Help us join FIRST

We guide your organisation through the full FIRST.org membership process — from SIM3 gap analysis and process improvement to your official application and acceptance.

Pipedrive form will go here.

What would you like to know?

what is first

FIRST is the world’s largest network of incident response teams

The Forum of Incident Response and Security Teams (FIRST) has been connecting security teams since 1990. Today it brings together more than 700 teams across over 100 countries — from national CERTs and government agencies to MSSPs, financial institutions, and technology companies.

FIRST membership signals that your team meets a recognised standard of incident response maturity and trustworthiness. It gives you access to a trusted community where teams share intelligence, coordinate on incidents, and learn from each other’s experience. For many organisations, FIRST membership is a meaningful credential that demonstrates your commitment to professional security operations.

Talk to us about FIRST membership
Benefits you get

Why your team should join FIRST

Access to help and guidance from other FIRST members — connect with experienced incident response teams who can help you work through operational challenges and share what works for them

Access to the FIRST MISP server and shared intelligence — receive and contribute cyber threat intelligence through FIRST’s trusted MISP instance, giving your team early visibility of threats relevant to your sector

Access to the FIRST international conference — attend one of the best defender-oriented conferences in the world, with discounted member pricing and access to sessions not available to the public

Be part of special interest groups and international standards — contribute to FIRST SIGs that develop standards, frameworks, and best practices used by incident response teams worldwide

Learn tips, tools and techniques from the best incident responders — access training, workshops, and knowledge-sharing sessions run by teams that handle some of the most complex security incidents globally

How we help

A structured path from gap analysis to FIRST membership

We take a methodical approach to FIRST membership — starting with a clear picture of where your team stands today, then working with you to close the gaps before you apply. This means your application is well-prepared and your team genuinely benefits from the process, not just the credential.

01

SIM3 gap analysis

We assess your team against the Security Incident Management Maturity Model (SIM3) — the same framework FIRST uses to evaluate applicants. This gives you a clear, structured baseline across organisation, human, tools, and processes so you know exactly where you stand and what needs attention.

01

Process improvement

Based on the gap analysis, we work with your team to address the areas that need improvement. This might include documenting incident response procedures, clarifying team roles, improving tooling, or strengthening your information-sharing practices. We focus on practical changes that improve your operations — not just ticking boxes.

01

Readiness assessment

Once improvements are in place, we run a second SIM3 assessment to confirm your team is ready to apply. This gives you confidence that your application will stand up to scrutiny and that your team genuinely meets the maturity standards FIRST expects.

01

FIRST application support

We help you prepare and submit your FIRST membership application, drawing on our experience with the process and our relationships within the FIRST community. We guide you through the application requirements, help you present your team’s capabilities clearly, and support you through to acceptance.

Start your FIRST membership journey
why work with us

We know what FIRST looks for in a membership application

FIRST liaison members with deep relationships in the community — our team members are active FIRST participants who understand the organisation from the inside
Experienced SIM3 assessors — we use the Security Incident Management Maturity Model to assess your team against the same criteria FIRST uses to evaluate applicants
Proven application experience — we’ve helped organisations successfully navigate the FIRST membership process from initial gap analysis through to acceptance
Active SIG participants and contributors — we participate in FIRST Special Interest Groups and contribute to the standards and best practices that shape the community
Cosive's Chris Horsley presenting at FIRST in Denmark.
Frequently asked questions

Common questions about FIRST membership

get in touch

Start your FIRST membership journey

Tell us about your organisation and where you are in the FIRST application process.

Pipedrive form will go here.