36% of organizations indicated that their remediation processes are mostly automated with some manual steps.

50% of respondents identified the risk of breaking applications or dependencies as a pain point for automation.

34% of respondents believe that automated remediation integrated into a CI pipeline would speed up remediations.

28% of respondents indicated that automated ticket tracking instead of just 'fire and forget' would help them remediate significantly faster.

Tool sprawl reduces confidence in remediation by 51% in 2025.

28% of organizations report that IT operations is primarily responsible for remediating vulnerabilities and misconfigurations reported by security.

42% of IT and security professionals reported working in both IT operations and security in 2025, according to a survey of 125 respondents

52% report on their remediation efforts ‘quarterly’, ‘rarely’, or ‘never’ in 2025, while only 18% run weekly reports.

44% of security and IT operators indicated that auto-creating tickets with all relevant information would improve remediation in 2025.

18% of organizations surveyed reported tracking and reporting their remediation efforts on a weekly basis while 30% reported doing so monthly.

48% of respondents reported being 'fairly confident' in their organization's ability to remediate known vulnerabilities in a timely manner.

18% of respondents identified lack of scanning in CI/CD as a main reason for the recurrence of vulnerabilities in 2025.

71% of organizations reported that they remediate critical vulnerabilities within 24–72 hours in 2025.

33% of organizations reported remediating critical vulnerabilities within one to three days in 2025, compared to 32% for high-importance vulnerabilities.

Only 9% of security and IT operators being 'very confident' in their remediation capabilities in 2025.

38% of organizations reported remediating critical vulnerabilities within 24 hours in 2025, compared to 35% for high-importance vulnerabilities.

60% of IT and security operators do not have any remediation SLAs in 2025, and among those that track SLAs, 65% have to analyze data manually.

33% of respondents stated that more remediation guidance and code snippets would help them remediate significantly faster in 2025.

Seventy-eight percent of organizations reported finding fewer than five vulnerabilities per machine per month, according to a survey of IT and security teams.

Ten percent of organizations report finding between six and ten vulnerabilities per machine per month.