In one analysis, government had 26% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, technology had 15% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, retail had 29.8% vulnerable APIs.

In one analysis, education had 37.7% vulnerable APIs.

In one analysis, telecommunications had 15% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, education had 31% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, education had 35.3% vulnerable web applications.

In one analysis, health care & insurance had 16% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, the media sector had 18.8% vulnerable APIs.

In one analysis, the government sector had 18.4% vulnerable cloud assets.

In one analysis, the media sector had 13.8% vulnerable cloud assets.

In one analysis, the government sector had 18.5% vulnerable APIs.

The average number of unique mobile applications released annually has increased from 10 in 2023 to 13 in 2025.

74% of organizations feel increased pressure to accelerate their app development cycles.

89% of compromised organizations believed they had "appropriate visibility" into their SaaS environment.

Top 5 industries by cloud‑asset vulnerability: Professional Services: 25.0%, Retail: 23.3%, Government: 18.4%, Education: 17.6%, Media: 13.8%.

In one analysis, retail had 30.9% vulnerable web applications.

73% of respondents say they already work with an MSP.

In one analysis, finance had 5% of vulnerable assets across cloud, APIs, and web applications.

Nearly one in 10 (7%) of those surveyed did not know which data sets to encrypt.