Software accounts for roughly 30% of security budgets, making it the second-largest line item after staff and compensation.

SecOps solutions represent the largest share of software budgets at 16%.

65% of organisations plan to increase cybersecurity budgets.

78% of all organizations intend to increase their genAI spend.

85% of security teams have experienced budget or resource-related changes in the past six months.

48% of IT and security decision-makers say budget or resource cuts have led to team restructuring.

41% of IT and security decision-makers say budget or resource cuts have led to reduced capacity for detection and monitoring.

52% of IT and security decision-makers say budget or resource cuts have led to increased workloads without added support.

Security budget as a percentage of IT spend declined from 11.9% to 10.9%. This decline breaks a five-year upward trend.

Average security budget growth has slowed to just 4% year over year. This is the lowest rate in five years, a significant decline from 8% in 2024.

Only 11% of CISOs report being adequately staffed. The remaining 89% describe their teams as stretched thin or understaffed

Cybersecurity staffing growth slowed to 7%, which is its lowest level in four years.

More than half of CISOs are reporting flat or shrinking budgets.

Just 1% of organizations invest more than 20% of their total security budget into AppSec.

50% of rural healthcare organisations say budget limitations are a top barrier to upgrading security tools, which is nearly double the rate of urban peers.

20% of financial services organizations have yet to secure the necessary budget to meet DORA requirements.

4 in 10 executives (which is 40%) at hotels say that 16-25% of their total IT budget is devoted to cybersecurity.

At least four in 10 business leaders are increasing budgets, expanding teams, upskilling, and/or hiring external help for cybersecurity challenges and data privacy concerns

85% of CISOs say their organization's cybersecurity budget is influenced by the volume of nation-state threats.

56% of healthcare IT leaders spend less than 10% of their security budget on email.