Matt Johansen

Matt Johansen is a cybersecurity practitioner of ~18 years who has worked at WhiteHat Security, Honest Dollar (acquired by Goldman Sachs), Bank of America, and Reddit (where he is Principal Security Architect / Head of Software Security). In 2023 he launched Vulnerable U, a free weekly cybersecurity newsletter that grew from 12 to ~30K subscribers in under two years on Beehiiv. By 2026 it had become a six-figure business with a 25-person agency arm; he left Bank of America to go full-time. He runs a five-platform stack (Newsletter, X, Instagram ~131K, TikTok, YouTube ~~ Plus LinkedIn) with ~270K-300K followers combined, and uses the brand to talk openly about mental health in the security industry — the project’s name is deliberate.

Key Patterns

• He treats each platform as its own business with its own job, not as a repurposing funnel
• He compounded “industry clout” for ~15 years before monetizing — then converted a dormant audience instantly
• Consistency is his single-most-cited growth lever: never missed a weekly issue
• Cross-domain framing (cyber frameworks → mental health) is his most repeatable content mechanic
• He rejects single-point-of-failure team design and personal-brand design alike

Origin and Career

Twitter Was the Career Not the Side Project — the Adelphi-dorm-to-Black-Hat origin via replies into the right conversations Ten Years of Quiet Building Before The Newsletter Existed — 10K X followers, years of dark mode at the banks, instant launch conversion

Multi-Platform Growth

Each Platform Is Its Own Business — the per-platform jobs: Twitter=subs, Instagram=sponsorships, TikTok=fund, YouTube=evergreen, newsletter=core Never Missed a Single Week — the consistency rule under the platform stack

Security Practice and Leadership

Don’t Rely on Superheroes — A Beach Saved the Reddit Incident — incident response as team design, not heroics

Mental Health Content

Threat Modeling Depression — importing the AppSec framework into mental health as a content pillar There Is No Room of Adults — Imposter Syndrome Reframed — the procedural reframe of imposter syndrome