About the Cyber Exposure Management category
What belongs in this category
The Cyber Exposure Management category covers products that help an organization understand and reduce its overall exposure to attack. Typical entries combine several capabilities, such as finding assets, assessing vulnerabilities and misconfigurations, ranking exposures by risk, validating them and reporting exposure to leaders, often across IT, cloud, identity and operational technology.
Exposure management has several narrower categories, and this one is meant mainly for platforms that cover more than one of them, or products that none of them describes. The specialist categories are Vulnerability Management, Risk-Based Vulnerability Management, Attack Surface Management, Cyber Asset Attack Surface Management (CAASM), Exposure Assessment Platform, Continuous Threat Exposure Management (CTEM) and Adversarial Exposure Validation (AEV); a specialist product is entered there first and may also compete here against broader platforms.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the scope of exposure the product manages: asset types and environments covered, data sources combined, and customers that run their exposure program on it.
- Innovation — an exposure problem solved in a new way, such as one measure of exposure across IT, cloud and identity, reports leaders can act on, or a program that runs with little manual effort.
- Impact — results for customers: overall exposure reduced, critical exposures closed faster, tools consolidated. Give before-and-after figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
