The 2025 State of the SOC Report

AI now pulls indicators of compromise (IOCs) in as quickly as 10 seconds.

44% of threat detections originate from the cloud.

56% of threat detections originate from the endpoint.

86% of security alerts escalate into tickets, which indicates that most alerts still require human validation.

AI can automate 70% of all incident investigations and threat remediation activity.

86% of security alerts escalate into tickets, which indicates that most alerts still require human validation.

AI now pulls indicators of compromise (IOCs) in as quickly as 10 seconds.

AI can automate 70% of all incident investigations and threat remediation activity.

44% of threat detections originate from the cloud.