Top-performing organizations have a high-risk finding half-life of 10 days, while bottom-tier organizations have a 249-day half-life—an eight-month gap in exposure.
Top-performing organizations have a high-risk finding half-life of 10 days, while bottom-tier organizations have a 249-day half-life—an eight-month gap in exposure. — This cybersecurity statistic was published by Cobalt in May 2026. It covers topics including Vulnerability Remediation, Risk Exposure, Operational Performance. The original data appears in State of Pentesting Report 2026. For the full methodology and detailed findings, refer to the original report.
Share or Copy this stat
Frequently Asked Questions
What does this statistic say?
Top-performing organizations have a high-risk finding half-life of 10 days, while bottom-tier organizations have a 249-day half-life—an eight-month gap in exposure. This data was published by Cobalt and covers Vulnerability Remediation, Risk Exposure, Operational Performance.
Where does this data come from?
This statistic comes from State of Pentesting Report 2026, published by Cobalt on May 27, 2026. You can view the original report at https://resource.cobalt.io/state-of-pentesting-2026?.
What cybersecurity topics does this cover?
This statistic relates to Vulnerability Remediation, Risk Exposure, Operational Performance. Browse more statistics on Vulnerability Remediation or from Cobalt.