Cyentia Institute Research
Browse this collection of publications that showcase our commitment
to producing valuable research for the cybersecurity community.
-
Information Risk Insights Study: Xtreme Edition, 2026
Partner: CISA
The IRIS Xtreme examines the costliest 5% of security incidents from the past five years to help organizations weather the storm of extreme cyber events. -
State of Pentesting Report 2026
Partner: Cobalt Labs
The State of Pentesting Report checks what security teams believe about their programs against the results of more than 16,500 Cobalt pentests. -
2026 State of Software Security
Partner: Veracode
The 2026 State of Software Security uses Veracode scan data from 1.6 million applications to show why better flaw detection hasn’t led to smaller backlogs. -
2025 Ripples Across the Risk Surface
Partner: RiskRecon by Mastercard
The 2025 edition of Ripples Across the Risk Surface examines more than 1,500 multi-party incidents to see how breaches spread to third parties and who pays. -
Risky Business
Partner: Living Security
Risky Business uses Human Risk Management data from more than 100 organizations to ask which employees drive human cyber risk and whether it can be managed. -
2025 Information Risk Insights Study: It’s About Time
Partner: CISA
IRIS 2025 tests a common assumption in security, that cyber risk only ever goes up, against public incident and loss records from 2008 through 2024. -
State of Pentesting Report 2025
Partner: Cobalt Labs
The State of Pentesting Report 2025 sets what security leaders believe about their programs against a decade of Cobalt pentest results. -
Global 2000: Industry Titans Battle the Beast of Supply Chain Cyber Risk
Partner: SecurityScorecard
This study with SecurityScorecard maps the security ratings, breaches and vendor ecosystems of the Forbes Global 2000 to show where their cyber risk sits. -
2025 State of Software Security
Partner: Veracode
The 2025 State of Software Security uses five metrics from 1.3 million applications to show what separates leading AppSec programs from lagging ones. -
Exposing Human Risk
Partner: Mimecast
Exposing Human Risk uses Mimecast telemetry to measure how often employees click on phishing, run malware or break browsing policy, and who they are.
Want to commission Cyentia research?
Great! Let’s explore ways we might work together to create impactful content. Tell us a bit about what you’re looking for, and we’ll reach out to set up a discussion.