88% of organizations plan to increase offensive security spending over the next 12 months, with 65% planning moderate increases and 23% planning significant increases.

42% of organizations plan to invest more in runtime security over the next 24 months.

75% of organizations report increased identity security spending.

Fewer than half of organizations plan to increase budgets for 2026.

64% increased insider risk budgets in 2025, yet 45% still view funding as insufficient.

70% expect insider risk budgets to rise again in 2026, with 28% anticipating increases of 10% or more.

56% of organizations invest in agentic discoverability, 55% invest in API security, and 54% invest in web application firewalls.

Nearly half (46%) of IT and security decision-makers report reducing their planned security investments for 2025 due to ongoing federal funding instability.

98% of organizations plan to invest in exposure management in the future.

89% of organizations plan to invest in exposure management in the next 12 months.

7 out of 10 surveyed companies with a high degree of security platformisation report their cybersecurity investments have helped business outcomes.