About the Patch and Configuration Management category
What belongs in this category
The Patch and Configuration Management category covers products that close known weaknesses by changing systems, not only by reporting on them. Typical entries test and roll out operating system and third-party patches, schedule updates around working hours, roll back updates that fail, apply hardening baselines and correct drift when someone changes a secure setting.
Finding and ranking vulnerabilities fits Vulnerability Management or Risk-Based Vulnerability Management, and managing devices in general, including their apps and enrollment, fits Unified Endpoint Management (UEM). Finding misconfigurations across cloud accounts and services fits Cloud-Native Application Protection Platform (CNAPP); fixing the configuration of the workloads themselves belongs here. A product that both finds vulnerabilities and patches them can enter this category and Vulnerability Management.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the systems the product keeps current: devices and servers managed, operating systems and third-party applications covered, and customers that rely on it for patching.
- Innovation — a patching problem solved in a new way, such as patches tested before they reach production, updates that do not disrupt users, or configuration drift fixed automatically.
- Impact — results for customers: patch coverage, time from release to deployment, failed updates, configuration findings closed. Give before-and-after figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.