The average organization used 27 distinct AI tools in Q3 2025, down from 23 new tools introduced in Q2 2025.

91% of global organizations plan to implement AI in their tech stack this year, representing a 12-percentage-point increase from the previous year.

58% of CISOs say incidents occurred even though their security tools were in place.

56% of CISOs say their security tools don’t integrate fully.

13% of CISOs oversee 50 or more security tools.

57% of CISOs report that half or fewer of their security tools deliver measurable Return on Investment (ROI).

65% of CISOs manage 20 or more security tools.

47% of security and IT professionals learn of misdirected emails from recipients rather than from security tools.

Organizations used an average of 65 security tools in 2025, a decrease from 91 tools in 2024, but 73% of security leaders indicated that the time from detecting an attack to resolution has increased.

16.6% of Managed Service Providers (MSPs) identified a lack of tools as a barrier to fully implementing Microsoft 365 baselines.

40% of Managed Service Providers (MSPs) say operational complexity and lack of integrated tooling are their biggest operational barriers in Microsoft 365 management.

49% say tool complexity is the biggest barrier to maturing their insider risk program.

42% of companies are making greater investment in technology tools.

20% of developers, architects, and executives use Sentry as their API monitoring tool.

43% of organizations are using specialized AI security tools.

11% of respondents pointed to tooling/solutions gaps as the primary barrier to implementing a strong API security program.

9% of organizations rated the tools they use to detect and prevent API attacks as not very effective.

59% of organizations said the tools they use to detect and prevent API attacks are only somewhat effective.

Only 23% of organizations rated the tools they use to detect and prevent API attacks as very effective.

3% of organizations rated the tools they use to detect and prevent API attacks as not effective at all.