Summary
This document is a survey report that presents findings from the 2025 State of Pentesting Survey, which was commissioned by Pentera and conducted by Global Surveyz. The survey involved 500 Chief Information Security Officers (CISOs) and senior security executives, with a focus on understanding the evolving landscape of cybersecurity and pentesting practices. The report outlines key findings, including the increasing complexity of cyber infrastructures, the growth of security tool stacks, and the impact of cybersecurity insurance on technology adoption. It details that 67% of US enterprises experienced a breach in the past 24 months, despite managing an average of 75 security tools. The report also discusses the shift towards automated adversarial testing and the operationalization of pentest findings. Additionally, it highlights the role of software-based pentesting and the challenges posed by the growing number of alerts generated by security tools. Overall, the report provides a comprehensive view of how organizations are adapting their security strategies in response to a rapidly changing threat environment.
