| Publisher | Obsidian Security |
| Report | SaaS Security Threat Report 2025 |
| Published | 1 January 2025 |
Published by Obsidian Security in SaaS Security Threat Report 2025, 1 January 2025. The figure is taken from the report as published; the full methodology is in the source.
| The fastest time from initial access to data exfiltration was as little as 9 minutes. Obsidian Security, 01/01/2025 |
| SaaS spend is approximately $8,700 per employee. Obsidian Security, 01/01/2025 |
| 85% of SaaS breaches began with a compromised identity. Obsidian Security, 01/01/2025 |
| MFA failed to prevent attacks in 84% of incident responses. Obsidian Security, 01/01/2025 |
| Organizations typically deploy around 100 AI applications, with 60% lacking proper security controls or federation behind the IdP. Obsidian Security, 01/01/2025 |
| Organisations can achieve an 85% reduction in their SaaS attack surface with better security measures. Obsidian Security, 01/01/2025 |
Weekly cybersecurity statistics by email.