A certified red teamer. A published researcher. A ghost.
For six months I published red team research on X.
Adversarial simulation frameworks.
Proof-of-concepts.
Write-ups that took days to validate and document.
The kind of work you don't whip up in an afternoon. The kind you triple-check because you know the community will scrutinize every line.
The result?
Eight followers.
Zero traction.
Complete, absolute silence.
I Thought It Was Me
I told myself the problem was me.
Maybe I didn't understand social media. Maybe my content wasn't "engaging" enough. Maybe I was too technical, too niche, too boring for the algorithm.
So I tried harder.
More posts. More hashtags. Tagging people. Following trends. Adjusting my tone. Rewriting hooks. Studying what "worked" for others.
Nothing changed.
The silence stayed. The void stayed. And I kept feeding it, post after post, thinking this one would break through.
It never did.
Then I Found Out Why
A friend mentioned a third-party tool that checks if your account is shadowbanned. I ran it out of curiosity. Expected a green checkmark.
Got this instead:
Ghost Ban detected.
Your posts are visible only to you.
Your replies are hidden from other users.
Your account appears normal to you, but is invisible to the community.
I stared at the screen for a solid minute.
Six months.
Hundreds of hours of research.
Dozens of posts.
All of it — literally invisible.
Nobody saw my work. Nobody could reply. Nobody even knew I existed.
The algorithm had decided I was a bot. Why? Because I was a new account. Because I used a VPN — because X is blocked in my country and I have no other way to access it. Because I linked to GitHub repositories instead of staying inside the platform's walled garden.
New account + VPN + external links = bot in the eyes of X's 2026 algorithm.
So it threw me into an invisible prison without a word.
No Warning. No Appeal. Just Deception.
Here is what makes me genuinely angry:
This isn't moderation.
This isn't "protecting the community."
This is deception.
I would have preferred an honest message. Something like:
"Your account is restricted because your IP is from a commercial VPN pool. Here's what you can do."
At least then I'd know. I could fix it. I could adapt. I could make an informed choice — stay and fight, or leave and focus my energy elsewhere.
But X chose silence.
It let me keep producing. Keep engaging. Keep believing I was part of a global security community. For months. While nobody could hear a single word.
The platform gave me the illusion of participation while denying me the reality of it.
That is not a bug. That is a design choice.
The Professional Cost
Let me be clear about what this means for someone in my field.
I am a certified offensive security professional. I run a red team lab. I build frameworks. I publish research so that defenders can understand what attackers are actually capable of.
For a security researcher, invisibility is a professional death sentence.
Your work doesn't exist if no one can see it.
Your findings don't matter if no one can read them.
Your contributions to the community are erased — not because they lack value, but because an algorithm decided you don't deserve an audience.
I wasn't spamming. I wasn't trolling. I wasn't violating any policy that anyone could point to.
I was simply from the wrong country and using the wrong IP address.
That was my crime.
Why I Left
I didn't leave because of Elon Musk's politics.
I didn't leave because of some ideological disagreement.
I didn't leave because "Twitter isn't what it used to be."
I left because a platform that calls itself a "town square" has built a system that silently eliminates professionals from censored countries.
No appeal.
No transparency.
No human review.
Just algorithmic disappearance.
If you live in a country where X is freely accessible, you might never experience this. You might think shadowbanning is a conspiracy theory or an edge case.
It isn't. It is a systemic feature that disproportionately affects people who already face the highest barriers to participation — those under sanctions, censorship, and digital exclusion.
And the cruelest part? You don't even know it's happening to you.
Where I Am Now
I moved to Bluesky.
Here, the feed is chronological. My posts reach the people who follow me. No algorithm decides whether I deserve visibility.
Here, using a VPN isn't a punishable offense. It isn't even a flag. It's just how some people connect.
Here, it's built on a protocol — not owned by one person who can wake up tomorrow and decide you're a bot, a threat, or simply inconvenient.
Here, I exist.
To the Infosec Community
If you're in cybersecurity and you've thought about leaving X — what was your final straw?
Was it the algorithm hiding your technical threads?
Was it the toxicity drowning out professional discourse?
Was it the realization that the platform values engagement over expertise?
Or are you still holding on? Still hoping that if you just optimize hard enough, the algorithm will finally notice you?
I held on for six months.
I optimized. I adjusted. I believed.
And all the while, I was screaming into a void that was designed to look like a room full of people.
Never again.
Find me on Bluesky: @toxy4ny.bsky.social
My red team research: github.com/toxy4ny
This lab: hackteam.RED
The author is a certified offensive security professional and the maintainer of the redteam-ai-benchmark open-source framework. Views are personal and do not represent any employer or client.
