About the AI Threat Hunting and Detection Engineering category
What belongs in this category
In this category, AI is used for security in two related SOC jobs: hunting and building detections. Typical entries turn threat intelligence and hunting ideas into searches across logs and telemetry, look for signs of attackers that existing alerts missed, and draft detection rules in the formats a team uses, such as SIEM queries. They test new rules against past data, measure false positives and suggest changes as the environment shifts.
Hunting led by human analysts or services fits Threat Hunting, and detection engineering without AI at its core fits Detection Engineering. Investigating alerts once they fire fits AI SOC Platform. A hunting product built on AI is also eligible for AI-Powered Security Solution.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the hunting and detection work the product supports: data sources searched, detections written and maintained, and customers whose SOC relies on it.
- Innovation — how the AI hunts or builds detections differently, such as turning a new threat report into tested rules quickly, finding attacker behavior without known indicators, or tuning rules to each environment.
- Impact — results for customers: threats found that alerts had missed, detections added and false positives cut, time from new threat to working rule. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
