About the Security Information and Event Management (SIEM) category
What belongs in this category
The Security Information and Event Management (SIEM) category covers platforms that bring in logs and events from across an organization, convert them to a common format and store them, run detection rules and analytics to raise alerts, and give analysts search and investigation tools. Most also produce the reports and long-term records that auditors ask for. Entries can be cloud-native or installed on premises, and may include built-in analytics and automation.
A platform that mainly stores and searches logs without detection fits Log Management, and products that filter and route data before it reaches a SIEM fit Security Data Pipeline Platform. Products that analyze security data with models and queries rather than correlation rules fit Security Analytics; a SIEM built on a security data lake still starts here. A SIEM can also enter Threat Detection and Response or Security Operations.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the scale and reach of the platform: data sources and events ingested, retention offered, and customers that run their SOC on it.
- Innovation — a SIEM problem solved in a new way, such as predictable cost at high data volumes, detections that work out of the box, or search fast enough for live investigation.
- Impact — results for customers: detection coverage gained, time to investigate cut, cost per unit of data ingested, audit reporting effort saved. Give before-and-after figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
