About the SOC Automation category
What belongs in this category
The SOC Automation category covers products that handle specific, repetitive analyst chores, such as enriching alerts with context, grouping duplicates, routing cases to the right analyst, writing shift reports or filling in tickets. They are usually quick to deploy and focused on one or a few tasks, rather than a platform for building any workflow.
Platforms for building playbooks across many tools fit Security Orchestration, Automation and Response (SOAR). Products that close routine incidents end to end fit Automated Investigation and Response, and products where AI reaches the verdict on each alert fit AI SOC Platform; if the analyst still owns the decision, start here. Every SOC automation product is eligible for the broad categories too: Security Automation and Security Operations.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the SOC tasks the product automates: tasks handled each day, tools it works with, and customers whose SOC relies on it.
- Innovation — a SOC task automated in a new way, such as enrichment that pulls exactly the context an analyst needs, deduplication that cuts queues, or reports written without manual effort.
- Impact — results for customers: analyst minutes saved per alert, queue size reduced, consistency of case handling improved. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.