Report by Google Cloud

Threat Intelligence benchmark: Stop reacting; Start anticipating

29 FINDINGSPublished Jul 28, 2025
View Original Report →

Key Findings

Enhancing trust in the threat intelligence vendor's capabilities to gather new sources of information was cited by 47% of IT and cybersecurity leaders as a benefit of using AI in threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

Providing actionable recommendations and next steps to uplevel junior analysts was cited by 63% of IT and cybersecurity leaders as a benefit of using AI in threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

37% of IT and cybersecurity leaders say stale information is a challenge in actioning threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

Simplifying the process of searching and querying data for relevant information was cited by 53% of IT and cybersecurity leaders as a benefit of using AI in threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

61% of IT and cybersecurity leaders say too many feeds is a challenge in actioning threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

86% of IT and cybersecurity leaders agreed that they "must" use AI to improve their ability to operationalise threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

49% of IT and cybersecurity leaders say the difficulty in determining which intelligence applies is a challenge in actioning threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

More than 80% of organisations already use threat intelligence or are planning to across eight major use-cases.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

60% of IT and cybersecurity leaders say too few analysts is a challenge in actioning threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAnalystsStaff

82% of IT and cybersecurity leaders worry about missing threats due to the volume of alerts and data they are faced with.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAlerts

59% of IT and cybersecurity leaders say it being difficult to verify the validity and/or relevance of threats is a challenge in actioning threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

Making threat intelligence more accessible to different stakeholders was cited by 68% of IT and cybersecurity leaders as a benefit of using AI in threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

Enabling the ability to foccus on higher-priority tasks via time saved was cited by 60% of IT and cybersecurity leaders as a benefit of using AI in threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

79% of IT and cybersecurity leaders said that external threat intelligence providers should help "uplevel junior staff or embed a threat intelligence (CTI) analyst" into their team.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

80% of IT and cybersecurity leaders said that threat intelligence providers should offer information sources that are both broad and deep.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

80% of IT and cybersecurity leaders said their senior leadership team underestimates threats to the organisation.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

35% of IT and cybersecurity leaders are "very concerned" that their organization might be missing real threats/incidents due to the amount of alerts and data they are faced it.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAlerts

44% of IT and cybersecurity leaders say there still being a lot of manual effort involved is a challenge in actioning threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

Improving the capability to prioritize threats and vulnerabilities was cited by 68% of IT and cybersecurity leaders as a benefit of using AI in threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

86% of IT and cybersecurity leaders said that their organisation needs to improve its understanding of the threat landscape.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

85% of IT and cybersecurity leaders say that their organisation could focus more time and energy on emerging critical threats.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

72% of IT and cybersecurity leaders said they are mostly reactive to threats.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

Improving decision-making with more complete, accurate, relevant, and timely information was cited by 59% of IT and cybersecurity leaders as a benefit of using AI in threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

Enhancing trust in the threat intelligence vendor's capabilities to analyze and correlate information was cited by 55% of IT and cybersecurity leaders as a benefit of using AI in threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

47% of IT and cybersecurity leaders are "concerned" that their organization might be missing real threats/incidents due to the amount of alerts and data they are faced it.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAlerts

59% of IT and cybersecurity leaders say it being hard to derive clear action from threat intelligence data is a challenge in actioning threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

66% of IT and cybersecurity leaders state that they struggle to share threat intelligence with relevant teams.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence

Improving efficiency by generating easy-to-read summaries was cited most frequently (69%) by IT and cybersecurity leaders as a benefit of using AI in threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligenceAI

61% of IT and cybersecurity leaders say too many feeds is a challenge in actioning threat intelligence.

Google CloudThreat Intelligence benchmark: Stop reacting; Start anticipating·Jul 28, 2025
Threat intelligence