34% of AI-first organizations say AI use led to a security oversight or blind spot that contributed to their last security incident, compared to 20% for non-AI-first organizations.

75% of organizations are concerned about Distributed Denial-of-Service (DDoS) attacks targeting AI agents.

92% of CISOs say AI enables their teams to review more security events.

30% of companies dedicate specific budgets to AI security.

53% of organizations acknowledge they have an increased need for AI-specific security expertise to effectively defend their systems.

The financial cost of a cybersecurity incident for AI-first businesses exceeds the cost for non-AI-first businesses by more than 135%.

68% of CISOs prioritize investing in AI cybersecurity capabilities.

89% of CISOs report improved data correlation with AI.

Organizations leveraging AI and automation can contain threats within 4 minutes versus up to 16 hours with manual efforts.

AI-first businesses take nearly seven months on average to fully recover from cybersecurity incidents, which is 80 days longer than non-AI-first businesses.

21% of enterprises plan to introduce a dedicated AI security budget.

93% of CISOs and AppSec executives are ready to replace or purchase new AI-native application protection.

67% of organizations rely on static credentials for AI systems.

75% of CISOs report their enterprises rely on extending controls originally designed for other attack surfaces to cover AI-driven workflows and infrastructure.

11% of enterprise CISOs have security tools specifically designed to protect AI systems.

Organizations most confident in their AI deployments experience more than twice the incident rate of less confident peers.

78% of enterprises fund AI security through existing security budgets.

Only 3% of organizations have automated, machine-speed controls governing AI behavior.

7% of organizations don't know how often AI is making autonomous infrastructure changes at all.

Relying on static credentials for AI systems correlates with a 20-percentage-point increase in incident rates.