About the Threat Hunting category
What belongs in this category
The Threat Hunting category covers products and services that look for signs of attackers that existing detections have missed. Typical entries help hunters form a hypothesis, search across endpoint, network, identity and cloud data, follow leads and turn what they find into new detections. Services provide experienced hunters who search a client's environment on a schedule or after new threats emerge.
Hunting where AI does most of the searching fits AI Threat Hunting and Detection Engineering. Building and tuning the detections that hunting produces fits Detection Engineering, and the intelligence that guides hunts fits Cyber Threat Intelligence (CTI). A hunting service that also responds to threats around the clock can enter Managed Detection and Response (MDR).
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the hunting the product or service supports: environments searched, hunts run, threats found, and customers that rely on it.
- Innovation — a hunting problem solved in a new way, such as hunts that cover data other tools ignore, quick pivots across sources, or findings turned into detections automatically.
- Impact — results for customers: attackers found that alerts missed, dwell time (how long attackers stay undetected) reduced, new detections created from hunts. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.