About the Cybersecurity Research category
What belongs in this category
The Cybersecurity Research category covers original research published by companies, research teams, universities or independent researchers. Typical entries are discoveries of new vulnerabilities or attack techniques, investigations of threat actors and campaigns, surveys and data studies about the state of security, and academic papers. The work should be published, and vulnerabilities should have been disclosed responsibly to the affected vendors.
A research team can also be nominated in Threat Intelligence Team of the Year for threat intelligence, or Cybersecurity Team of the Year for other teams. Intelligence delivered as a product or service fits Cyber Threat Intelligence (CTI), and a bug bounty program, which rewards outside researchers for reporting flaws, fits Bug Bounty and Crowdsourced Security.
Related categories to enter
Each category is judged separately, so you can enter the same work in every category that fits, with a separate nomination for each. Tailor each nomination to that category's focus. The people behind the work can also be nominated in the Cybersecurity Professional / Team group.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. For blogs, books, podcasts and research, the jury looks at the quality of the work, the audience it reaches and its influence on how people practice or think about security. Each nomination competes in its category against similar work, so an independent writer or host is not ranked against a large media brand on audience alone. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the quality and standing of the research: methods, data or sample size, peer review or independent validation, and who has cited it.
- Innovation — what is new: a vulnerability, technique or finding nobody had reported, or a new method for studying a security problem.
- Impact — the research's effect: vulnerabilities fixed, defenses or standards changed, coverage by media and analysts, and use by defenders, buyers or policymakers in their decisions. Give examples and figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
Authors, hosts, publishers, companies and research teams can enter their own work, and a PR agency can enter it on their behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as audience size, downloads or sales figures, or research details not yet public. Deadlines, pricing and entry steps are on the How it Works page.