Ben Spring @springjben

TryHackMe Co-founder ($30M+ ARR). User retention is everything. benspring.com Joined October 2012

Tweets

2K
Followers

4K
Following

266
Likes

1K

I think the challenge is that everyone can now build apps But 1) almost nobody has distribution (like an audience), or 2) the money to pay for distribution (ads or UGC), or 3) the creative genius to get distribution for free (classically called guerilla marketing)

130 234 3K 517K 2K

19 6 44 10K 12

View Details

TryHackMe @tryhackme

3 days ago

🚨 The AI1 Certification is live and with a special 30% off launch offer you don't want to miss 😉 Attack the system. Build the defence. Prove the skill. Earn the credential built for the next era of cyber security ⚡ Get certified in AI security with TryHackMe ▶️ tryhackme.com/certification/…

1 6 43 3K 7

View Details

TryHackMe @tryhackme

5 days ago

Now that we know the crazy places you saved your streak...Whats the crazy reason you lost it?? Top 3 best excuses gets 5 streak freezes...

8 1 29 5K 3

View Details

Garry Tan @garrytan

6 days ago

Be your self, not someone you were assigned to be! Bezos won on time horizon, not AWS or 1-Click. If your bets have to work in 3 years, you compete with everyone. Every smart, funded team is chasing the same 3-year problems. Short horizon, crowded field. Stretch to 7 and the field collapses. Investors want returns, employees want vesting, founders want proof. Almost nobody can sit in a bet that doesn't pay for most of a decade. The patience is the moat, and it costs you, that's why it works. But you can't fake a 7-year horizon on a problem you don't actually care about. Pick the users and the problem Moloch assigned you, the safe ones, the fundable ones, and you'll bail the first hard year. Pick the ones that are actually yours and you'll still be there when everyone else has quit. So the real prerequisite isn't discipline. It's knowing yourself well enough to choose a problem and a set of people you care about that you'll serve them for decades.

184 279 3K 190K 1K

View Details

Ben Spring @springjben

2 weeks ago

Our AI pentesting solution (NoScope) has found so many vulnerabilities like this. If companies don't move to continuous pentesting or get an AI pentest, they're asking to get breached.

NoScope @trynoscope

2 weeks ago

For 4 years, any person on the internet could pull private container images from 30,000+ Gitea deployments. No account. No password. No credentials of any kind. NoScope discovered it. CVE-2026-27771. Here's the full story. 🧵

4 5 22 6K 18

1 0 1 136 0

View Details

Ben Spring @springjben

2 weeks ago

@0xTib3rius Beast mode activated.

0 0 0 43 0

View Details

Ben Spring @springjben

2 weeks ago

100% - "over learning". You can only learn so much from books and podcasts - the most in depth (and memorable) learning comes from first-hand experiences. Also, I've found a lot of the time what I learn is different from reality or overly simplified; it can't be universally applied.

0 0 1 43 0

View Details

Ben Spring @springjben

2 weeks ago

@readswithravi I prefer a physical book - currently reading "The book of Elon"

0 0 0 26 0

View Details

Ben Spring @springjben

2 weeks ago

@KaiXCreator Wanting to get a job in cyber security tryhackme.com

0 0 0 24 0

View Details

Ben Spring @springjben

2 weeks ago

@IvanLandabaso I didn't realise Replit was so small a few years ago (30 people). They rode the AI dev so well. So many of the hyper-growth companies in the early AI wave are in the developer landscape - Cursor, Lovable, Claude.

1 0 1 82 0

View Details

Ben Spring @springjben

2 weeks ago

@yacineMTB "if you live each day as if it was your last someday you'll most certainly be right" ~ Steve Jobs

1 0 4 715 2

View Details

Ben Spring @springjben

2 weeks ago

@michlimlim @RattrayAlex Great article. Having a reMarkable (Paper Pro Move) has been a huge unlock for me.

0 0 0 86 0

View Details

Ben Spring @springjben

2 weeks ago

@DanielLockyer Agreed - been enjoying listening about Rockerfeller youtube.com/watch?v=M_TiZJ… The Founders podcast by @davidsenra are my favourite. The story telling is unmatched.

0 0 1 364 2

View Details

X Freeze @XFreeze

2 weeks ago

First, make it exist, then you can polish it later

93 277 3K 50K 256

View Details

TryHackMe @tryhackme

2 weeks ago

When the Jr Penetration Tester path gets a major upgrade and your inner pentester starts doing cartwheels. Go check it out ➡️ tryhackme.com/the-red-raffle…

1 5 54 3K 9

View Details

Keval @KevalJagani1

a month ago

@trynoscope has been finding some unbelievable vulnerabilities lately: - Manipulate trading data on popular crypto trading site - Pre-auth RCE on OSS with >400k installs (found via black box, not white) - Managed to get e-commerce application to leak admin Stripe API keys Will release more once these are patched, and we have permission to disclose. Our agents architecture is really unique - teams will be really surprised when they get access; we do free trials, so reach out if you're interested.

0 2 4 225 0

View Details

Ben Spring @springjben

a month ago

@Kabir4charya Great take - and I largely agree. Focus should be on learning, and community.

0 0 5 3K 0

View Details

NoScope @trynoscope

2 months ago

For anyone using Vercel, a few important steps to take after today’s incident: 1. Rotate your secrets 2. Move away from long-lived credentials 3. Review audit logs for any unusual access We’re offering a free pentest for Vercel users. Reach out to get started.

Vercel @vercel

2 months ago

We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin: vercel.com/kb/bulletin/ve…

696 2K 9K 10.6M 3K

3 5 28 9K 6

View Details

Ben Spring @springjben

2 months ago

@ryancarson What about in 5 years time?

0 0 0 29 0

View Details

Ben Spring @springjben

2 months ago

You joke, but most capable security agents would beat a team of humans (for now.. until the tools pentesters use catchup - this includes claude code which will get highly capable soon). Happy to put NoScope (our agent) against a team of capable pentesters for £10k. Happy to discuss terms?