Since 2017, the median time to resolve serious vulnerabilities has decreased dramatically—from 112 days down to 37 days last year.
Since 2017, the median time to resolve serious vulnerabilities has decreased dramatically—from 112 days down to 37 days last year. — This cybersecurity statistic was published by Cobalt in April 2025. It covers topics including Vulnerabilities, Vulnerability remediation, Vulnerability management. The original data appears in State of Pentesting Report 2025. For the full methodology and detailed findings, refer to the original report.
Share or Copy this stat
Frequently Asked Questions
What does this statistic say?
Since 2017, the median time to resolve serious vulnerabilities has decreased dramatically—from 112 days down to 37 days last year. This data was published by Cobalt and covers Vulnerabilities, Vulnerability remediation, Vulnerability management.
Where does this data come from?
This statistic comes from State of Pentesting Report 2025, published by Cobalt on April 14, 2025. You can view the original report at https://resource.cobalt.io/state-of-pentesting-2025.
What cybersecurity topics does this cover?
This statistic relates to Vulnerabilities, Vulnerability remediation, Vulnerability management. Browse more statistics on Vulnerabilities or from Cobalt.