REPORT
The 25x Remediation Gap: See how elite security teams resolve risks in 10 days vs. 249
REPORT
The 25x Remediation Gap: See how elite security teams resolve risks in 10 days vs. 249

State of Pentesting

New Cobalt Research: Navigating 2026’s Nation-State and Supply Chain Threats

April 21, 2026
Est Read Time: 3 min
We are currently operating in a global geopolitical powder keg. As regional conflicts fundamentally redraw the cyber...
State of Pentesting

5 Key Takeaways from the 2026 State of Pentesting Report

April 21, 2026
Est Read Time: 2 min
Pentest data reveals a stark divide between organizations with an ad-hoc testing model and those with a programmatic approach.
State of Pentesting

Comparing the OWASP Top 10 2025 with Real-World Pentest Data

November 7, 2025
Est Read Time: 3 min
The new OWASP Top 10 2025 has been released, and as always, it’s a foundational moment for our industry. As a security...
Cybersecurity Insights State of Pentesting Vulnerabilities

Half-Life Tells the Whole Remediation Story

June 27, 2025
Est Read Time: 4 min
Mean (or median) time to response (MTTR) is the de facto standard for measuring how long it takes to perform a security action. Whether it’s responding to an attack, remediating vulnerabilities, or resolving pentest findings, MTTR is one of the most commonly reported statistics across industry reports.
State of Pentesting Industry Breakdowns

State of Pentesting 2025: Your Questions Answered

June 2, 2025
Est Read Time: 4 min
Our recent webinar, "State of Pentesting 2025 Report: What 10 Years of Data Tells Us About Real Risk," offered a...
State of Pentesting

Key takeaways from the State of Pentesting Report 2025

April 14, 2025
Est Read Time: 3 min
At Cobalt, we conduct over 5,000 pentests annually, a number that is growing every year, across web, API, LLM, network,...
State of Pentesting