78% of organizations require IT or security team involvement in final technology purchasing decisions.

81% of organizations rate security as 'critical' or 'very important' when evaluating support technology.

81% of organizations lack full visibility into how and where AI is being used across the software development lifecycle.

The proportion of safe dependency recommendations increased from 20% to 57% when AI agents were equipped with security tools in 2025.

65% of devices across organizations are classified as non-traditional IT.

About 75% of the more than 10,000 Model Context Protocol (MCP) servers were built by individuals without enterprise-grade protections in 2025.

Healthcare organizations have 35% of their devices classified as extended IoT.

Financial services organizations have 35% of their devices classified as extended IoT.

11% of devices across organizations are classified as network equipment.

There are 380 unique device functions observed across organizations, averaging 164 functions per organization.

40% of the more than 10,000 Model Context Protocol (MCP) servers created in under a year had no license in 2025.

44-49% of dependencies imported by AI coding agents contained known security vulnerabilities in 2025.

82% of the more than 10,000 Model Context Protocol (MCP) servers interact with sensitive APIs, creating additional vulnerabilities in 2025.

24% of devices across organizations are classified as part of the extended IoT, including IoT, OT, and IoMT.

Only 20% of dependency versions recommended by AI coding assistants were found to be safe to use in 2025.

9 working weeks per year are spent on vendor security reviews and risk assessments, compared to 7 weeks the previous year.

30% of German IT & security professionals believe that Mobile Device Management (MDM) does not fully protect their managed devices

56% of Singaporean employees reported using a personal device for work at least once a month

34% of US employees reported using a personal device for work at least once a month

56% of US employees reported using a personal device for work at least once a month