Software Remediates Faster Than Any Other Industry. Here's the Data.

Software and technology companies run more pentesting than almost any other industry, and it shows. This report pairs five years of Cobalt pentest findings with a 2026 survey of 122 software industry security leaders and practitioners to profile how the software industry finds, fixes, and thinks about security risk.

38 days
Fastest high-risk vulnerability half-life of any sector

86%
Of high-risk findings get resolved

83%
Run regular AI security assessments (highest of any sector)

What’s Inside:

• Remediation speed benchmarks across 10 industries
• The vulnerability types appearing most often and which carry the highest risk
• Why AI remains the hardest asset class to secure, even for software teams