Top challenges in managing cloud vulnerabilities include Budget constraints (35%), Integrating vulnerability management with existing workflows (34%), and Lack of skilled personnel (32%).

75% of organisations are planning to spend more on cloud compliance-related measures in 2025 than in 2024.

9 in 10 users (90%) agree open cloud security tools are a primary driver of innovation in their security programmes.

Organisations are averaging a 27% increase in planned cloud compliance spending for 2025 compared to 2024.

83% of respondents cited attacks on local or cloud storage as a top risk, ranking second only to phishing.

AWS showed the lowest rate for assets with both critical and easily exploitable issues at 0.02%.

91% of Security and IT leaders are recalibrating hybrid cloud risk in the AI era.

83% confirm that deep observability is now being discussed at the board level to better protect hybrid cloud environments.

Assets with both critical and easily exploitable issues were found across all cloud providers.

54% of Security and IT leaders are reluctant to use AI in public cloud environments, citing fears around intellectual property protection.

Assets hosted by cloud providers other than AWS, Google, and Azure showed approximately 10 times higher rates of critical vulnerabilities compared to AWS, Google Cloud, and Azure.

70% of Security and IT leaders report their organization is actively considering repatriating data from public to private cloud due to security concerns.

Alternative cloud and hosting providers showed rates ten times higher than AWS for assets with both critical and easily exploitable issues

Assets hosted by AWS and Google Cloud showed 0.04% with critical vulnerabilities.

46% say that a key challenge in securing and managing hybrid cloud infrastructure is lack of clean, high-quality data to support secure AI workload deployment (46%).

47% say that a challenge in securing and managing hybrid cloud is the lack of comprehensive insight and visibility across their environments, including lateral movement in East-West traffic.

70% of Security and IT leaders now view the public cloud as a greater risk than any other environment.

Nine out of ten (91%) Security and IT leaders concede to making compromises in securing and managing their hybrid cloud infrastructure.

38% of assets hosted by Google Cloud were vulnerable to at least one security issue or misconfiguration. This rate for Google Cloud was over 2.5x more than assets hosted by AWS.

Critical vulnerabilities (CVSS 9.0 or higher) were detected on assets hosted by all cloud providers, though uncommon.