About the Detection Engineering category
What belongs in this category
The Detection Engineering category covers products that treat detections like software: writing rules, testing them against real and simulated attacks, managing versions, deploying them to SIEM and XDR tools and measuring coverage against common catalogs of attacker techniques. Typical entries show gaps in coverage, flag noisy or broken rules and track changes over time.
Detection engineering where AI writes and tunes rules fits AI Threat Hunting and Detection Engineering. Products whose main job is running simulated attacks across the whole security stack fit Adversarial Exposure Validation (AEV), and the platforms that run the rules fit Security Information and Event Management (SIEM). Libraries of ready-made detection content also belong here, and a detection engineering product can also enter Security Operations, the broad SOC category.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the detection programs the product supports: rules managed, platforms deployed to, and customers whose detection teams work in it.
- Innovation — a detection problem solved in a new way, such as testing every rule before release, coverage maps tied to real attacks, or rules that move between SIEM platforms without rewriting.
- Impact — results for customers: coverage gaps closed, broken or noisy rules fixed, time from new threat to deployed rule. Give before-and-after figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.