Cybersecurity Statistics

VendorsAnvilogic

Anvilogic

Cybersecurity reports and statistics published by Anvilogic

0 categories1 reports

Research Reports

Reports and publications from Anvilogic

2025 State of Detection Engineering

Recent Statistics & Reports

Top activities detection engineers enjoyed the least: Metrics and reporting: 41%.

74% said Triage & incident response is the most valuable skill for their detection engineering workforce.

46% said Detection-as-code, CI/CD is a skill that needs development for their detection engineering workforce.

Top activities detection engineers enjoyed the most: Developing detection rules: 33%.

56% of detection engineers update their detection rules and processes daily or weekly. 30% of organisations update rules only when needed, quarterly, or even annually.

45% of organisations have already integrated AI into their detection workflows, and 88% of participants believe AI will play a major role in detection engineering in the next three years.

38% said Accuracy of detection rules is a detection engineering program area that needs the most improvement.

44% said Scripting/programming languages is a skill that needs development for their detection engineering workforce.

60% of detection engineers work on a dedicated team. This is more pronounced in enterprises with over 5,000 employees, where 70% have dedicated detection engineering teams, compared to 49% in small and medium-sized organisations.

54% of organisations position their detection engineering function as a dedicated team within security operations.

58% of detection engineers report full integration and collaboration with incident response teams.

67% said Processing/querying languages is the most valuable skill for their detection engineering workforce.

53% said Threat modelling is a skill that needs development for their detection engineering workforce.

47% said Reporting/visualisation is a skill that needs development for their detection engineering workforce.

47% said Software engineering is a skill that needs development for their detection engineering workforce.

45% said Log pipeline monitoring and health is a skill that needs development for their detection engineering workforce.

93% of detection engineers are using or planning to use automation in their detection engineering workflow. 63% have automation already in place.

64% said High false positive rate is a challenge of vendor-provided detections.

61% said Issues with accuracy in the environment is a challenge of vendor-provided detections.

53% said Complexity of threat landscape is a challenge of building/maintaining custom detections.

Showing 21-40 of 45 results

Top Categories