About the Security Operations category
What belongs in this category
The Security Operations category covers the tools a security operations center (SOC) runs on day to day: platforms that bring alerts, cases, evidence and response steps into one place, workbenches where analysts investigate, workflow and collaboration between shifts and teams, and reporting on SOC performance. Products whose main job is detecting threats, such as EDR or NDR, belong in Threat Detection and Response; a SIEM can enter both.
This is the broad SOC category, mainly for products that span several of the narrower ones or fit none of them. Narrower categories exist for Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), SOC Automation, Automated Investigation and Response, AI SOC Platform and Detection Engineering; a product that fits one of them starts there and can enter Security Operations as well. A SOC run for a client as a service fits SOC-as-a-Service.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the SOC work the product supports: analysts and teams using it, cases handled, tools connected, and customers that run their SOC on it.
- Innovation — a SOC problem solved in a new way, such as one workspace for every analyst task, handoffs between shifts that lose nothing, or metrics that show where time goes.
- Impact — results for customers: time to close cases, analyst workload reduced, tools consolidated, SOC metrics improved. Give before-and-after figures.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.