43% of employees use external AI tools paid for by the company.

28% of employees admit they would use AI at work even if it were banned.

24% of employees use internally developed AI platforms.

In 2025, only 36% of organizations feel confident in their ability to support large-scale genAI workloads and data volumes.

78% of all organizations intend to increase their genAI spend.

73% of business executives view agentic AI as critical to staying competitive.

82% of innovation leaders are already allocating more than 6% of their IT budgets to genAI-enabled data management.

Only 43% of organizations have implemented AI-based cybersecurity measures.

73% of business executives warn that failing to adopt agentic AI could pose a competitive risk.

Only 36% of organizations say they are ready to support large-scale AI workloads.

78% of businesses are investing in GenAI.

78% of organizations plan to increase investment in genAI.

Just 36% of businesses have the infrastructure to support GenAI.

Only 16.4% of respondents felt fully confident in their ability to defend against AI-powered identity attacks.

Within the next 12 to 18 months, nearly a third (32%) of CISOs, AppSec managers and developers expect Application Programming Interface (API) breaches via shadow APIs or business logic attacks.

81% of organisations knowingly ship vulnerable code.

Only half of organisations surveyed actively use core DevSecOps tools.

Fewer than half of the CISOs, AppSec managers and developers report deploying foundational security tools like dynamic application security testing (DAST) or infrastructure-as-code scanning.

81% of organisations knowingly ship vulnerable code.

34% of CISOs, AppSec managers and developers admit that more than 60% of their code is AI-generated.