Singapore Internet Task Force
Singapore's defenders,
working as one.
A small, non-profit community of vetted practitioners. We help small organisations and anyone who needs it, and members learn from real breaches and cyber attacks in closed-door sessions — shared by members, for members only.
Our mission
Trust first. Then everything else.
Incidents are resolved faster when the people responding already trust each other. SGITF exists to build that trust ahead of time — and to make sure small organisations without a security team have someone to turn to.
- 01Trust
- We broker trusted relationships between practitioners across industry, government, academia and the community, so the right people already know each other before an incident.
- 02Share
- Members exchange detections, indicators and threat reports under the Traffic Light Protocol, and help law enforcement act against those threatening Singapore's cyberspace.
- 03Learn
- Members-only, closed-door sessions where we walk through real breaches and cyber attacks — what happened, what worked, and what we would do differently.
- 04Help
- Small organisations rarely have a security team. We help them, and anyone else who needs it, with practical advice from practitioners who have seen it before.
The members platform
Find it. Fork it. Tune it to your environment.
Membership comes with a shared workspace built for detection engineers and threat analysts — so the rule a peer wrote at 2am during an incident is one search away for everyone else.
Detection library
Publish, search and fork rules in Sigma, KQL, SPL, YARA, YARA-L, Suricata and more — every rule mapped to MITRE ATT&CK, versioned, and credited to its author.
Learn moreIntel Exchange
Structured threat reports with adversaries, CVEs, techniques and typed indicators, linked to the detections that cover them.
Learn moreGroups
Sector and topic working groups with their own shared space — public, invite-only or private.
Learn moreTLP built in
Every item carries a TLP 2.0 label that the database itself enforces: CLEAR is public, GREEN is members-only, AMBER and RED stay with who they're meant for.
Learn moreKnow four members
Membership is by peer vouching. Four current members vouch for you — at least one from a different organisation.
Agree to the code
Members commit to the Code of Conduct and to honouring the Traffic Light Protocol on everything shared.
Contribute
Share what you can, when you can. Your detections and reports are credited to you and travel with you between employers.
Need help?
You don't need to be a member to ask.
Small organisation, no security team, not sure where to start after an incident? Email disclosure@sgitf.org and a member will point you in the right direction.
Closed-door sessions
Learn from real breaches.
Members walk through incidents and attacks they've handled — off the record, members only, under TLP.
How sessions workCorporate members
Ready to help?
If you work in cyber security in Singapore and are willing to share what you learn with other members, we'd like to hear from you.