69% of the highest-risk (serious) vulnerabilities are resolved.

Median time to resolve issues of all criticalities stretches to 67 days.

Less than half (48%) of vulnerabilities are remediated.

46% of companies commit to fix critical vulnerabilities within just three days.

Since 2017, the median time to resolve serious vulnerabilities has decreased dramatically—from 112 days down to 37 days last year.

This represents a cut of 75 days, or two-thirds.

39% of firms are using AI to solve data overload problems that stymie vulnerability and exposure management work

The top use case where security leaders say AI will offer most value is vulnerability and risk management, named by 74% of respondents

46% of firms say that they’re actively trying to use AI to solve false positive issues