About the AI Code Security and Remediation category
What belongs in this category
In this category, AI does security work inside software development. Typical entries review code as it is written or submitted, find vulnerabilities and insecure patterns, explain them in the developer's terms and propose or open a fix, often as a pull request the developer can accept. Many also check code produced by AI coding assistants, which can repeat insecure patterns at scale.
Code scanning without AI-generated fixes fits Application Security, and managing application security findings across tools fits Application Security Posture Management (ASPM). Security built into the development pipeline fits DevSecOps. AI code tools may add an entry in AI-Powered Security Solution.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the code the product secures: repositories and developers covered, languages supported, and customers that ship its fixes into production.
- Innovation — how the AI finds and fixes flaws differently, such as fixes that pass tests on the first try, fewer false positives than rule-based scanning, or checks built into AI coding assistants.
- Impact — results for customers: vulnerabilities fixed, share of AI-proposed fixes accepted, time from finding to fix, security backlog reduced. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.