Within one year, the share of organizations knowingly shipping vulnerable code decreases from 81% to 75%.

Within one year, the proportion of companies with formal AI governance policies increases from 18% to 22%.

93% of organizations acknowledge a recent breach tied to their own applications.

73% of organizations describe their security posture as 'advanced' or 'highly mature'.

78% of organizations lack formal AI governance policies.

58% of organizations utilize pentesting-as-a-service (PTaaS) for continuous testing.

88% of organizations plan to increase offensive security spending over the next 12 months, with 65% planning moderate increases and 23% planning significant increases.

More than 30% of US organizations report experiencing a major AI-related security incident in the past 12 months.

Nearly 70% of US CISOs and senior security leaders say they are actively following AI-related regulations or standards.

85% of IT professionals report having AI policies or oversight mechanisms in place.

56% of organizations now deploy AI broadly across multiple IT workflows or at business‑critical scale.

2% of organizations report no AI use at all.

Nearly 72% of IT organizations have created dedicated AI roles or teams, and another 13% plan to do so.

45% of IT professionals plan to use AI to automate patch deployment within the next 24 months.

42% of IT professionals say accountability for AI decisions is clear.

24% of IT professionals say AI policies are followed very consistently in day‑to‑day work.

68% of IT professionals have personally seen AI generate hallucinations with potential operational impact.

Nearly a quarter of IT professionals cite data challenges as the biggest barrier to AI deployment.

29% of leaders find it materially harder to secure budget for AI projects due to market hype.

Nearly a third of the most mature IT organizations are still operating without fully embedded governance.