About the AI SOC Platform category
What belongs in this category
Here AI does the work of a security operations analyst, so the AI SOC Platform category belongs with AI used for security rather than securing AI. Typical entries take alerts from SIEM, EDR, email, identity and cloud tools, gather the context an analyst would, decide whether each alert is a real threat, and write up the evidence and a recommended response. Analysts review conclusions instead of working each alert by hand, and the platform can often close benign alerts on its own.
Following predefined playbooks fits Security Orchestration, Automation and Response (SOAR), closing routine alerts without an analyst fits Automated Investigation and Response, and AI agents that also work outside the SOC, such as on vulnerabilities or compliance, fit Agentic Security Platform. Incidents in an organization's own AI applications and agents fit AI Incident Detection and Response. Since it runs a core SOC function, an AI SOC platform may also suit Security Operations, and it is eligible for AI-Powered Security Solution.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the SOC work the platform handles: alerts investigated each day, sources connected, and customers that rely on it as part of their SOC.
- Innovation — how the platform investigates differently, such as reasoning that adapts to each alert, evidence an analyst can check quickly, or learning from analysts' feedback.
- Impact — results for customers: share of alerts investigated, time from alert to conclusion, analyst hours saved, accuracy checked against analysts' own findings. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.