In Q3 2025, SMS toll fraud attacks targeting the gaming sector increased by 125%.

54% of organizations using at least four compliance controls remediate critical vulnerabilities within a day.

58% of boards report having no formal oversight role in executive security.

Meta’s AI crawler and OpenAI’s ChatGPT fetcher accounted for 60% and 68% of their respective traffic categories in Q3 2025.

38% of leaders at U.S. organizations see AI-powered attacks as a major challenge in the next two to three years.

76% of organizations check AI code for security risks.

AI-generated pull requests contain approximately 1.7 times more issues on average than human-written pull requests based on an analysis of 470 open-source GitHub pull requests.

Security vulnerabilities in AI-generated code increase by 1.5 to 2 times, particularly in areas such as improper password handling and insecure object references.

16% of SMBs allocate less than $50 per user on security annually.

99% of security leaders at U.S. organizations with at least $1 billion in revenue plan to increase their cybersecurity budgets over the next two to three years.

Organizations that effectively track and manage open source dependencies are 85% more prepared to secure open source software compared to the overall average of 57%.

In Q3 2025, commerce received 88% of crawler traffic, while the Public Sector received 96%, and Education had the highest fetcher volume at 77%

Organizations classified as 'Exceptional' in AppSec maturity are 3.7 times more likely than 'Emerging' programs to reduce negative user experiences by more than 20%.

The High Technology industry has 35.5% and the Travel and Hospitality industry has 18.3% of organizations classified as 'Exceptional' in AppSec maturity.

37% of boards never receive updates on executive security issues.

In December 2025, Japan had 18%, the UK had 16%, and the US had 12% of organizations classified as 'Exceptional' in AppSec maturity.

73% of organizations rely on informal judgment for executive security.

63% of respondents that prioritize SBOM validation say they're highly prepared to evaluate third-party software.

70% of organizations provide cyber/digital protection as a security measure for executives.

Two-thirds of organizations report annual spending on CEO security below $10,000.