About the Firmware Security category
What belongs in this category
The Firmware Security category covers products that secure the low-level code that starts and runs hardware, below the operating system where most security tools cannot see. Typical entries analyze firmware images for vulnerabilities and hidden components, check firmware on laptops, servers and network gear for tampering and implants (hidden malicious code), track firmware versions and updates, and verify the integrity of the hardware supply chain.
Security built into devices by their makers fits Embedded Security, and product security management for manufacturers fits Product Security Platform. Firmware vulnerabilities can also be tracked in Vulnerability Management. Checking firmware on the connected devices an organization already runs is a fit for Internet of Things (IoT) Security as well.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the firmware the product covers: devices, servers and components analyzed or monitored, vendors and chip architectures supported, and customers that rely on it.
- Innovation — a firmware problem solved in a new way, such as finding implants other tools miss, analysis of binaries without source code, or integrity checks across a whole server fleet.
- Impact — results for customers: firmware vulnerabilities and tampering found, devices brought up to date, hardware supply chain issues caught. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.