While 92% of organisations reported that they had sufficient budget to meet their needs, 78% believed there was a need for more support to prepare for rising network security threats

Nearly half (43%) of healthcare executives say they allocate cybersecurity budgets at the outset of new initiatives.

Cybersecurity budgets as a percent of annual revenue have decreased over the last two years, from 1.1% to 0.6%.

"Secure Creators" (organizations with more advanced cybersecurity functions than their peers) require smaller budgets — 10% smaller on average — and are less likely to cite budgets as a key challenge.

70% of surveyed state, local, tribal, and territorial (SLTT) organizations cite lack of sufficient funding as their top security concern

Security for generative AI has quickly risen as a top spending priority, securing the second spot in ranked-choice voting, just behind cloud security.

Less than half (49%) of SMBs intend to invest in cybersecurity technology.

Only 45% allocate more than 10% of their IT budget to cybersecurity. This allocation is down 8% year-over-year.

Pentesting accounts for 11% of the total IT security budgets of U.S. enterprises.

U.S. enterprises allocate an average of $187,000 annually to pentesting.

The average total IT security budget for U.S. enterprises is $1.77 million.

Among SMBs with fewer than 50 employees, more than half allocate less than 1% of their annual budget to cybersecurity.

Only 6.5% of SMBs believe their current cybersecurity budget is truly sufficient.

On average, only 27% of responding organizations' budgets are dedicated to managing attack surface risk.

The average security budget is $24 million.

Of organizations making budget changes, 71% say security budgets are increasing.

53% of cyber resilient organizations are committing significant investment to advanced threat detection.

86% of organizations are increasing their security spending in 2025.

30% cite budget limitations as their biggest barrier to adopting additional solutions.

67% of organizations are now using risk and threat assessments to inform budget decisions. This is up from 53% in 2024.