Cybersecurity Statistics

Security Intelligence

VendorsAnvilogic

Anvilogic

Cybersecurity reports and statistics published by Anvilogic

0 categories1 reports

Research Reports

Reports and publications from Anvilogic

2025 State of Detection Engineering

Recent Statistics & Reports

45% said Reducing false positives is a detection engineering program area that needs the most improvement.

34% said Anomaly-based detection type is the most effective.

71% said Resource and time constraints is a challenge of building/maintaining custom detections.

45% said Alert enrichment is a skill that needs development for their detection engineering workforce.

52% said Data engineering is a skill that needs development for their detection engineering workforce.

42% of detections are custom-built, 37% are vendor-provided, and a smaller percentage are from open-source. Only 2% rely solely on vendor-provided detections.

38% said Accuracy of detection rules is a detection engineering program area that needs the most improvement.

45% of organisations have already integrated AI into their detection workflows, and 88% of participants believe AI will play a major role in detection engineering in the next three years.

Most detection engineers fall into the mid-career range.

67% said Behaviour-based detection type is the most effective.

88% believe AI will impact detection engineering in the next 3 years. 45% are using AI in their detection engineering efforts today.

41% said Signature-based detection type is the most effective.

43% of detection engineers are using AI primarily for anomaly detection.

43% said Correlation-based detection type is the most effective.

41% said Lack of skilled personnel is a challenge of building/maintaining custom detections.

36% said Streamlining workflows is a detection engineering program area that needs the most improvement.

76% said Understanding/mapping attack frameworks is the most valuable skill for their detection engineering workforce.

54% said Lack of flexibility in customisation is a challenge of vendor-provided detections.

93% of organisations are using or planning to implement automation in their workflows.

74% said Triage & incident response is the most valuable skill for their detection engineering workforce.

Showing first 20 results

Top Categories