About the Continuous Threat Exposure Management (CTEM) category
What belongs in this category
The Continuous Threat Exposure Management (CTEM) category covers products and services that run exposure management as a repeating program rather than a one-off scan. Typical entries help a team decide which business areas to cover, discover assets and exposures in that scope, rank them by risk, check which ones attackers could use, and work with system owners until the fixes are done, before the next cycle begins.
What sets CTEM apart is coverage of the full cycle. A product that handles one stage, such as discovery, ranking or validation, starts with that stage's category, such as Attack Surface Management, Exposure Assessment Platform or Adversarial Exposure Validation (AEV). Services that run a CTEM program for clients belong here too. A CTEM product or service can always add an entry in Cyber Exposure Management as well.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the programs the product or service supports: organizations running continuous cycles on it, assets and business areas in scope, and how often each cycle runs.
- Innovation — a program problem solved in a new way, such as scoping tied to business priorities, validation built into every cycle, or fixes tracked with system owners until done.
- Impact — results for customers: exposures closed each cycle, time from discovery to fix, validated attack paths removed. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
