Each neglected cloud asset contains on average 115 vulnerabilities.

84% of organizations now use AI in the cloud.

62% of organizations have at least one vulnerable AI package.

Nearly a third of cloud assets are neglected today.

76% of organizations have at least one public-facing asset that enables lateral movement.

Private cloud spending at the $10M+ per year level will increase from 43% in 2024 to 53.6% in 2025. This represents a 24% growth rate in private cloud spending for these cohorts. This compares to just 12% growth in public cloud spending for the same cohorts.

35% of respondents said cost is the reason why AI workloads are in a combination of private cloud and on-premises environments.

56% of respondents said enhanced security is the reason why AI workloads are in a combination of private cloud and on-premises environments.

When migrating workloads to private clouds, the top challenges are managing apps post-migration, securing hybrid environments, and lack of technical skills or feasibility, each cited by 38% of respondents

51% of respondents said compliance and regulatory demands are the reason why AI workloads are in a combination of private cloud and on-premises environments.

85% of organizations have plaintext secrets embedded in their source code repositories.

36% of organizations have at least one cloud asset supporting more than 100 attack paths.

93% of organizations have at least one privileged service account, linked to Kubernetes adoption

50% of respondents said the specific needs of AI workloads are the reason why AI workloads are in a combination of private cloud and on-premises environments.

For public cloud deployments, the highest ranking challenges (at 43%) are migration of apps and data, and technical skills or feasibility.

AI adoption ranks among the top three reasons for private cloud use.

It takes an average of 7.7 days, up to 30 days, to correlate alerts across cloud tools and organizational silos.

Cloud Cost Optimisation Steps (taken by 86% of organisations), Automating security processes (60%), Consolidating security tools and platforms (51%), Scaling security measures based on risk assessments (43%).

Security teams receive an average of 4,080 alerts per month from multiple cloud security tools.

31% of organisations claim full automation in their cloud security process.