The call you can't make
Something is unfolding, it is not public, and you need someone who has handled it before — not a hotline, not your account team. A person, tonight.
Members only · No vendors · Verified seats
If you need a friend,
buy a dog.
This is not a networking group. It is a closed room for the people who sign the risk acceptance — and get named in the filing when it goes wrong.
Applications are reviewed by a person. Most are declined. That is the point.
In the room
- Sitting CISOs and CSOs
- Deputy CISOs and heads of security carrying real accountability
- Security leaders who own the budget, the headcount and the blame
- People whose name appears on the risk acceptance
Not in the room
- Vendors, resellers, channel — at any seniority
- Recruiters and search firms
- Press, analysts, researchers looking for quotes
- Consultants and vCISOs selling services
- Investors and founders "exploring the space"
There is no tier, no upgrade, no sponsor package that changes this list. Several people will be annoyed by it. They are welcome to be annoyed somewhere else.
Why a closed room
The job changed. Security executives now carry personal exposure that did not exist a decade ago — regulatory findings that name individuals, disclosure obligations measured in hours, and the standing possibility of being the person a company points at afterwards.
Meanwhile every forum that claims to serve you is paid for by someone selling to you. The dinner is sponsored. The "peer roundtable" has a platinum partner at the table. The community is a lead funnel with a Slack workspace.
You cannot be honest about your gaps in a room where somebody is pricing them.
So: no one is selling anything here, and nothing said here leaves.
What it is actually for
Tooling, without the pitch
What a product actually does in production, from people who deployed it, pay for it, and have since renewed or ripped it out. Including what it cost them and what broke.
Numbers that are real
Compensation, headcount, budget as a share of revenue, what a Tier 1 analyst is paid in your market — from peers who will tell you the truth, not from a survey underwritten by a vendor.
The board deck, before the board
Show it to people who have presented the same slide to a sceptical audit committee and can tell you which line will get you cornered.
The thing you can't say publicly
That the programme is behind. That the acquisition came with an estate nobody has scanned. That you are being asked to sign something you do not believe.
An exit route
Roles move through peers before they reach a search firm. No recruiters in the room means the conversation stays between people who are actually hiring and actually leaving.
The charter
Six rules. They are short because they are not negotiable, and numbered because you agree to them in order when you join.
-
Nothing leaves the room
Chatham House by default, and stricter in practice: no screenshots, no forwarding, no "a friend told me". Attribution outside the room is the one thing that ends a membership immediately.
-
Nobody sells
No pitches, no demos, no "happy to intro you to my friend at". This includes the polite version, the helpful version, and the version disguised as a recommendation.
-
Verified seat, or no seat
Every member is a named, verified human holding a real security leadership role. No anonymous accounts, no shared logins, no delegates attending on someone's behalf.
-
Your seat is yours, not your employer's
Membership follows you when you move. It is not a corporate subscription, it cannot be transferred to your successor, and your company does not get a login because it paid.
-
Contribute or lapse
A room of readers is worthless. Members who take for a year and give nothing are asked to leave, without hard feelings — the value here is other people answering, so answering is the subscription.
-
One strike on trust
Ordinary disagreement is fine and encouraged. Breaching confidence, selling under cover, or misrepresenting your role is a single removal with no appeal.
How vetting works
Three steps, done by a person. Expect it to take days rather than minutes.
-
01
You apply
The form below. Work email, real name, actual title. Two minutes if you are eligible, and awkward if you are not.
-
02
We verify the seat
Your role is confirmed independently — public record, your work domain, and where it is not obvious, a short call or a word from an existing member. We are checking the seat, not auditing you.
-
03
You are invited, or you are not
A decision either way, in writing. A decline is usually about fit or verification, rarely about you, and never explained at length — which is itself a courtesy.
Apply
Everything here is used to assess your application and nothing else. No marketing list, no data sale, no third parties.
Questions people actually ask
I'm the CISO of a security vendor. Am I out?
No. The bar is selling, not your employer's product line. You hold the same seat and the same liability as everyone else in the room. If you use the room to generate pipeline, you are removed under rule two — the same as anyone.
I'm a vCISO or a consultant.
Case by case, and the question is where the accountability sits. If you hold the security accountability for an organisation under a long-term engagement, apply and say so plainly. If your revenue comes from selling advisory services, this is not the room for you.
What does it cost?
Membership terms are set out in the invitation, before you are asked to commit to anything. Nobody is charged to apply, and there is no sponsor money — which means members fund it, which is exactly why nobody sells here.
Is it anonymous?
The opposite. Every member is verified and named to the others — candour depends on knowing who is in the room. Confidentiality applies outward, not inward.
Where does it happen?
A private forum, kept small on purpose, with a handful of closed in-person sessions. No sponsored dinners, because there are no sponsors.
What happens to what I put in this form?
It is stored to assess your application and nothing else. It is not sold, not shared, and not fed to a marketing platform. This site sets no cookies, loads no third-party fonts or scripts, and runs no analytics — you can check that in your network tab, and you probably will.