Endpoint security was a current application of AI in 52% of security tech stacks

The majority of organizations (55%) say that they’ve enabled AI in under half the tools in their environments that have it available

Endpoint security (34%), antivirus/anti-malware (31%), and malware analysis (31%) were the security tech categories where AI is thought to be the most overhyped

Basic vulnerability scanning was a current application of AI in 47% of security tech stacks

About 16% of security teams say their use of AI has been very beneficial and have made it a core part of their program

Antivirus/anti-malware was a current application of AI in 40% of security tech stacks

Approximately 56% of respondents reported that at least half of their security vendors tout their AI capabilities

55% of Security Managers/Directors added data governance duties for AI training.

Almost 59% of US cybersecurity professionals added new AI data responsibilities in the past year.

Almost 70% of CISOs/CSOs/CTOs have taken on new data discovery responsibilities, specifically for AI initiatives.

The top five vulnerability management problems they’re actively trying to solve with AI today were: false positives (49%), overload of data (39%), reliance on manual processes (33%), disparate results from scanning tools (31%), and false negatives (31%)

46% of security teams primarily depend on AI that is embedded in their security tools and delivered by their vendors versus building their own

Just 6% of respondents say that they fully outsource their AI training

Security and privacy risks were a reason for turning off AI functionality, cited by 55%

Vendor reliability and maturity were a reason for turning off AI functionality, cited by 50%

A lack of transparency and explainability was the top reason for turning off AI functionality, cited by 58%

83% of CISOs place significantly higher priority on AI data usage governance.

46% of Security Managers/Directors report the lowest confidence in controlling data used for AI training.

Around 45% say that AI is moderately beneficial and they’re starting to note the benefits

Incident response was the second security function where AI will provide the most value in the next 3 years, cited by 59% of respondents