About the Email Security category
What belongs in this category
The Email Security category covers products that protect email, one of the most common ways attacks start. Typical entries are gateways that filter mail before it arrives and cloud products that connect to Microsoft 365 or Google Workspace through their APIs. They detect phishing, malware and fraudulent payment requests from impersonated executives or suppliers (business email compromise), spot compromised mailboxes and remove malicious messages after delivery. Many also encrypt outbound mail and use sender authentication (SPF, DKIM and DMARC) to stop others sending mail in the organization's name.
Phishing defense beyond the inbox, across web, messaging and mobile, fits Anti-Phishing, and an email product with that reach can enter both. Three retired categories can enter here. Content disarm and reconstruction, which rebuilds attachments without macros or scripts that could carry malware, can also enter Anti-Malware. Messaging security can also enter Secure Collaboration Platform, and phishing detection and response can also enter Anti-Phishing.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the mailboxes the product protects: users and organizations covered, email platforms supported, threats stopped, and customers in targeted sectors.
- Innovation — an email problem solved in a new way, such as catching fraud messages that contain no link or attachment, learning normal communication to spot impersonation, or pulling a message from every mailbox at once.
- Impact — results for customers: phishing and fraud emails stopped, fewer missed threats reported by users, time to remove malicious mail cut, losses prevented. Give before-and-after figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.