CSC

Only 14% of security leaders are very confident in their company's ability to mitigate domain attacks.

57% of security leaders use AI-based monitoring and enforcement solutions.

73% of security leaders view AI as an opportunity rather than a risk for cybersecurity.

Certificate lifetimes are set to shorten to 200 days in 2026, 100 days in 2027, and 47 days by 2029.

Nearly 60% of organizations use three or more SSL certificate providers.

On average, a web outage caused by an expired SSL certificate can cost around $9,000 per minute.

85% of senior legal professionals reported an increase in intellectual property infringements at their firms over the past 12 months

67% of senior legal professionals expect significant increases in brand protection and IP enforcement budgets over the next three years

90% of senior legal professionals are expecting an increase in intellectual property infringements in the year ahead

1.9% of analyzed companies use 8 certificate providers.

Approximately 60% of businesses use three or more certificate providers.

7.4% of analyzed companies use 6 certificate providers.

17% of companies surveyed are unaware of their current Domain Control Validation (DCV) method.

40% of enterprises are at risk of unexpected service outages due to out-of-date Secure Sockets Layer (SSL) certificates.

10% of security leaders believe major businesses and organizations are significantly underprotected against DNS outages.

70% of security leaders say their organizations apply risk controls only to key suppliers.

98% of security leaders are concerned about the risks of giving third-party AI-based systems, including large language models, access to company data.

79% of security leaders are concerned or very concerned that suppliers' and partners' AI tool use poses a cybersecurity risk to their organization.

44% of security leaders use AI-based solutions for threat detection and fraud prevention.

86% of security leaders cite AI-powered domain generation algorithms (DGAs) as a cybersecurity threat.

Let’s Encrypt, Google®, and Amazon® issued 66% of all analyzed SSL certificates.

88% of senior legal professionals believe that AI-enabled systems are driving an increase in infringement activity

91% of senior legal professionals are concerned about the threat of online intellectual property infringement

76% of organizations have a domain management strategy in place

Only 16% of legal teams have total visibility into how their portfolios are managed

93% of senior legal professionals are concerned that AI-generated fake assets could materially harm their business

Over two-thirds of all Global 2000 companies have less than half of the recommended domain security measures implemented.

22.4% of analyzed companies use 1 certificate provider.

Three leading providers supply 89% of the DV certificates used by analyzed organizations.

Let’s Encrypt, Google ®, and Amazon ® combined account for 66% of all certificates analyzed from organizations.

4.1% of analyzed companies use 7 certificate providers.

15.8% of analyzed companies use 4 certificate providers.

16.6% of analyzed companies use 3 certificate providers.

12.2% of analyzed companies use 5 certificate providers.

By 2029, SSL and TLS certificate life cycles will shrink from 367 days to just 47 days.

By 2028, DCV re-use periods will decline from 367 days to only 10 days.

Organization Validation (OV) certificates represent 24.6% of all SSL certificates.

Extended Validation (EV) certificates account for 1.9% of all SSL certificates.

0.3% of analyzed companies use 10 or more certificate providers.

One organization had as many as 13 certificate providers.

Domain Validation (DV) certificates account for 73.5% of all SSL certificates.

18.5% of analyzed companies use 2 certificate providers.

1.0% of analyzed companies use 9 certificate providers.