About the Identity Threat Detection and Response (ITDR) category
What belongs in this category
The Identity Threat Detection and Response (ITDR) category covers products that watch identity systems and sign-in activity for signs of attack and help stop it. Typical entries detect stolen passwords and session tokens (the pass a user receives after signing in) in use, attacks on on-premises directories and cloud identity providers, unusual privilege changes and attempts to get around multi-factor authentication (MFA), and respond by ending sessions, forcing resets or disabling accounts.
Finding identity weaknesses before an attack fits Identity Security Posture Management (ISPM), and a product that does both can enter each. Detection across endpoints, network and cloud as well as identity fits Extended Detection and Response (XDR).
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — trust in demanding environments: identities and directories monitored, large or regulated customers, use by security operations teams and incident responders.
- Innovation — an identity attack caught in a new way, such as detecting stolen session tokens, attacks that move between on-premises directories and cloud identity providers, or response that does not lock out legitimate users.
- Impact — results for customers: identity attacks detected and stopped, time to detect and contain, false alarms reduced, directories recovered after an attack. Give figures from incidents where customers allow it.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
