Sponsored content in security lives or dies on trust, and disclosure is the cheapest trust you will ever buy. It is also a legal requirement in the United States, and most other jurisdictions have an equivalent. This guide covers the practical side for creators and the brands that pay them.
One note before anything else: this is practical guidance, not legal advice, so ask a lawyer about your specific situation.
What the FTC requires, in plain terms
The FTC’s endorsement rules reduce to one idea: if a brand gave you anything of value and you talk about that brand, your audience must be able to tell.
Anything of value is broad. Cash, obviously, but also free products, affiliate commissions, discounts, equity, employment, or an ongoing business relationship. The FTC calls this a material connection, and it triggers disclosure whether or not the brand asked you to post.
The disclosure has to be clear and conspicuous. In practice that means:
- Upfront. Before or alongside the endorsement, not after the audience has already consumed the content.
- In the content itself. On the same platform, inside the post, video, or audio. A line in your bio or on an about page does not count, because most viewers never see it.
- Hard to miss and easy to understand. Plain words like ad, sponsored, or paid partnership, in the same language as the content itself.
Disclosure also does not launder claims. You can only say what you actually experienced, and brands remain responsible for what their sponsored creators claim about the product.
Disclosure by format
- Video: say it out loud near the beginning and put it on screen. Do not rely on the description box. Clips get cut and re-shared without descriptions attached.
- Written posts and newsletters: one plain sentence at the top. This post is sponsored by X. Not a footnote after the sign-off.
- Social posts: at the start of the caption, visible before any truncation, not buried in a block of hashtags.
- Podcasts: spoken disclosure in the episode, at the point where the sponsored segment occurs. Show notes alone do not reach people who only listen.
- Livestreams: disclose at the start and repeat periodically. Viewers join mid-stream and did not hear the first mention.
- Affiliate links: label them where they appear, every time, not once per site.
The common mistakes
- The buried hashtag. An #ad sitting deep in a wall of tags fails the conspicuous test even though the word is technically present.
- Vague labels. #sp, #spon, #collab, ambassador, and partner are ambiguous to a normal reader, and the normal reader is who the rule is written for.
- Gratitude as disclosure. Thanks to X for making this video possible tells the viewer nothing about money changing hands.
- Platform tags as the whole disclosure. Built-in paid partnership labels help, but FTC guidance is explicit that a platform’s tool may not be sufficient on its own. Add your own words.
- Disclosing on one platform only. If the content gets clipped or cross-posted, the disclosure has to travel with it.
- Assuming free product does not count. It does. A material connection is not just an invoice.
Why this helps you with a security audience
Security professionals assume hidden incentives by default. It is an occupational reflex, and it is usually correct.
That reflex is exactly why disclosure works in your favor here. An undisclosed sponsorship, once spotted, reads as deception, and this audience is unusually good at spotting it. They notice the tonal shift, they check who a creator has worked with, they screenshot. The damage lands on the creator and the brand together.
A clear disclosure turns the same post into a legible transaction: this brand paid, this is my honest assessment, weigh it accordingly. Skeptics do not punish honesty about incentives. They punish concealment. A disclosed ad from a credible practitioner is still a credible practitioner talking. A hidden ad from anyone is just a lie with production values.
On Influous, disclosure is the default
We built this into the product rather than the fine print. Influous is a pre-launch managed service that runs influencer campaigns for security and tech brands with hand-picked, vetted technical creators. Every campaign ships with FTC-compliant disclosure by default, so neither side has to negotiate for honesty, and payment sits in escrow until the work is delivered as agreed.
If you have questions about how that works in practice, write to info@influous.io. And once more: for legal certainty, talk to a lawyer, not a blog post.