94% Of Firms Say Pentesting Is Essential, But Few Are Doing It Right
HelpNet Security, Tuesday, April 15th, 2025
Organizations are fixing less than half of all exploitable vulnerabilities, with just 21% of GenAI app flaws being resolved, according to Cobalt.
94% of firms view pentesting as essential to their program. This captures the assurance role of pentesting and reflects the reality that most breaches don't occur because the victim had no defenses. Rather, the defenses they had weren't as solid as they thought.
It's probably no surprise to learn that 91% of respondents chose compliance as a major reason why they do pentests. What may surprise some is that 92% say pentests are important to their organization's strategy and senior leadership.