Nearly 90% of development teams encounter issues with AI-generated code.

86% of development professionals believe an AI agent or model should evaluate AI-generated code.

56% of development professionals prefer a dedicated AI security agent separate from the code-generation tool to evaluate AI-generated code.

30% of development professionals believe the same AI model that generated the code should also review it for security issues.

84% of developers prefer to keep a human in the loop via pull requests or real-time IDE suggestions when using AI-assisted development.

65% of organizations experienced a confirmed AI identity-related security incident in the past 12 months.

88% of organizations say AI deployment is outpacing their identity and security infrastructure.

Emerging global statutory fines reach up to €35 million or 7% of an enterprise's total global annual turnover.

98% of security leaders at enterprises say professional development is allowed during work hours.

94% of organizations explicitly see the importance of keeping humans in the loop for offensive security programs.

Total disclosed software vulnerabilities in enterprise environments increased 92% year-over-year in 2025.

Remote code execution (RCE) vulnerabilities surged 128% year-over-year in 2025.

In 2025, macOS privilege escalation vulnerabilities increased 5,600%.

In 2025, network infrastructure critical vulnerabilities increased 235%.

In 2025, network infrastructure remote code execution (RCE) vulnerabilities rose 238%.

In 2025, network infrastructure elevation-of-privilege (EoP) vulnerabilities surged 266%.

In 2025, browser privilege escalation vulnerabilities surged 183%.

38% of senior security and IT leaders at U.S. enterprises with 500+ employees have experienced an identity-related security incident with measurable financial or operational impact.

64% of senior security and IT leaders at U.S. enterprises with 500+ employees say they have a complete, real-time picture of identity risk across their environment.

39% of senior security and IT leaders at U.S. enterprises with 500+ employees report narrowly avoiding an identity-related security incident but requiring significant unplanned remediation resources to contain it.