On average, enterprise SIEMs only have detection coverage for 21% of adversary techniques defined in the MITRE ATT&CK framework. This is a 2% increase in coverage from the 2024 report.
On average, enterprise SIEMs only have detection coverage for 21% of adversary techniques defined in the MITRE ATT&CK framework. This is a 2% increase in coverage from the 2024 report. — This cybersecurity statistic was published by CardinalOps in June 2025. It covers topics including SIEM, MITRE ATT&CK. The original data appears in 2025 State of SIEM Report. For the full methodology and detailed findings, refer to the original report.
Share or Copy this stat
Frequently Asked Questions
What does this statistic say?
On average, enterprise SIEMs only have detection coverage for 21% of adversary techniques defined in the MITRE ATT&CK framework. This is a 2% increase in coverage from the 2024 report. This data was published by CardinalOps and covers SIEM, MITRE ATT&CK.
Where does this data come from?
This statistic comes from 2025 State of SIEM Report, published by CardinalOps on June 5, 2025. You can view the original report at https://cardinalops.com/white-papers/2025-state-of-siem-report-download/.
What cybersecurity topics does this cover?
This statistic relates to SIEM, MITRE ATT&CK. Browse more statistics on SIEM or from CardinalOps.