51% of companies use a cybersecurity exposure score or risk-based index.

98% of organizations plan to invest in exposure management in the future.

89% of security teams have already begun to implement AI into their exposure validation processes.

89% of organizations plan to invest in exposure management in the next 12 months.

72% believe AI will play a significant role in exposure management.

90% of security leaders apply validation to their exposure management process at least once a month.

61% of security leaders agree their organization lacks the ability to identify and remediate exposures in their cloud environment.

Almost two-thirds (approximately 66%) of security leaders say that missing exposures due to manual pen testing is an issue.

49% of security professionals believe their company leaders have a high level of understanding of exposure management.

Only 22% of organisations report increasing investments in exposure management in 2025.