Most security people do not want a shirt that just says "cyber" in a glowing font. They want one that names their actual job, or the joke only their team gets. That is why a red team shirt, a SOC tee or an OSINT hoodie makes a better gift than generic hacker merch: it shows you know what they do all day.
Our sales agree. The two most-ordered pieces at HackCloth are the Security Professional Hoodie and the Ethical Hacker Hoodie, both designs that let people wear their role. So this guide goes role by role: what each job is in plain English, and which designs land. Where we do not make something for a role, we say so.
The cheat sheet: hacker shirts by security role
| Role | What they do | Pick |
|---|---|---|
| Red team / penetration tester | Attack systems with permission to find weaknesses first | Red Team T-Shirt or Hoodie |
| Blue team / SOC analyst | Watch alerts, investigate, respond to incidents | SOC Team T-Shirt, No Logs, No Crime T-Shirt |
| Purple team | Red and blue working side by side to improve detection | A Red Team plus SOC Team pair, or the Wireshark Hoodie |
| OSINT investigator | Gather intelligence from public sources | OSINT T-Shirt or Hoodie |
| GRC and security leadership | Policy, risk, audits and budgets | Security Professional Hoodie or Sweatshirt |
| Students, CTF players, career changers | Learn by practicing on legal challenges | Ethical Hacker Hoodie, Won't Hack! Hoodie |
| Developers and IT support | Build and run the systems security protects | Tech Support Hoodie, Coffee & Hack Hoodie |
Red team vs blue team, in one minute
The colors are borrowed from military war games. In security, the red team attacks (with written permission) and the blue team defends. Nobody really "wins": the point is to find gaps and fix them before a real attacker does.
Quick test: "offensive" or "pentest" in the job title means red; "SOC," "detection" or "incident response" means blue. Unsure? The Security Professional design works for both.
Red team shirt picks for penetration testers and red teamers
The job: A penetration tester is hired to break into an organization's systems within an agreed scope and time window, then write a report on what they got into and how to fix it. Red teaming is the longer, stealthier version: a small team imitates a real adversary, sometimes including phishing or physical entry, to test whether defenders notice. The report, not the break-in, is what the client pays for.
What lands: Designs that pick a side out loud, plus jokes about the tools they use every week. TCM Security's Ethical Hacker Gift Guide 2024 even listed us as "Hackcloth Red Team Attire."
- Red Team T-Shirt ($45): RED TEAM in double-line, neon-sign lettering in red with a cyan shadow. Black, White or Melange Grey. The most literal pentester shirt we make.
- Red Team Hoodie ($80): the same print on a 320 GSM fleece-lined hoodie, for client sites with aggressive air conditioning. Black, White or Melange Grey.
- Hashcat Hoodie ($80): a black cat peeking over a blue striped box, with "Cracking Jokes?" crossed out and "Cracking Hashes." underneath. Hashcat is a free password-cracking tool testers use to show how quickly weak passwords fall.
Blue team hoodie and SOC analyst gift ideas
The job: The blue team is the defense: they build monitoring, harden systems and respond when something gets through. A SOC (security operations center) analyst is the front line, triaging a constant stream of alerts and escalating or containing the real ones. Many SOCs run around the clock, so shift work comes with the job.
What lands: Jokes about logs, packets and the alert queue. Honest note if you searched for a "blue team hoodie": we do not print one with those exact words. These designs say it in the language defenders actually use.
- SOC Team T-Shirt ($45): a smug cartoon monkey in sunglasses and a bow tie above the words SOC TEAM. Melange Grey or White only. A solid SOC analyst gift for someone who just joined a team.
- No Logs, No Crime T-Shirt ($45): one of our best sellers, with NO LOGS in yellow over NO CRIME in white outline. The joke: no logs means no evidence, so officially nothing happened. Defenders laugh because it is their nightmare.
- Wireshark Hoodie ($80): a stacked WIRESHARK wordmark with a pair of big, psychedelic eyes across the middle. Wireshark is the free tool for watching network traffic packet by packet, which is what those eyes are doing. Black or Melange Grey.
Purple team: when red and blue sit together
The job: Purple teaming is less a department and more a way of working. The attackers run a technique, the defenders check in real time whether their tools caught it, and both sides tune detections on the spot.
What lands: We do not make a Purple Team design, so build one: a Red Team T-Shirt for one person, a SOC Team T-Shirt for the other. For a single gift, the Wireshark Hoodie is neutral ground; both sides live in packet captures.
OSINT shirts for open-source intelligence investigators
The job: OSINT stands for open-source intelligence: information gathered from public sources such as websites, social media, public records and satellite imagery. It powers threat intelligence, fraud checks, journalism and pentest reconnaissance, and volunteer events like Trace Labs' CTFs use it to help find missing people. The real skill is patient, legal verification.
What lands: Almost every OSINT person has been jokingly called a stalker by a friend. Our OSINT design, one of our best sellers, leans right into it.
- OSINT T-Shirt ($45): a large outlined OSINT in red, with "I don't stalk" over "I investigate." in red typewriter type. Black, White or Melange Grey.
- OSINT Hoodie ($80): the same print on heavyweight fleece, in Black, White or Melange Grey. A crewneck version lives in our sweatshirt collection.
GRC and security leadership: the "Security Professional" crowd
The job: GRC means governance, risk and compliance: the people who write security policy, map controls to frameworks like NIST, ISO 27001 or SOC 2, run risk assessments and steer the company through audits. Security managers and CISOs sit above both GRC and the technical teams, turning risk into budgets and board slides.
Tip for gift buyers: SOC 2 is an audit report, not a security operations center. Same letters, different job.
What lands: Our number one seller. The Security Professional design crosses out HACKER in red and writes SECURITY PROFESSIONAL underneath in white: what friends call them versus what the business card says.
- Security Professional Hoodie ($80): black, and our most-ordered piece overall. The safest bet in this guide.
- Security Professional Sweatshirt ($80): the same design as a crewneck in White, Baby Blue, Light Pink, Olive Green or Black, for offices somewhere between hoodie and blazer.
Students, CTF players and career changers
The job: CTFs (capture the flag competitions) are legal hacking puzzles: players break into deliberately vulnerable systems to find a hidden piece of text called a "flag." Career changers often arrive from help desk, the military or development, studying for certifications and building home labs at night.
What lands: Identity. Someone three months into their first course wants to wear the word "hacker" before anyone else will call them one.
- Ethical Hacker Hoodie ($80): our second most-ordered piece. The print is a single, widely spaced HACKER in red; the "ethical" part lives in the name, not on the chest. Black, White or Melange Grey.
- Won't Hack! Hoodie ($80): "I won't hack your girlfriend's account." in bold yellow. Mention you are learning to hack and someone will ask you to break into an account. This answers first (no, because that is a crime). Black or Melange Grey.
- The Hashcat Hoodie above fits too: hash cracking is a CTF staple.
Developers and IT support who live next to security
The job: Developers write the code security teams test, and good ones fix findings before the retest. IT support and sysadmins keep accounts, laptops and servers running, and are usually the first to hear "I think I clicked something."
What lands: Humor about the work, not security jargon.
- Tech Support Hoodie ($80): an astronaut on a BMX bike trailing flames, under the words TECH SUPPORT IS HERE. For the person everyone calls when the Wi-Fi drops. Black or Melange Grey.
- Coffee & Hack Hoodie ($80): a small, grumpy gray cat holding a mug of coffee, with "Coffee and Hack" underneath. Low-key enough for a standup meeting, and one of our best sellers.
The boring but important part: fabric, fit and shipping
- T-shirts ($45): unisex regular fit, round neck, 180 GSM combed cotton (Melange Grey is 83% cotton, 17% polyester), bio-washed and pre-shrunk.
- Hoodies and sweatshirts ($80): 320 GSM, fleece-lined and brushed inside, bio-washed and pre-shrunk.
- Sizing: check the size guide on the product page, and size up for a relaxed fit.
- Shipping and returns: free standard shipping to the United States. See our refund policy for returns.
Browse every design in our hoodie collection or T-shirt collection, or read what each hacker shirt joke means. Shopping for the holidays? Try our gift guide for ethical hackers and security pros, and if they are heading to a con, what to wear to DEF CON and BSides. TCM Security also has a clear breakdown of the types of ethical hacking.
FAQ
What is the difference between a red team and a blue team?
A red team attacks an organization's systems with permission, imitating real adversaries to find weaknesses. A blue team defends those systems by monitoring, detecting and responding to attacks. Both share one goal: fixing gaps before a real attacker finds them.
What is a purple team?
A purple team is red and blue working together in real time: attackers run a technique, defenders check whether they detected it, and both improve detections on the spot. In many companies it is an exercise rather than a separate team.
What is OSINT?
OSINT means open-source intelligence: information collected from publicly available sources such as websites, social media, public records and satellite imagery. Security teams, investigators and journalists use it for threat intelligence, due diligence and reconnaissance.
What is a good gift for a SOC analyst?
Something that references their actual work. HackCloth's SOC Team T-Shirt and No Logs, No Crime T-Shirt ($45 each) are role-specific picks, and the Wireshark Hoodie ($80, 320 GSM fleece) suits long monitoring shifts. HackCloth ships free to the United States.
Is "ethical hacker" a real job title?
It is used, but most job postings say penetration tester, security consultant or offensive security engineer. The term is widely recognized through EC-Council's Certified Ethical Hacker (CEH) certification, and many people who do authorized security testing call themselves ethical hackers.