OX Security analyzed findings across 250 organizations — and the data tells a story no security leader can afford to ignore:
Every major AppSec metric moved in the wrong direction.
Inside the report:
- 216M+ Findings Analyzed: More than 2× last year’s dataset, providing one of the largest operational views into modern AppSec risk.
- A year-over-year escalation in alert volume, noise ratio, and critical workload
- A sub-industry benchmark across Insurance, Automotive, Financial Services, Healthcare, Technology, and more
- The severity factors that separate genuine risk from security noise
- Insights into where application security is heading next
Key Findings at a Glance
865K Average Alerts per Organization
A 52% year-over-year increase, driven largely by AI-accelerated development.
795 Critical Issues per Organization
After contextual prioritization — nearly 4× higher than last year.
Critical Risk Is Growing Faster Than Noise
The proportion of alerts that remain critical after prioritization has nearly tripled.
