User Guide

Sign In

Click Sign In in the header. We use email magic links — no password to remember. Enter your email, check your inbox, click the link, and you're in.

💡 Subscribed? The same email you used to subscribe is the one to sign in with.

Light or Dark Mode

The site defaults to dark mode (better for SOC consoles and long reading sessions). Click the sun/moon icon in the header to switch. Your choice is remembered on this device.

Top Menu

The header gives you direct access to every surface on the platform:

• Sectors ▼ — All Sectors, Cross-Sector, and the seven verticals (Healthcare, Legal, Transportation, Private Equity, Banking, Energy, Education). Each opens that sector's landing page.
• Reports ▼ — Browse by report type: Monthly Briefs, Quarterly Reports, Threat Tracker, Compliance Calendars, Predictive Analyses, Flash Advisories, Weekly Reviews. "All Reports" lands on the unified browse page.
• Flash Advisories — Time-sensitive cybersecurity advisories across every sector, kept top-level for quick access.
• News — Curated cybersecurity news from leading sources (Krebs, Bleeping Computer, Dark Reading, Hacker News, The Register, Wordfence).
• Ransomware — Live ransomware breach tracker fed by Ransomware.live.
• Vulnerabilities — Latest CVEs, advisories, and KEV additions.
• Archive — Full-text search across every News, Ransomware, and Vulnerability item we've ingested.
• My Library — Your saved bookmarks, posts, and tracked items (signed-in members).

💡 On iPad, News / Ransomware / Vulnerabilities collapse into an Intel ▼ dropdown to keep the bar uncluttered.

Browse by Sector

Each sector has a dedicated landing page with its own product grid (Quarterly Reports, Flash Advisories, Threat Tracker, Compliance Calendar, Predictive Analyses, Monthly Briefs).

• Healthcare — HIPAA, OCR enforcement, healthcare ransomware, medical device security
• Legal — Law firm breaches, client confidentiality, bar association requirements
• Transportation & Logistics — Fleet security, ELD vulnerabilities, DOT/FMCSA compliance
• Private Equity — Portfolio company risk, M&A due diligence, SEC cyber disclosure
• Banking & Credit Unions — FFIEC, GLBA, payment card compliance
• Energy & Utilities — NERC CIP, OT/ICS security, critical infrastructure protection
• Education — FERPA, student data protection, ransomware targeting schools
• Cross-Sector — Weekly Reviews and advisories that affect multiple verticals (no single sector nexus)

The /reports/ Page

The unified browse for every published intelligence report. Use the filter rows to narrow:

• Type chips — Monthly Brief / Quarterly Report / Threat Tracker / Compliance Calendar / Predictive Analysis / Flash Advisory / Weekly Review (or All)
• Sector chips — Pick one sector and you'll see its reports plus cross-sector items by default
• Search — Full-text against title and excerpt
• Date range — From / To inputs to bound the results
• Sort — Newest, Oldest, Title A–Z, Sector, or Type
• Exclude Cross-Sector — Tick to hide cross-sector items when you want a strict single-sector view (preference saved on this device)

💡 Every Reports menu item deep-links into this page with the right type pre-selected — e.g. clicking "Monthly Briefs" lands you on /reports/?type=monthly-brief. You can share filtered URLs with colleagues.

Flash Advisories

Time-sensitive cybersecurity advisories published as threats develop. Triaged automatically every 6 hours and on-demand by our analysts. Visit /flash-advisories/ for the full archive with sector filtering and search.

When you pick a sector chip (say, Legal), you'll see Legal-tagged advisories plus cross-sector advisories that affect everyone — because cross-sector intelligence is relevant to your sector by definition. Toggle Exclude Cross-Sector for a strict view.

Cross-Sector / Weekly Reviews

Every Friday we publish a Week in Review covering the week's breaches, ransomware claims, regulatory developments, and emerging risks across all seven sectors. Visit /cross-sector/ for the full archive.

News

Cybersecurity news from leading sources, refreshed continuously. Each card has a share row (LinkedIn / X / Email / Copy) and a save-to-library button. Sort by date and search by keyword.

Ransomware Breach Tracker

Live ransomware claims from leak sites, fed by Ransomware.live PRO. Click any card to expand its full description, facts block, and a screenshot preview of the leak post (when available — fetched server-side via Tor on our infrastructure, no Tor required on your end). Each card has share + save buttons.

⚠️ Leak content can include identifying information, documents, and faces. Screenshots are gated behind a click-through caveat.

Vulnerabilities

Latest CVE disclosures, CISA advisories, ZDI coordinated disclosures, Tenable Research, and Wordfence. Quick Stats banner at the top shows active counts by severity and CISA-sourced volume — click any tile to filter to that view. Search and severity filters available.

Archive (Full-Text Search)

Every News, Ransomware, and Vulnerability item we've ingested since the archive launched, searchable by keyword, source, sector, and date range. Useful when you remember something but not exactly where you saw it.

Save What Matters to You

Click the Save bookmark button on any post, news card, ransomware breach, vulnerability, or archive item to add it to your personal library. Visit /library/ to find everything you've saved.

The library has tabs: Summary (counts + most recent saves), Posts, News, Ransomware, Vulnerabilities. Click a count tile in the Summary tab to jump to that section.

💡 Library is per-member, persists across devices, and works on free and paid tiers.

Download Any Report as PDF

Every post page has a Download PDF button below the title. The PDF is generated on the spot and includes your subscriber information.

• Free / Individual tiers — Cropped TFG default logo header, Fowler Group footer, fingerprinted with your email + issue date for traceability
• Organization tier — Your custom logo (if uploaded) in the header, "Powered by The Fowler Group" footer, your custom primary color on accents and table headers
• Consultant tier — Full white-label: your logo, your custom footer text, your colors. Fowler Group disclaimers and branding stripped from content

Branding Settings (Organization & Consultant)

Visit /account-branding/ (or use the Branding Settings link in the member menu) to upload your logo, set your primary and accent colors, choose accent line thickness, and customize the footer.

• Logo — PNG or JPG, up to 1200×1200, transparent background recommended for clean header rendering
• Primary color — Replaces teal on bullets, callouts, hero band, table headers, and the fat footer band
• Accent color & thickness — Thin rule above the masthead and footer (1pt / 2pt / 3pt)
• Footer text — Up to 120 chars (Consultant only — Organization keeps the "Powered by" line)

The page has a live preview that updates as you edit. Click View full preview for a centered modal at letter-page proportions.

Add Deadlines to Your Calendar

Compliance Calendar entries have one-click buttons to push the deadline into your calendar app:

• Google Calendar — Opens Google Calendar with the event pre-filled
• Outlook — Opens Outlook on the web with the event pre-filled
• .ics Download — Downloads a standard calendar file compatible with Apple Calendar, Outlook desktop, Fastmail, etc.

Action items (marked ⚠️) have a red accent so deadlines stand out from informational entries.

Site-Wide Search

Find any article across all sectors and content types.

• Click the magnifying glass in the header
• Or press Ctrl + K (Windows) / ⌘ + K (Mac)

Find in Article

Search within the article you're currently reading — useful for long quarterly reports.

• Click the Find button below the article title
• Or press Ctrl + F (Windows) / ⌘ + F (Mac)

Matches highlight in yellow. Use the arrow buttons or press Enter to jump between matches. Esc closes.

Member Menu

When signed in, your avatar appears top-right. Click it for:

• My Account — Update email, manage payment, view subscription status, cancel/change plan
• Preferences — Pick your default homepage (paid tiers only — see below)
• Email Alerts — Subscribe to alerts about reports, news, ransomware claims, and vulnerabilities (paid tiers only)
• Branding Settings — Logo + colors + footer (Organization / Consultant only)
• Help — This page
• Sign Out

Choose Your Default Homepage

Paid subscribers can pick what loads when they visit tfgbriefs.com. Visit /account-preferences/ (or use Preferences in the member menu) and pick from Reports, Flash Advisories, Cross-Sector, News, Ransomware, Vulnerabilities, Archive, or My Library.

💡 To see the original homepage when needed, visit /?home=1 — that bypasses your preference for one load (without changing it).

Subscription Tiers

What Alerts Cover

Paid subscribers can opt into email alerts on three classes of intelligence:

• TFGBriefs reports — pick any combination of sectors and content types (Flash Advisories, Monthly Briefs, Quarterly Reports, Threat Tracker, Compliance Calendar, Predictive Analysis, Week in Review). A separate toggle controls whether cross-sector items are included.
• Live intelligence feeds — News (with a minimum-severity filter), Ransomware claims (with an optional US-only filter), and Vulnerabilities (with a minimum CVSS gate).
• My Library updates — coming soon. The toggle is visible but disabled until the change-monitoring service ships.

💡 Manage everything at /account-alerts/ or via "Email Alerts" in the member menu.

Delivery Style & Frequency

Two independent choices control what arrives in your inbox:

• Style — Instant (one email per matching item) or Digest (one email per cadence with all matches grouped).
• Frequency — As they happen, hourly, once a day at the time you pick, or once a week on the day and time you pick.

Both are honored against your time zone. Your browser's time zone is detected automatically; change it on the preferences page if needed.

Do Not Disturb

Set a quiet-hours window (e.g. 9 PM → 7 AM) and TFGBriefs will hold any matching alerts until DND ends. A separate "silence weekends" toggle holds Saturday + Sunday alerts until Monday morning. Nothing is dropped — held items go out together when the window opens.

Daily Volume Cap

Pick a maximum number of emails per 24 hours (5, 10, 20, 50, or unlimited). If your subscriptions ever produce more, the overflow rolls into the next digest cycle. The next email tells you how many were held back.

💡 The default cap is 20/day. If you choose Instant + As they happen on a high-volume sector, the cap acts as a safety valve so you don't get swamped during busy news weeks.

⚠️ Whitelist Our Sender

Corporate mail filters often quarantine messages from new senders. Add the following to your safe-senders / allow list (or ask your IT team to do so) before relying on alerts:

• From address: [email protected]
• Sending domain: mail.tfgbriefs.com

The "Send Me a Test Email" button on the alerts page is the fastest way to confirm delivery is working. If the test doesn't arrive within a couple of minutes, check your spam/junk folder first, then ask your IT team to whitelist the entries above.

Unsubscribing

Every alert email includes a one-click Unsubscribe link in the footer. Clicking it disables alerts immediately. You can also flip the master "Enable email alerts" toggle off at /account-alerts/ at any time.

Questions about your subscription, the content, or technical issues?

Email: [email protected]

We typically respond within one business day.