21% of companies have low-readiness for AI.

70% of "moderately ready for AI" organizations have generative AI in active use.

Just 24% of organizations practice continuous data labeling.

Low-readiness 9for AI) organizations use AI in less than one-quarter of their apps.

Only 18% of moderately ready organizations have deployed an AI firewall.

17% of companies surveyed are unaware of their current Domain Control Validation (DCV) method.

On average, 25% of apps use AI, with "highly ready for AI" organizations typically using AI in a much higher percentage.

Only 31% of organizations have deployed AI firewalls.

"Moderately ready for AI" organizations currently have AI present in about one-third of applications.

77% of companies are moderately ready for AI.

Only 2% of global organizations are highly ready to scale AI securely across operations.

The average organization uses three AI models.

71% of all respondents already use AI to augment security.

Nearly two-thirds of survey respondents (65%) use two or more paid AI models and at least one open-source model.

40% of enterprises are at risk of unexpected service outages due to out-of-date Secure Sockets Layer (SSL) certificates.

47% of moderately ready organizations aim to have deployed an AI firewall within a year.

There has been a 156% increase in cyberattacks that target user logins, specifically attributed to info-stealing malware and advanced phishing kits.

Infostealers are projected to account for 35% of detected malware threats in 2025.

Identity-driven threats account for 59% of all confirmed cases in early 2025.

5% of observed ransomware victims in Q2 2025 were based in Canada.