75% of the riskiest device types are new compared to two years ago.

40% of the riskiest device types are new compared to last year.

77% of large U.S. companies are concerned about intellectual property theft as a generative AI security risk.

75% of large U.S. companies say Harvest Now, Decrypt Later (HNDL) attacks must be addressed most urgently.

By 2028, more than 50% of enterprises will use AI security platforms to secure third-party AI service usage and protect custom-built AI applications.

58% of US IT and security professionals at companies with at least 1,000 employees use immutable backup storage across all their data.

52% of US IT and security professionals at companies with at least 1,000 employees say it is harder to keep up with threats now than five years ago.

80% of companies say data privacy breaches are the top generative AI security risk.

51.8% of enterprises are using AI for security threat detection.

Nearly two in five enterprises are looking to outsource AI model training and optimization.

64% of organizations prefer an agent-led, human-oversight model combining machine scalability with a human safety net.

91% of enterprise employees are using AI on the job.

95% of organizations anticipate that agentic AI will displace traditional penetration testing services.

68% of the enterprise environment remains untested, creating significant blind spots.

87% of organizations have moved beyond evaluation and are actively planning, piloting, or using agentic AI for penetration testing.

Organizations test only 32% of their global attack surface on average.

95% of organizations rank penetration testing as a top priority.

87% of security leaders trust agentic AI.

49% of organizations expect complete or significant displacement of traditional penetration testing services by agentic AI.

93% of security leaders state that comprehensive guardrails and transparent decision-making are critical for safe operation of agentic AI.