75% of the riskiest device types are new compared to two years ago.

Routers account for one-third of the most critical vulnerabilities in organizational networks.

SSH is the second most common protocol observed, with rising usage in nearly every sector except retail.

Organizations test only 32% of their global attack surface on average.

87% of security leaders trust agentic AI.

95% of organizations rank penetration testing as a top priority.

87% of organizations have moved beyond evaluation and are actively planning, piloting, or using agentic AI for penetration testing.

95% of organizations anticipate that agentic AI will displace traditional penetration testing services.

91% of enterprise employees are using AI on the job.

93% of security leaders state that comprehensive guardrails and transparent decision-making are critical for safe operation of agentic AI.

64% of organizations prefer an agent-led, human-oversight model combining machine scalability with a human safety net.

49% of organizations expect complete or significant displacement of traditional penetration testing services by agentic AI.

68% of the enterprise environment remains untested, creating significant blind spots.

At least 43% of enterprises that use open-source technology report a mechanism in place to monitor whether those technologies are active, in maintenance, or EOL (7.5%do not track; 4.2% are unsure).

77% of global enterprises report moderate slowdowns or added scrutiny for agentic AI projects.

98% of global enterprises say security and data concerns have already slowed deployments, added review steps, or reduced project scope for agentic AI and autonomous systems.

98% of global enterprises report friction between accelerating AI adoption and meeting cybersecurity priorities.

100% of global enterprises agree attacks targeting agentic AI workflows would be more damaging than traditional cyberattacks.

21% of global enterprises cite significant delays or reduced project scope for agentic AI initiatives.

For of open-source users on enterprise teams, the greatest enemy of security is the uptime mandate.