LLM pentests yield the highest proportion of serious vulnerabilities (32%) than any other asset type tested.

Large organisations resolve only 60% of serious pentest findings.

The rate for serious findings in pentests being resolved in each calendar year remains stuck at just 55%.

Only 66% of organisations are conducting regular security assessments like pentesting on their AI products.

Only 21% of serious vulnerabilities discovered in LLM tests are being resolved.

The proportion of serious findings in pentests has also declined by about half (from 20% to 11%) over 10 years.

Small companies lead with 81% of serious findings in pentests resolved.

57% of organisations resolve at least 90% of their serious findings in pentests.

15% of organisations resolve 10% or less of their serious findings in pentests.

18% of SMBs have deployed penetration testing.