CYBERSTATS

Security Intelligence

VendorsAnvilogic

Anvilogic

Cybersecurity reports and statistics published by Anvilogic

0 categories1 reports

Research Reports

Reports and publications from Anvilogic

2025 State of Detection Engineering

Recent Statistics & Reports

46% said Detection-as-code, CI/CD is a skill that needs development for their detection engineering workforce.

56% of detection engineers update their detection rules and processes daily or weekly. 30% of organisations update rules only when needed, quarterly, or even annually.

43% said Improving turnaround time for developing and deploying a detection is a detection engineering program area that needs the most improvement.

39% said Automation of detection tasks is a detection engineering program area that needs the most improvement.

34% said Collaboration between teams is a detection engineering program area that needs the most improvement.

43% said Threat intelligence-driven detection type is the most effective.

Top activities detection engineers enjoyed the most: Developing detection rules: 33%.

Top activities detection engineers enjoyed the least: Metrics and reporting: 41%.

67% of detection engineers reported strong leadership buy-in.

44% said Scripting/programming languages is a skill that needs development for their detection engineering workforce.

60% of detection engineers work on a dedicated team. This is more pronounced in enterprises with over 5,000 employees, where 70% have dedicated detection engineering teams, compared to 49% in small and medium-sized organisations.

54% of organisations position their detection engineering function as a dedicated team within security operations.

58% of detection engineers report full integration and collaboration with incident response teams.

67% said Processing/querying languages is the most valuable skill for their detection engineering workforce.

53% said Threat modelling is a skill that needs development for their detection engineering workforce.

47% said Reporting/visualisation is a skill that needs development for their detection engineering workforce.

47% said Software engineering is a skill that needs development for their detection engineering workforce.

45% said Log pipeline monitoring and health is a skill that needs development for their detection engineering workforce.

93% of detection engineers are using or planning to use automation in their detection engineering workflow. 63% have automation already in place.

64% said High false positive rate is a challenge of vendor-provided detections.

Showing 21-40 of 45 results

Top Categories