SOC analysts spend just 44% of their time on proactive efforts like threat hunting and detection engineering.

Most companies (67%) are spending roughly equal amounts on proactive and reactive cybersecurity measures.

Only 24% of organisations are spending significantly more on proactive measures (e.g., monitoring, testing, controls) than reactive measures (e.g., incident response, fines, recovery)—which is considered the ideal spend ratio.