Every figure below is from third-party industry research, not THEWATCH's own data or customer results: each one links to its original source so you can check it yourself.
11 hrs
to resolve one critical identity alert
Enterprises spend an average of 11 person-hours investigating and remediating a single critical identity-related security alert.
11 tools
used to trace a single identity issue
Workforce identity teams use an average of 11 different tools just to trace one identity-related security issue.
23:15
to regain full focus after a single interruption
Widely-cited field research found it takes an average of 23 minutes and 15 seconds to fully get back to a task after being interrupted: the cost of every tool-switch during an investigation.
64%
of SOCs are still mostly manual
64% of security teams say their detection, triage, and investigation processes are still heavily manual, and 76% cite alert fatigue as a top challenge.
83 tools
from 29 vendors, on average, per organization
The average enterprise runs 83 different security solutions sourced from 29 separate vendors, almost none of it built to talk to itself.
30+ tools
for 16% of SOC teams surveyed
Only 12% of security teams run fewer than 10 tools; 16% are running 30 or more. Most teams sit somewhere in a fragmented middle.
+72 / +84 days
slower to identify and contain threats
Organizations with fragmented, non-integrated tool stacks take an average of 72 days longer to identify (MTTI) and 84 days longer to contain (MTTC) security incidents than platformized organizations.
~5%
of annual revenue, by executives' own estimate
Surveyed executives estimate that security tool fragmentation costs their organization an average of 5% of annual revenue, illustrated in the report as roughly $1 billion for a $20 billion-revenue company.
THEWATCH is a new platform and doesn't yet have published customer results of its own: this page is industry research on the problem we built THEWATCH to solve, not a claim about what THEWATCH itself has delivered.