About the Cloud Access Security Broker (CASB) category
What belongs in this category
The Cloud Access Security Broker (CASB) category covers products that give an organization control over the cloud services its people use. Typical entries discover sanctioned and unsanctioned apps (shadow IT), rate their risk, control what users can do in them, apply data loss prevention to uploads and sharing, and detect risky activity, working inline on traffic, through the services' APIs, or both.
A CASB bundled with a secure web gateway and zero trust network access fits Security Service Edge (SSE). Finding and fixing risky settings inside SaaS applications fits SaaS Security Posture Management (SSPM), and controlling the use of AI tools fits AI Usage Control. Every CASB may also be entered in Cloud Security.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the cloud use the product controls: users covered, cloud services recognized, data inspected, and customers that rely on it to govern SaaS use.
- Innovation — a cloud access problem solved in a new way, such as accurate discovery of unsanctioned apps, data controls that do not slow users down, or coverage of new SaaS services as they appear.
- Impact — results for customers: unsanctioned apps found and controlled, data exposure prevented, risky sharing removed. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.