2026 State of Threat Detection and Response Report

67% of defenders say AI-powered tools have positively impacted threat identification and response.

87% of defenders expect to increase AI use, primarily to replace legacy detection and response tools.

71% of defenders set aside important security tasks at least two days per week.

69% of organizations use more than 10 detection and response tools.

Only 58–60% of security teams report full or near-full visibility across endpoints, on-premises networks, cloud environments, and identities.

44% of defenders say they are losing the battle to prioritize real threats.

Organizations receive an average of 2,992 security alerts per day, down from 3,832 the year prior.

63% of defenders want AI agents to handle alert triage and investigations.

63% of security alerts go unaddressed.

39% of organizations use more than 20 detection and response tools.

76% of defenders say AI agents or AI assistants now handle more than 10% of their workload.