Benchmarks
One statistic per page, each with its source, sample size, methodology, and a written statement of what it does not mean. Re-verified quarterly.
Last full verification sweep: August 28, 2026
58%
of organizations run more than 25 security tools
Wiz · August 28, 2026
5 to 16
people in a B2B buying group, across up to four functions
Gartner · August 28, 2026
67%
of B2B buyers prefer a rep-free buying experience
Gartner · August 28, 2026
74%
of B2B buying teams show unhealthy conflict while deciding
Gartner · August 28, 2026
10.9%
of IT spend goes to security, down from 11.9%
IANS Research and Artico Search · August 28, 2026
12.5% vs 4%
market growth against buyer budget growth
Gartner information security forecast · August 28, 2026
82 to 1
machine identities per human identity
CyberArk · August 28, 2026
48%
of breaches involved a third party
Verizon · August 28, 2026
31%
of breaches start with vulnerability exploitation
Verizon · August 28, 2026
45%
of employees use AI tools their employer has not sanctioned
Verizon · August 28, 2026
Common questions
- What is a benchmark card?
- A single page carrying one statistic, its source, its sample size, its methodology limits, and an explicit paragraph on what the number does not support. The format exists because answer engines retrieve passages rather than documents, and a page that is one clean claim with provenance is easier to cite correctly.
- How often are these numbers re-checked?
- Quarterly, and every card shows the date it was last verified by hand. The build fails if any cited figure has gone more than ninety days without verification, so a stale statistic cannot ship silently while the page still looks current.
- Do you use vendor-published research?
- Yes, and it is labelled. Vendor surveys from companies with a commercial interest in the answer carry a visible vendor research tag in the sources block, alongside a note on the sampling bias that follows from a sponsor surveying its own market.