Vectra AI

25 stats2 reports

All Statistics

83% of enterprise environments observe new device types.

Asset ManagementEnterprise Security

On average, more than 30% of enterprise devices are unmanaged because endpoint agents cannot be deployed.

Unmanaged DevicesEndpoint SecurityAsset ManagementEnterprise Security

100% of enterprise environments observe newly discovered devices within 14 days.

Asset ManagementEnterprise Security

67% of defenders say AI-powered tools have positively impacted threat identification and response.

AISOCAI-Powered ToolsDefenders

76% of defenders say AI agents or AI assistants now handle more than 10% of their workload.

AIAI AgentsAI AssistantsSOCDefenders

71% of defenders set aside important security tasks at least two days per week.

Security OperationsSOCDefenders

90% of enterprise environments observe new device roles.

Asset ManagementEnterprise Security

The typical enterprise environment contains 1.17 AI agents per device.

AI AgentsIdentity and AccessEnterprise Security

35% of enterprise environments contain more AI agents than devices.

AI AgentsAsset ManagementEnterprise Security

Deprecated TLS clients are present in 96% of enterprise environments.

CryptographyLegacy ProtocolsEnterprise Security

98% of enterprise environments contain at least one attacker-relevant exposure condition.

Exposure ManagementEnterprise Security

Plaintext passwords are present in 85% of enterprise environments.

Credential ExposureAuthenticationEnterprise Security

63% of enterprise environments exhibit exposure across multiple risk themes, including weak cryptography, credential exposure, legacy protocols and exposed remote access.

CryptographyCredential ExposureLegacy ProtocolsRemote AccessEnterprise Security

Expired certificates are present in 91% of enterprise environments.

CertificatesEnterprise Security

Deprecated TLS servers are present in 82% of enterprise environments.

CryptographyLegacy ProtocolsEnterprise Security

NetBIOS is present in 86% of enterprise environments.

Network ProtocolsLegacy ProtocolsEnterprise Security

The most extreme enterprise environment contains 96 AI agents assigned to a single device.

AI AgentsAttack SurfaceEnterprise Security

69% of organizations use more than 10 detection and response tools.

Tool SprawlThreat DetectionThreat ResponseDetection and Response ToolsSOC

87% of defenders expect to increase AI use, primarily to replace legacy detection and response tools.

AISOCDetection and Response ToolsDefenders

63% of defenders want AI agents to handle alert triage and investigations.

AIAI AgentsAI TriageSOCAlert Triage

63% of security alerts go unaddressed.

Security AlertsSOCDefenders

Organizations receive an average of 2,992 security alerts per day, down from 3,832 the year prior.

Security AlertsSOCDefenders

Only 58–60% of security teams report full or near-full visibility across endpoints, on-premises networks, cloud environments, and identities.

VisibilitySOCDefenders

44% of defenders say they are losing the battle to prioritize real threats.

Threat PrioritizationSOCDefenders

39% of organizations use more than 20 detection and response tools.

Tool SprawlSOCDetection and Response Tools