About the Compromised Credential Protection category
What belongs in this category
The Compromised Credential Protection category covers products that find an organization's usernames, passwords, session cookies and tokens that have leaked outside the organization, and make them useless to attackers. Typical entries collect data from breaches, malware logs and criminal forums, match it to the organization's employees or customers, and act on it by forcing password resets, ending stolen sessions or blocking sign-ins.
Detecting attacks on identities inside the organization fits Identity Threat Detection and Response (ITDR), and wider monitoring of the dark web and impersonation fits Digital Risk Protection (DRP). Products that protect customer accounts can also enter Customer Identity and Access Management (CIAM).
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the reach of the product's data and its customers: sources monitored, credentials matched, organizations and users protected.
- Innovation — an exposed-credential problem solved in a new way, such as catching stolen session cookies that get around multi-factor authentication, matching leaked data to the right person, or resets that need no help desk work.
- Impact — results for customers: exposed credentials found and reset, account takeovers prevented, time from exposure to fix. Give totals and typical times.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.