Approximately 23% of organizations have visibility into about half of their OT environment.

14% of organizations have full visibility into OT systems, up from 5% in 2025.

Organizations with over 5,000 employees manage almost 35 times more external assets than small enterprises with 51–250 employees.

Organizations with over 5,000 employees manage more than twice as many external assets as organizations with 1,000–5,000 employees.

Across all industries, 25% of connected devices are unaccounted for.

Last year, 18% of connected devices stored sensitive data, 35% lacked encryption, and 26% were unaccounted for.

Most large organizations have accurate inventories for only about 25% of their total assets.

91% of respondents acknowledged that attack surface management is either directly or somewhat connected to their organization's business risk.

73% of cybersecurity leaders surveyed have experienced security incidents due to unknown or unmanaged assets.

42% of respondents said that if you don’t manage asset-related risks properly, you’re likely to experience disruptions to day-to-day operations—e.g., outages, downtime, or process failures.

39% believe that if you don’t manage asset-related risks properly, it will erode customer confidence and damage your brand image.

Just 43% of global organizations use dedicated tools to proactively manage risk across their attack surface.

39% believe that if you don’t manage asset-related risks properly, it will have impacts on your supply chain partnerships.

38% of respondents believe that if you don’t manage asset-related risks properly, it can lead to link to drops in staff efficiency.

55% of organizations surveyed said they have no processes in place to continuously manage attack surface risk.

75% of cybersecurity incidents occur due to unmanaged assets.

38% believe that if you don’t manage asset-related risks properly, it can impact financial performance.

39% believe that if you don’t manage asset-related risks properly, it will weaken your standing in the marketplace, making it harder to win new business or keep up with rivals.

77% of companies claimed that their current resources are adequate for addressing attack surface challenges

On average, only 27% of responding organizations' budgets are dedicated to managing attack surface risk.