Every figure below is from third-party industry research, not THEWATCH's own data or customer results — each one links to its original source so you can check it yourself.
11 hrs
to resolve one critical identity alert
Enterprises spend an average of 11 person-hours investigating and remediating a single critical identity-related security alert.
11 tools
used to trace a single identity issue
Workforce identity teams use an average of 11 different tools just to trace one identity-related security issue.
23:15
to regain full focus after a single interruption
Widely-cited field research found it takes an average of 23 minutes and 15 seconds to fully get back to a task after being interrupted — the cost of every tool-switch during an investigation.
64%
of SOCs are still mostly manual
64% of security teams say their detection, triage, and investigation processes are still heavily manual — and 76% cite alert fatigue as a top challenge.
83 tools
from 29 vendors, on average, per organization
The average enterprise runs 83 different security solutions sourced from 29 separate vendors — almost none of it built to talk to itself.
30+ tools
for 16% of SOC teams surveyed
Only 12% of security teams run fewer than 10 tools; 16% are running 30 or more — most teams sit somewhere in a fragmented middle.
+72 / +84 days
slower to identify and contain threats
Organizations with fragmented, non-integrated tool stacks take an average of 72 days longer to identify (MTTI) and 84 days longer to contain (MTTC) security incidents than platformized organizations.
~5%
of annual revenue, by executives' own estimate
Surveyed executives estimate that security tool fragmentation costs their organization an average of 5% of annual revenue — illustrated in the report as roughly $1 billion for a $20 billion-revenue company.
THEWATCH is a new platform and doesn't yet have published customer results of its own — this page is industry research on the problem we built THEWATCH to solve, not a claim about what THEWATCH itself has delivered.
