Basic vulnerability scanning was a current application of AI in 47% of security tech stacks

97% of CISOs rate metadata lake technology as either “critical” (36%) or “very valuable” (61%) for solving their data visibility and AI governance issues.

46% of security teams primarily depend on AI that is embedded in their security tools and delivered by their vendors versus building their own

The top five vulnerability management problems they’re actively trying to solve with AI today were: false positives (49%), overload of data (39%), reliance on manual processes (33%), disparate results from scanning tools (31%), and false negatives (31%)

A lack of transparency and explainability was the top reason for turning off AI functionality, cited by 58%

83% of CISOs place significantly higher priority on AI data usage governance.

Around 45% say that AI is moderately beneficial and they’re starting to note the benefits

71% of Security Managers/Directors focus on AI governance.

46% of Security Managers/Directors report the lowest confidence in controlling data used for AI training.

21% say they apply AI to security through a mix of vendor-led and internal AI.

Sophisticated threat landscape was the most commonly cited security pain point, named by 60% of respondents

A scant 6% reported that AI is detrimental to their security program

Difficulty in tuning, training, and supervising AI was an obstacle to the effective use of AI for 39% of respondents

Incident response was the second security function where AI will provide the most value in the next 3 years, cited by 59% of respondents

The No. 1 security issue respondents are most hopeful that AI will help fix is the prioritization of disparate results from scanning tools, for which 82% are hopeful for gains

Just 6% of respondents say that they fully outsource their AI training

The top use case where security leaders say AI will offer most value is vulnerability and risk management, named by 74% of respondents

Vendor reliability and maturity were a reason for turning off AI functionality, cited by 50%

Third-party and supply chain risk was a big security pain point (42%)

Just 25% of teams use AI to power vulnerability prioritization