Skip to main content
VendorsContrast Security

Contrast Security

Cybersecurity reports and statistics published by Contrast Security

3 categories2 reports

Research Reports

Reports and publications from Contrast Security

Recent Statistics & Reports

Attackers exploit new application vulnerabilities in just 5 days.

7/17/2025
ApplicationsSoftwareVulnerabilities

The average application is exposed to 81 confirmed, viable attacks each month that evade other defences

7/17/2025
ApplicationsSoftwareVulnerabilities

On average, applications contain 30 serious vulnerabilities.

7/17/2025
ApplicationsSoftwareVulnerabilities

Applications face an average of 17 new application vulnerabilities per month.

7/17/2025
ApplicationsSoftwareVulnerabilities

Developer teams remediate, on average, 6 application vulnerabilities per month.

7/17/2025
ApplicationsSoftwareVulnerabilities

It takes an average of 84 days to patch even the most critical flaws in applications.

7/17/2025
ApplicationsSoftwareVulnerabilities

The average application is targeted by attackers once every 3 minutes.

7/17/2025
ApplicationsSoftwareVulnerabilities

60% of financial sector respondents said their investments in XDR did not provide visibility into behavioural anomalies at the application layer.

2/1/2025

43% of financial sector respondents cited dwell time as a key concern.

2/1/2025

61% of financial sector respondents consider their WAFs to be effective.

2/1/2025

Over half of financial institutions experienced a supply chain attack.

2/1/2025

71% of of financial sector respondents reported zero-day attacks as the key concern for safeguarding applications and APIs.

2/1/2025

82% of financial institutions overrely on web application firewalls (WAF).

2/1/2025

Fewer than 25% of financial sector respondents are confident that their current security controls could mitigate a zero-day attack.

2/1/2025

64% of financial sector respondents reported experiencing cybersecurity incidents in the past 12 months.

2/1/2025

38% of financial sector respondents reported a lack of visibility into the application layer as a concern.

2/1/2025

Financial sector respondents reported a 12.5% increase in destructive cyber attacks.

2/1/2025

Over two-thirds of financial sector respondents experienced attacks focused on stealing non-public market information.

2/1/2025