
Ranked by total interactions across everything we have tracked for this account, which is a longer history than the 30-day window the rates above use. The multiple compares each post to this account's own median.
Recurring topics
The most frequent hashtags in the sampled posts. They describe what this account writes about; they are not a performance signal, and the catalog-wide breakdown on the hub shows how little hashtag count moves.
Buy or sell Twitter (X) accounts - escrow-protected
PlayerSells is an escrow marketplace for Twitter (X) accounts. Every deal is protected, with no middleman risk.
Reading these numbers
A typical post picks up 26 interactions against 331K followers, an engagement rate of 0.008%. Measured over 28 original posts, its engagement rate beats 22% of 15,519 tracked accounts of a similar size. That is a reason to look at how the audience behaves - reply depth, saves, whether the followers are recent - rather than a conclusion about it on its own. Posts are seen about 8.3K times each, and 0.309% of those impressions turn into an interaction. That is about 2.49% of the follower count, which is the gap between an audience on paper and an audience in a timeline. Posting runs at about 0.93 post a day over the last 30 days, with activity on roughly 70% of days. Most posts go out around 14:00 UTC, and Tuesday is the busiest day of the week. Of the 28 posts sampled, 82% carry an image or video and 100% link out. The account's strongest tracked post pulled 424 interactions, about 16x its own typical post.
- What is OffSec's engagement rate on X?
- OffSec (@offsectraining) has an engagement rate of 0.008%, based on the median interactions across 28 original posts from the last 30 days against 331,251 followers. Replies, reposts and quote-posts of other people are excluded from that sample.
- Is that a good engagement rate?
- At 0.008%, OffSec sits above the 10th percentile of the 156,596 accounts in this comparison. Those comparison accounts are all large ones, because our scanning cadence is weighted towards big accounts, so this is a ranking among peers of similar scale rather than a ranking across X.
- Does @offsectraining have real engagement?
- Its engagement rate beats 22% of the tracked X accounts closest to it in follower count (15,519 accounts), which puts it in the bottom quarter for its size group. Ranking inside a size band matters because engagement rate falls as accounts grow, so a raw rate would mostly re-measure the follower count. It is a starting point for a look at follower quality, not a verdict on it.
- When does @offsectraining post?
- Most posts go out around 14:00 UTC, and Tuesday is its busiest day, at roughly 0.93 posts per day across the measured window.