About the AI Red Teaming category
What belongs in this category
The AI Red Teaming category covers testing AI systems, not using AI to test other systems. Typical entries run large sets of adversarial prompts and attack scenarios against models, chatbots, retrieval-augmented generation (RAG) applications and agents to find prompt injection, jailbreaks, data leakage, harmful output and unsafe actions. Entries can be automated testing products, expert red team services or both, and often retest after each change to the model or application.
AI agents that carry out penetration tests of networks and applications fit AI Penetration Testing. Blocking attacks on AI applications in production fits AI Application and Runtime Security. Continuous automated attack testing of conventional systems fits Adversarial Exposure Validation (AEV). Red teaming entries can go into Security for AI as well, without needing other AI defenses.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the AI systems the product or service has tested: models, applications and agents covered, attack techniques in its library, and customers that test before every release.
- Innovation — a testing problem solved in a new way, such as attacks generated for each application's purpose, testing multi-step agent behavior, or results tied to specific fixes.
- Impact — what testing changed: weaknesses found and fixed before release, retests after each model change, releases approved with evidence. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.