29.13% of IT decision-makers at financial services firms reported that vulnerability scanning / assessments is currently fully or partially managed by an MSP or MSSP.

41% of organizations use vulnerability scanning to assess the effectiveness of their API security measures.

Over half of practitioners (53%) and more than a third of security leaders (36%) admit to delaying patches due to operational constraints

NodeZero exploited 229 known vulnerabilities nearly 100,000 times in customer environments, demonstrating that many organizations struggle to remediate even widely recognized threats.

Despite 98% of organisations using vulnerability scanning, only 34% find it highly effective due to false positives.

The top three most common security use cases for AI are endpoint security (52%), basic vulnerability scanning (47%), and antivirus/anti-malware (40%)

Basic vulnerability scanning was a current application of AI in 47% of security tech stacks