Most creator platforms compete on the size of their roster. We compete on the height of the bar. Influous is pre-launch, our creator list is short, and it will grow slowly, because every person on it gets vetted by hand. This post is the checklist, published in the open, so creators know what they are applying to and brands know what they are paying for.
Why follower count is the wrong metric
In most industries, reach is the product. In security it is closer to noise, for three reasons.
First, the audience that matters is small and specific. A detection engineer followed mostly by other detection engineers can move more product than a generalist tech account a hundred times the size, because the right two hundred readers are worth more than the wrong two hundred thousand.
Second, reach is cheap to fake. Followers can be bought by the thousand, and engagement pods will inflate anything. A big number tells you someone had a budget, not an audience.
Third, security people fact-check for a living. The first thing a practitioner does when they see a sponsored post is look up the author. If the record is thin, the post does not just fail, it marks the brand as someone who did not check either.
So we mostly ignore follower counts. Here is what we look at instead.
What we actually check
Identity and employment history. We confirm the applicant is a real, specific person, and we cross-check their claimed work history against the public record: talks given while at an employer, papers, advisories, the usual trail. Pseudonymous researchers are a legitimate part of this industry; we can work with a handle publicly, but we verify legal identity privately, because we are moving money, and the handle needs its own consistent, verifiable track record.
The work. The core question: if this person had zero followers, would the work still stand up? We look for at least one deep, verifiable pillar among:
- Conference talks, recorded or programmed at real events. A substantive BSides talk counts for more than a pay-to-play keynote.
- CVE credits: their name in a vendor advisory or CVE record for a vulnerability they reported.
- GitHub: real commit history on tools people actually use, issues answered over time. Not a page of forks.
- Published research and writing: a blog or newsletter archive with technical depth sustained over time. One viral thread is not an archive.
Not everyone has all of these. A great newsletter writer may have no CVEs. But everyone needs a body of work we can independently verify.
A human audience. We read the comments: do people engage with the technical substance, push back, correct details? Are they identifiable practitioners? We look at growth history, because organic growth is lumpy and traceable to specific posts and talks, while purchased growth is suspiciously smooth or arrives overnight. We check whether the audience plausibly matches the claimed niche. We are looking for evidence that humans chose to be there.
Willingness to disclose. Every sponsored piece on Influous carries FTC-compliant disclosure, an #ad label placed upfront and unambiguous, by default. If an applicant negotiates against that, the application ends there. A creator who wants to hide payment from their audience is telling you exactly how fragile their audience’s trust is.
Manual and slow, on purpose
There is no scoring model behind any of this. A person reads the blog archive, watches the talk, opens the advisory, clicks through the commit history. It takes real hours per application, and it will never scale like an open signup form.
That is deliberate. We would rather have a short list we can defend than a long list we cannot. We will get some calls wrong, and when we do, we will remove the listing and say so. Vetting is not permanent either: creators who let disclosure slip or whose engagement turns synthetic come off the list.
If this sounds like your kind of bar
Creators: if you have work you can point to, apply at influous.io. Expect us to actually read it, the pass rate will not be close to 100 percent, and that is the point. Brands: if you want to reach people who clear this bar, start a campaign or write to info@influous.io. We are early, and the people who join now get a say in how the rest gets built.