The end-to-end window from private disclosure to enterprise patch-in-production can stretch 90 to 150 days.

67% of enterprise AI usage occurs through unmanaged personal accounts on corporate devices

41% of senior security and IT leaders at U.S. enterprises with 500+ employees have no defensible, methodology-backed dollar estimate of their identity risk exposure.

38% of senior security and IT leaders at U.S. enterprises with 500+ employees have experienced an identity-related security incident with measurable financial or operational impact.

64% of senior security and IT leaders at U.S. enterprises with 500+ employees say they have a complete, real-time picture of identity risk across their environment.

39% of senior security and IT leaders at U.S. enterprises with 500+ employees report narrowly avoiding an identity-related security incident but requiring significant unplanned remediation resources to contain it.

85% of senior security and IT leaders at U.S. enterprises with 500+ employees express concern that AI-accelerated vulnerability discovery is outpacing their organization's ability to prioritize and respond.

Total disclosed software vulnerabilities in enterprise environments increased 92% year-over-year in 2025.

94% of senior security and IT leaders at U.S. enterprises with 500+ employees say building a more complete, financially quantified view of their identity risk posture is a top or high priority in the next 12 months.

In 2025, macOS vulnerabilities increased by more than 1,000% across enterprise environments.

34% of senior security and IT leaders at U.S. enterprises with 500+ employees say their existing tools surface issues but lack the context to prioritize by business impact.

Organizations in the 5,000–10,000 employee range average 56 days to remediate exposures.

Organizations with over 5,000 employees manage almost 35 times more external assets than small enterprises with 51–250 employees.

Organizations with over 5,000 employees manage more than twice as many external assets as organizations with 1,000–5,000 employees.

90% of security leaders at enterprises expect to implement governance policies for citizen development by the end of 2026.

45% of organizations in Canada choose identity and access security for AI workloads.

52% of enterprise organizations in Canada reported suffering a breach.

45% of organizations emphasize the need for traceability and auditability of AI-driven actions.

50% of security professionals spend more time on coordination than technical analysis at enterprises

51% of organizations expect transparency in how AI models make decisions.