ctianalyst.com

About

What this site is, and what it is held to

A career resource for people becoming and growing as cyber threat intelligence analysts. Not a threat feed, not a vendor, and not affiliated with any certification body.

Why it exists

Breaking into CTI is unusually opaque. Job descriptions blur three different levels of the discipline, most published guidance is a tool list, and there is nowhere to find out whether you can actually hold up under interview questioning until you are in one. This site is an attempt at the three things that would have helped: realistic practice, honest pay data, and reference material that says where the frameworks break down.

How the interview evaluation works

Every question in the bank has a vetted rubric behind it: the key points a good answer covers, an expert model answer, and the mistakes candidates commonly make. When you submit an answer, a language model running on our own server grades it against that rubric.

That constraint is deliberate and it is the whole design. The model's job is to assess your reasoning and explain the gap between your answer and the rubric. It is instructed not to assert technical facts that are not in the rubric, and not to invent CVEs, actor names or citations. If it returns something malformed, or if the evaluator is unavailable, you get the vetted expert answer instead of a fabricated one — the session degrades honestly rather than guessing.

Why this matters here

This is a security-adjacent site. One hallucinated technical claim would cost more credibility than the feature is worth. Grounding the model in authored rubrics is slower to build than letting it free-associate, and it is the reason the feedback can be trusted.

Editorial rules

  • Frameworks are described precisely, including their limits. Every model on this site has a section on where it fails, because that is what interviews actually probe.
  • No invented specifics. No fabricated CVE numbers, actor attributions, statistics or citations. Where something is contested, it is described as contested.
  • Prices and syllabi are not quoted as fact. Certification costs change; the comparison page tells you what a credential signals and sends you to the provider for current figures.
  • Salary data shows its sample sizes, and suppresses cells too small to publish responsibly.
  • No affiliation. We are not partnered with any vendor, training provider or certification body, and nothing on the site is placed in exchange for payment.

Corrections

If something here is wrong, we want to know, and we will fix it and say that we did. Accuracy is the only thing that makes a resource like this worth using. Get in touch at hello@ctianalyst.com.

Privacy

Answers are graded on our own server and never sent to a third-party AI provider. The salary survey is anonymous by construction. The full detail is on the privacy page.