Cyberstats

Security Intelligence

VendorsCypress Data Defense

Cypress Data Defense

Cybersecurity reports and statistics published by Cypress Data Defense

8 categories1 reports

Research Reports

Reports and publications from Cypress Data Defense

2025 State of Application Security Report

Recent Statistics & Reports

58% of security teams report frequent false positives from application security scanners.

Insecure code Application security Application security scanners

11% of security teams say application security false positives happen constantly.

Insecure code Application security False positives

83% of organizations are considering outsourcing AppSec functions.

Insecure code Application security

Just 1% of organizations invest more than 20% of their total security budget into AppSec.

Insecure code Application security Budget

62% of organizations knowingly release insecure code to meet delivery deadlines.

Insecure code Application security

Nearly 90% of organizations allocate just 11–20% of their security budgets to application security.

Insecure code Application security

60% of organizations say security issues are more likely to delay product launches than feature bugs.

Insecure code Application security

57% of organizations wait until just before deployment to involve security.

Insecure code Application security

36% of companies spend more on network security than AppSec.

Insecure code Application security Network security

Only 36% of organizations involve security at the planning stage of software development.

Insecure code Application security Software development

8 in 10 AppSec professionals are open to outside help.

Insecure code Application security

62% of security professionals fear being fired following a breach.

Insecure code Application security

17% of security professionals believe termination is likely after a breach.

Insecure code Application security

51% of teams have fully addressed OWASP Top 10 threats, meaning nearly half remain exposed to foundational risks.

Insecure code Application security OWASP

Application-layer attacks account for 43% of breaches.

Insecure code Application security Application-layer attacks

Top Categories

Application security

2

Application security scanners

1

False positives

1

1

Network security

1

Software development

Related Vendors