SBOM Management

Nominations for SBOM Management

Nominations are open

Enter this category by February 27, 2027. Anyone can submit an entry: the company, the nominee, a colleague or an agency.

Nominate in this category

About the SBOM Management category

What belongs in this category

The SBOM Management category covers products that handle software bills of materials (SBOMs), the ingredient lists of software. Typical entries generate SBOMs from code, builds and binaries, collect SBOMs from suppliers, store and version them, check the components they list against vulnerability data, use Vulnerability Exploitability eXchange (VEX) statements to show which flaws matter, and share SBOMs with customers and regulators.

Securing the wider build and delivery path fits Software Supply Chain Security, which an SBOM product may also enter, and managing open source risk in daily development fits Open Source Security. Products that help device makers manage SBOMs as part of their product security duties can also enter Product Security Platform. Application Security, the broad category for application products, takes SBOM tools as well.

Related categories to enter

Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.

Software Supply Chain Security — for securing the whole path from code to release

Open Source Security — for open source risk during development

Product Security Platform — for SBOMs managed as part of product security duties

Vulnerability Management or Risk-Based Vulnerability Management — for acting on the vulnerabilities SBOMs reveal

Third Party Risk Management (TPRM) — for supplier risk beyond the software itself

Internet of Medical Things (IoMT) — for SBOMs of connected medical devices

How entries are judged

An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.

Strong entries in this category show:

Leadership — the SBOMs the product handles: SBOMs created or collected, components and suppliers tracked, formats supported, and customers that rely on it for software transparency.

Innovation — an SBOM problem solved in a new way, such as accurate SBOMs from binaries without source code, exploitability data that cuts noise, or sharing that meets customer and regulator requests automatically.

Impact — results for customers: time to answer whether a new vulnerability affects them, supplier SBOMs collected, regulatory requests met, false alarms removed. Give figures from customers.

The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.

How to enter

A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.