56% of detection engineers update their detection rules and processes daily or weekly. 30% of organisations update rules only when needed, quarterly, or even annually.

Publisher	Anvilogic
Report	2025 State of Detection Engineering
Published	1 February 2025

Published by Anvilogic in 2025 State of Detection Engineering, 1 February 2025. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

88% believe AI will impact detection engineering in the next 3 years. 45% are using AI in their detection engineering efforts today.

Anvilogic, 01/02/2025

45% said Alert enrichment is a skill that needs development for their detection engineering workforce.

Anvilogic, 01/02/2025

45% said Reducing false positives is a detection engineering program area that needs the most improvement.

Anvilogic, 01/02/2025

71% said Resource and time constraints is a challenge of building/maintaining custom detections.

Anvilogic, 01/02/2025

42% of detections are custom-built, 37% are vendor-provided, and a smaller percentage are from open-source. Only 2% rely solely on vendor-provided detections.

Anvilogic, 01/02/2025

Most detection engineers fall into the mid-career range.

Anvilogic, 01/02/2025

Get the newsletter

Weekly cybersecurity statistics by email.