86% of private healthcare security decision makers report legal and communications challenges when responding to a cyber attack.

89% of senior cybersecurity decision makers report limited executive or board involvement in incident response readiness and decision making.

83% of organizations in crypto and decentralized finance, 79% in retail, and 76% in manufacturing experienced cyber attacks.

99% of bot traffic is unwanted or unverifiable.

Only 1% of bots are verified or wanted.

Every model produced at least one false-positive run by hallucinating vulnerable paths in the OpenNDS real-world task

66% of security practitioners spend more than half their time manually validating findings rather than resolving the underlying vulnerabilities.

69% of security practitioners at mid-sized organizations report growing difficulty keeping up with increased code volume.

53% of security practitioners spend time each week coordinating fixes.

46% of security practitioners spend time each week validating exploitability.

57% of security practitioners would require a full audit trail of actions taken to trust AI-based penetration testing.

The rate of effective automation between CTI and SecOps tools doubled from 13% in 2025 to 26% in 2026.

69% of organizations say their recovery time objectives (RTOs) are fully aligned with business continuity goals.

100% of surveyed cybersecurity practitioners report increased engineering delivery over the past twelve months.

Nearly 60% of security practitioners say they are able to keep up with the increased code volume for now, but it is getting harder.

78% of security practitioners rank exposure of secrets as the top challenge introduced or amplified by AI-assisted coding.

60% of security practitioners perform triaging of alerts as a top weekly activity.

35% of identity crime victims report losses exceeding $10,000.

11% of identity crime victims report losses greater than $1,000,000.

52% of campus IT leaders cite cybersecurity and risk exposure as the top network challenge, surpassing network performance and reliability.