50 percent of organisations now carry critical security debt, which is defined as flaws left open for longer than a year.
50 percent of organisations now carry critical security debt, which is defined as flaws left open for longer than a year. — This cybersecurity statistic was published by Veracode in February 2025. The original data appears in State of Software Security 2025. For the full methodology and detailed findings, refer to the original report.
Share or Copy this stat
Frequently Asked Questions
What does this statistic say?
50 percent of organisations now carry critical security debt, which is defined as flaws left open for longer than a year. This data was published by Veracode.
Where does this data come from?
This statistic comes from State of Software Security 2025, published by Veracode on February 27, 2025. You can view the original report at https://www.veracode.com/resources/analyst-reports/state-of-software-security-2025/.
What cybersecurity topics does this cover?
This statistic was published by Veracode. Browse more statistics from Veracode.