About the Cloud Detection and Response (CDR) category
What belongs in this category
The Cloud Detection and Response (CDR) category covers products that watch cloud activity for attacks: unusual use of cloud consoles and APIs, stolen access keys, privilege escalation, suspicious changes to cloud resources and attacks on running workloads and Kubernetes. Typical entries correlate cloud logs with workload signals, tell the story of an attack across accounts and services, and contain it, for example by revoking keys or isolating a workload.
Finding risky settings before an attack fits Cloud-Native Application Protection Platform (CNAPP), and protection of individual workloads fits Cloud Workload Protection Platform (CWPP). Platforms that join cloud signals with endpoint and network data in one console fit Extended Detection and Response (XDR). A CDR product can also enter Cloud Security and Threat Detection and Response.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the cloud activity the product watches: accounts, regions and workloads covered, events analyzed, and customers that rely on it to catch cloud attacks.
- Innovation — a cloud detection problem solved in a new way, such as following an attacker across accounts and services, containing threats in seconds, or detections that need no tuning for each cloud.
- Impact — results for customers: cloud attacks caught and contained, time to detect and respond, false alerts reduced. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
