About the Network Detection and Response (NDR) category
What belongs in this category
The Network Detection and Response (NDR) category covers products that watch network traffic, inside the network as well as at its edge, to find attackers. Typical entries capture packets or flow records, use behavior models and threat intelligence to spot command-and-control traffic, lateral movement and data theft, including in encrypted traffic, and help responders investigate and block what they find. Many also cover cloud and operational technology networks.
Detection that joins endpoint, network and cloud data in one console fits Extended Detection and Response (XDR), and every NDR product can also enter Threat Detection and Response, the broad detection category. Network monitoring for operational technology can also enter OT Security. Every NDR product can also enter the broad Network Security category.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the traffic the product analyzes: networks and sites monitored, traffic volume, cloud and OT coverage, and customers that rely on it to find attackers inside the network.
- Innovation — a detection problem solved in a new way, such as finding threats in encrypted traffic without decrypting it, spotting attacker movement between systems, or response actions taken straight from the network.
- Impact — results for customers: attacks found that other tools missed, time to detect, investigations shortened. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.