Security teams spend 42% of their time investigating risks that later prove low priority or non-exploitable.

Security teams require mid-to-high levels of manual intervention for alert triage, at 43%.

Security teams require mid-to-high levels of manual intervention for detection, at 42%.

Security teams require mid-to-high levels of manual intervention for investigation, at 49%.

Security teams require mid-to-high levels of manual intervention for response, at 47%.

11% of security professionals are still experimenting with AI-driven decision-making.

26% of security professionals say chasing false positives and low-priority alerts wastes the most time in their security team.

59% of organizations report their security teams are currently understaffed.

Large enterprises report false alarm rates approaching 44%.

97% of US-based physical security operations professionals are either currently using AI or actively evaluating it for security operations.

36% of security leaders say downtime is often or very often misclassified as an IT issue.

44% of organizations test their security biannually or less, or not at all.

The most commonly outsourced cybersecurity services among middle market firms are cloud security management (50%), security awareness training (44%), security operations center services (43%), and risk and compliance management (41%).

73% of organizations are using AI agents in their Security Operations Center at a moderate to high level.

Only 29% of organizations conduct continuous simulation testing.

53% of security practitioners spend time each week coordinating fixes.

46% of security practitioners spend time each week validating exploitability.

60% of security practitioners perform triaging of alerts as a top weekly activity.

57% of C-suite executives believe their organization consistently meets remediation SLAs, yet only 15% of security practitioners agree.

AI-driven detection achieves 92.4% accuracy compared to 67% accuracy for human analysts alone.