About the Exposure Assessment Platform category
What belongs in this category
The Exposure Assessment Platform category covers products that look at every way an attacker could get in, not only software vulnerabilities: risky cloud and SaaS settings, weak or overprivileged identities, exposed services and unprotected devices as well as missing patches. Typical entries combine these findings, show how they connect into attack paths toward important systems, and rank them in a single list so teams fix the exposures that matter most.
Ranking software vulnerabilities only fits Risk-Based Vulnerability Management, and support for the whole continuous cycle, including scoping, validation and driving fixes, fits Continuous Threat Exposure Management (CTEM). Platforms that prove exposures can be exploited fit Adversarial Exposure Validation (AEV). An exposure assessment platform can also compete with broader platforms in Cyber Exposure Management.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the breadth of the assessment: kinds of exposure covered, assets and identities assessed, and customers that use it to set fix priorities across teams.
- Innovation — an assessment problem solved in a new way, such as attack paths that show which small issues combine into a serious one, or a single ranking across cloud, identity and vulnerability findings.
- Impact — results for customers: critical attack paths closed, exposures cut on key systems, fewer findings sent to teams for the same risk reduction. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
