Link your CISO Marketplace account and Discord becomes a front door to the ecosystem: run assessments on your verified domains, ask the Concierge, book hours, open a ticket, follow the giveaway, build the monthly crate with everyone else. Your reports and invoices never leave the portal. The conversation happens here.
/linkNo reports or client data in Discord, everacme.com — done.run_14 finished: 3 new, 1 critical. Findings in the portal → my.cisomarketplace.com/ptaasEmpty channels make a server feel dead, so we open rooms around things that are happening, and threads around each crate.
#announcementsThe daily CISO Insights episode, the Friday digest, draw results, crate ship days. Followable from your own server.
#show-and-tellOne post per build, tip, teardown or scenario. Tag it. The bot replies with your entries and points; the best get clipped and published with your handle.
#help-me-buildStuck on a step? Crate number, step, what you saw. Members and staff answer; the guide gets fixed when you find a bug.
#giveaway → #crate-currentOctober is the Cyber Awareness Giveaway. From December, one thread per Giveaway, opened on ship day, live for 30 days.
30 minutes, same slot every week, on stage. Practitioner, CISO-tier crate and Practice members join live; the recording becomes an episode.
Practice and Firm accounts get #org-yourcompany: your team, our staff, your pipeline posts, your commands. Nothing from it is visible to anyone else.
A weekly aggregate from the AI-SOC pipeline: phishing trend, top lure, lookalike domains caught. No tenant, no indicator, no small numbers.
Every command is a real call into the ecosystem, made as you, metered against your wallet. Members run included tools free; otherwise credits.
/link | Coming soon Connect your CISO Marketplace account (Better Auth). Roles follow your membership. |
/enter · /stats · /redeem | Giveaway: free entry, the community-unlock bar, bonus codes from the podcast and our posts. |
/submit · /points · /leaderboard | Submit a build or tip; see your entries and points; Build of the Month standings. |
/crate | This month's crate, its guide and thread. |
/ask | Coming soon Ask the Concierge (Cipher). Grounded on the catalog and guides. Credits. |
/comply | Coming soon Compliance Intelligence lookup: regulations, controls, frameworks, cited. |
/osint exposure | Coming soon Your own linked identity against breach corpora. Counts only, private reply. First run free. |
/ticket | Coming soon Private support thread with staff, mirrored to our queue. |
/wallet | Coming soon Credits, recent charges, top-up. |
/assess <tool> <domain> | Coming soon Run a Micro-Sec assessment on a verified domain. Counts and a report link come back; the report lives in the portal. |
/osint domain|company|brand | Coming soon Passive footprint on your verified domains and brand: exposure counts, lookalike domains, tech stack. Never people. |
/task <what> | Coming soon Order a $200 on-demand task. Stripe link in-channel; "delivered" posts when done. |
/book <hours> | Coming soon Consulting hours at your member rate; 10/20/40-hour discounts apply automatically. |
/proposals | Coming soon Every proposal for your org and its state: drafted → quoted → accepted. |
/redteam enable|status | Coming soon Scope the AI red-team lane; run summaries post here, findings stay in the portal. |
/analyze + attachment | Coming soon Policy or config review. File goes to your portal storage; verdict and link come back. |
The web portal, AI agents and Discord all call the same tools with the same identity, wallet and permissions. Nothing is rebuilt for chat.
Signed by Discord, verified by our Worker on Cloudflare. Your Discord ID resolves to your CISO Marketplace identity through id.cisomarketplace.com (Better Auth, account linking only).
Which org channel are you in? Is the target a verified domain? What's your tier and balance? Then it calls the tool as you, with a delegated agent key that carries your spend cap and tool allow-list.
run_tool, OSINT set)ask_cipher, proposals, tasks, hours)The same id.cisomarketplace.com session and prepaid credits you use on the web. 1 credit = $1 retail on tools and AI. Members run included tools free.
Assessments saved, PTaaS runs finished, proposals quoted, invoices paid, crates shipped: each posts a one-line status into your company channel. Counts and links, never contents.
The MCP enforces verified domains, scopes and spend caps server-side. The bot is a convenience layer, not the guard. Every call is logged with who, where, when.
Roles sync from the portal when you link and whenever your membership or crate tier changes. No Discord paywall, no second subscription.
| You are | Discord role | What opens |
|---|---|---|
| Anyone who joins and agrees to the rules | Member | the community rooms, giveaway, /submit, /ask, /ticket |
| Linked free account | Member + linked | your wallet and 15 trial credits from the portal, /osint exposure once free |
| Practitioner card | Practitioner | office hours live, monthly tool allowance, priority in #help |
| Practice license | Practice + #org-you | private company channel, org commands, pooled credits, up to 5 seats mapped from the portal |
| CISO Crate subscriber | CISO Crate + tier | the current crate thread, golden-ticket draws, streak patches, Build of the Month |
| Firm tier | Firm + #org-you | everything in Practice plus co-branded crates and a partner channel |
| Vendor / affiliate | Partner | #partners, CyberAdX sponsor drops and AMAs |
Enterprise teams that won't use Discord: Practice and Firm engagements can run in a Slack Connect or Microsoft Teams shared channel instead. Same bot, your tool.
Members: /ticket opens a private thread in #help that only you and staff can see, pre-filled with your tier, crate and last order so you don't have to explain. Everyone else: support@cisomarketplace.com. Both land in the same internal queue, and you get the same 24-hour human reply.
Practice and Firm tickets page staff; Member tickets are worked in the daily pass. Resolved threads are archived; a summary is kept in our system, not in Discord.
We built this so a security team can use it without a policy exception. Here is the whole rule.
Identity and billing stay on id.cisomarketplace.com and Stripe. The bot and all its data run on our own Cloudflare account. Discord holds the conversation, and conversation in a community is public by intent. If we ever leave Discord, the bot's logic moves with us; only the chat needs exporting.
/link.Free to join. Read the rules, link your account if you have one, and post your first build.