What KrebsonSecurity does

KrebsOnSecurity is an independent, solo-operated cybersecurity news and investigative journalism blog founded in 2005 by Brian Krebs, a former Washington Post reporter who launched the site after being personally victimized by a computer virus. The publication produces in-depth reporting on data breaches, cybercrime, botnets, ransomware attacks, vulnerability disclosures, and national security incidents, with investigations that have led to multiple criminal arrests and have triggered Congressional inquiries into federal cybersecurity lapses.

The publication operates on a WordPress content management system and distributes content globally via krebsonsecurity.com, an RSS feed, and email subscriptions, with all articles freely accessible without paywalls. Reach is amplified through organic search, an active Mastodon presence (infosec.exchange/@briankrebs), and recurring earned media citations when investigations break. The site maintains an extensive archive of investigative cybersecurity reporting dating back to 2005, including groundbreaking coverage of incidents such as the 2014 Target breach, the 2015 Ashley Madison breach, and the 2026 CISA data leak.

The business model is entirely dependent on display advertising and sponsored content from cybersecurity vendors — notably KnowBe4 (security awareness training), Keeper Security (password management), and other security product companies that purchase banner placements targeting the publication's professional audience of CISOs, security researchers, incident responders, and corporate security leaders. Brian Krebs operates the publication without institutional backing, external investors, or disclosed corporate ownership, and supplements revenue through a dedicated speaking engagements page for public appearances.

Name

KrebsonSecurity

Legal name

KrebsOnSecurity

Website

https://krebsonsecurity.com

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

11–50 employees

Short description

KrebsOnSecurity is an independent investigative cybersecurity news blog founded and operated by Brian Krebs since 2005, delivering in-depth reporting on data breaches, cybercrime, and threat actors to security professionals, corporate security leaders, and a global readership via a free WordPress site funded by display advertising.

Ownership category

akta.pro rank

Product category

Cybersecurity News Media

NAICS

Web Search Portals, Libraries, Archives, and Other Information Services (5192)

akta.pro primary industry

Audit Management (HDADAIAF)

Keywords

• Cybersecurity news
• Investigative journalism
• Threat intelligence
• Data breach reporting
• Cybercrime investigations

Headquarters

HQ city

Merrifield

HQ country

United States

HQ region

North America

Markets served

GTM type

B2C

Offering type

Digital Commerce or Content

Cost components

Personnel, Operations, Technology or R&D

Revenue model

1. Display Advertising: The primary revenue model is display advertising. The site features sponsored content advertisements from cybersecurity companies including KnowBe4 (security awareness training), Keeper Security (password management), and other security vendors. These appear as banner advertisements throughout the site.

Go-to-market motion2 records

Distribution channels1 record

Marketing channels5 records

Core offering

KrebsonSecurity is an independent cybersecurity news and investigation blog that publishes in-depth articles on data breaches, botnets, ransomware attacks, vulnerability disclosures, cybercrime operations, and national security threats. The site is freely accessible to all visitors without paywall or registration, generating revenue through display advertising and sponsored content from cybersecurity vendors.

Product overview

KrebsOnSecurity is a personal cybersecurity news and investigation blog operated by Brian Krebs. It is not a product company but rather an independent media publication that provides in-depth reporting on cybersecurity threats, data breaches, botnets, ransomware attacks, vulnerability disclosures, and cybercrime investigations. The site generates revenue through advertising and sponsored content, with a speaking engagements page for public appearances.

Differentiator

Problem solved

Functional benefit

Products and services

• KrebsOnSecurity Blog An independent cybersecurity news and investigation blog providing in-depth, free reporting on data breaches, cybercrime, botnets, ransomware attacks, vulnerability disclosures, and threat actor profiling. The site is accessible to all visitors without paywall or registration and is targeted at cybersecurity professionals, corporate security leaders, and general readers seeking detailed cybersecurity intelligence.

Quantifiable outcome

• Published investigations have led to multiple criminal arrests and indictments of cybercriminals
• +1 more outcomes

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

One partnership is on record.

• KnowBe4minorOthersKnowBe4, a security awareness training company, is a regular display advertiser on KrebsOnSecurity. Ads appear throughout the site promoting their human-focused security solutions including 'Secure Humans and Agents' and security training products.

Scale indicators3 records

Recent moves4 records

Expansion highlights3 records

Emerging players

• Risky Business: Long-running cybersecurity podcast and newsletter. Comparable as an independent, personality-driven cybersecurity media property serving security professionals, with overlapping audience.

Direct peers

• SecurityWeek: Cybersecurity news, analysis, and event company. Comparable as a multi-author cybersecurity news outlet covering breaches, vulnerabilities, and threat actors.
• Bleeping Computer: Cybersecurity news and technical support site covering malware, breaches, and vulnerabilities. Comparable as a community-oriented cybersecurity news outlet serving security professionals and researchers.
• CyberScoop: Cybersecurity news outlet focused on government, policy, and major breach reporting. Comparable as a beat-driven cybersecurity news publication with similar investigative journalism style.
• Schneier on Security: Personal cybersecurity blog by Bruce Schneier. Comparable as an independent, single-author security thought-leadership publication with strong brand recognition in the security community.
• The Hacker News: Leading cybersecurity news site covering breaches, vulnerabilities, and threat intelligence. Comparable as a cybersecurity-focused news outlet targeting security professionals with similar topic coverage.
• Dark Reading: Cyber-decision-maker news and analysis platform. Comparable as a cybersecurity news outlet targeting enterprise security leaders with breach reporting and threat intelligence.
• Threatpost: Cybersecurity news site covering threats, vulnerabilities, and breach analysis. Comparable as a security-news outlet with overlapping audience of security professionals.

Broad incumbents

• Wired (Security Section): Mainstream technology publication with a dedicated security vertical. Comparable as a source of cybersecurity news and investigative reporting for a broad audience.
• CSO Online: Enterprise security leadership publication under IDG. Comparable as a cybersecurity news and analysis outlet for CISOs and security executives, though part of a larger media portfolio.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about KrebsonSecurity