Identity, cloud, and credential compromise accounted for 85% of actionable security alerts.

Organizations receive an average of 4,330 security alerts daily, but only 37% are detected and investigated.

Organizations receive an average of 2,992 security alerts per day, down from 3,832 the year prior.

63% of security alerts go unaddressed.

In one-third (33%) of cases, the SMB business owner personally handles alerts and incident resolution.

13% of SMBs rely on untrained employees to handle alerts.

44% of true-positive security alerts from cloud security tools in Q3 2025 were driven by identity-related weaknesses.

Investigating and responding to security alerts and incidents consumes 26.6% of Managed Service Provider (MSP) technician time.

86% of security alerts escalate into tickets, which indicates that most alerts still require human validation.

86% of security alerts escalate into tickets, which indicates that most alerts still require human validation.