About the AI Security Posture Management (AI-SPM) category
What belongs in this category
The AI Security Posture Management (AI-SPM) category covers the security of AI infrastructure. Teams adopt AI services, model hosting, vector databases (which store data for AI search) and AI libraries faster than security can track them. Typical entries build an inventory of AI assets across cloud accounts and code repositories, map how models connect to data and the internet, find misconfigurations such as exposed endpoints or excess permissions, and rank the risks for fixing.
Posture management finds and ranks risks but does not sit in the path of live traffic; inline defense of running AI apps fits AI Application and Runtime Security. Checking third-party AI components fits AI Supply Chain Security, and compliance evidence for AI fits AI Governance, Risk and Compliance (AI GRC). Owners, approval and policy for AI agents fit Agentic AI Governance. Cloud platforms that add AI posture to wider cloud checks can enter Cloud-Native Application Protection Platform (CNAPP), and an AI-SPM product can also enter Security for AI.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the AI estate the product covers: cloud accounts and repositories scanned, AI assets discovered, and customers running AI at scale with it.
- Innovation — a posture problem solved in a new way, such as tracing a path from an exposed model endpoint to sensitive data, finding AI in code before deployment, or fixes applied automatically.
- Impact — what changed: AI assets found that security did not know about, misconfigurations fixed, exposed AI endpoints closed. Give before-and-after figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
