Report by CrowdStrike
2025 State of SMB Cybersecurity Report
Key Findings
Among SMBs under 25 employees who experienced a cyber incident in the past year, 29% reported ransomware.
50% of SMBs feel overwhelmed by the number of cybersecurity tools on the market.
Nearly 70% of SMBs rely on third-party guidance to inform buying decisions.
Only 6.5% of SMBs believe their current cybersecurity budget is truly sufficient.
93% of SMBs consider themselves knowledgeable about cybersecurity risks.
Among larger SMBs who experienced a cyber incident in the past year, 19% reported ransomware
Among SMBs with fewer than 50 employees, only 47% report having a security plan in place.
83% of SMBs report having a cybersecurity plan in place.
Only 36% of SMBs are investing in new cybersecurity tools.
Only 11% of SMBs have adopted AI-powered defenses. This is also stated as only 11% of SMBs currently using AI-powered security.
Among SMBs with fewer than 50 employees, more than half allocate less than 1% of their annual budget to cybersecurity.
Only 57% of SMBs say they prioritize protection against advanced threats when selecting a solution.
67% of SMBs prioritize affordability when selecting a cybersecurity solution.