Digital Forensics

Nominations for Digital Forensics

Nominations are open

Enter this category by February 27, 2027. Anyone can submit an entry: the company, the nominee, a colleague or an agency.

Nominate in this category

Past award recipients in Digital Forensics

About the Digital Forensics category

What belongs in this category

The Digital Forensics category covers products and services that preserve and examine digital evidence: disk and memory images, mobile devices, cloud logs, email and network captures. Typical entries collect evidence remotely and at scale, keep a record of who handled it, rebuild timelines of attacker activity and produce findings that can stand up in legal proceedings or regulatory reviews.

Coordinating the overall response to an incident fits Incident Response, and the logs forensics often depends on fit Log Management. Forensics for insider cases can also enter Insider Risk Management.

Related categories to enter

Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.

Incident Response — for coordinating the wider incident response

Log Management — for preserving the logs investigations depend on

Insider Risk Management — for investigating insider cases

Threat Hunting — for forensic tools that sweep endpoints for signs of compromise

Cyber Threat Intelligence (CTI) — for linking evidence to known threat actors

Cybersecurity Service Provider of the Year — for the provider delivering forensic services

How entries are judged

An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.

Strong entries in this category show:

Leadership — the forensic work the product or service supports: cases handled, device and data types covered, and customers that rely on it.

Innovation — a forensics problem solved in a new way, such as remote collection from thousands of devices, faster timelines, or analysis of cloud and SaaS evidence.

Impact — results for customers: time to establish what happened, cases resolved, evidence accepted in legal or regulatory proceedings. Give figures from cases, anonymized if needed.

The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.

How to enter

A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.