Nearly half of organisations lack confidence to close security gaps

HackerOne, one of the world’s most trusted provider of ethical hacking solutions, has released The 2022 Attack Resistance Report that captures IT professionals’ assessments of their cyberattack readiness. The report reveals organisations face a significant gap between what they are able to protect and what they need to protect — coined the attack resistance gap.

The report, compiled from survey responses from enterprise organisations in North America and Europe, investigated four areas critical for organisations to increase their resistance to attack: an understanding of their attack surface; the cadence of application testing compared to release cycles; the depth and style of security testing and the availability of technical talent capable of carrying out these tasks. Overall, organisations had a confidence score of 63% across a composite of these four areas.

“Awareness reduces risk. Only organisations who know their attack resistance gap are equipped to reduce it,” said Marten Mickos, CEO of HackerOne. “We conducted this research to illustrate the problem and show the way toward improvement. Organisations that broaden their scope of testing, and do it continuously, are seeing their attack resistance gap shrink.”