Pentera：2023年网络安全渗透测试年度报告（英文版）（26页）.pdf

1、THE STATE OF PENTESTING 2023S U R V E Y R E P O R TTABLE OF CONTENTSIntroductionMethodologyKey FindingsSURVEY REPORT FINDINGSDefense in Depth Is Not Sufficient Anymore Whats Driving Pentesting?How are Pentest Reports Being Used?Tested Aspects During Pentesting AssessmentBiggest Barriers to Pentestin

2、g:Percieved Risk to Business Continuity and a Talent ShortageCurrent Economic Slowdown is Not Impacting Cybersecurity BudgetsProjected Annual IT Security and Pentesting BudgetsPentesting is Standard,But There is Room for ImprovementThe Validation vs.Change Rate Frequency Gap A Detailed Look at the N

3、umbers Behind this ReportAbout Pentera223578910111213151625THE STATE OF PENTESTING SURVEY 2023EXECUTIVE SUMMARYPentera,the leaders in Automated Security Validation,undertook this research to understand the current state of security validation in organizations of different sizes across Europe and the

4、 USA.How are todays organizations approaching pentesting,compared to common practices a few years ago?What are the motivations driving pentesting?And how is the current economic situation impacting cybersecurity-both specifically for pentesting initiatives and for the wider IT security budget?This r

5、eport is a snapshot of how security leaders in 2023 perceive and choose to adopt security validation strategies,shining a light on budget,sentiment,drivers,and inhibitors for their current practices.THE STATE OF PENTESTING SURVEY 20232METHODOLOGYWe commissioned a survey of 300 security executives wh

6、o hold VP or C-level positionsin companies with more than 1,000 employees.Respondents were split between the U.S.,the UK,and Western Europe.We screened for those who were aware of their pentesting activities,and how frequently they implemented manual pentests,if at all.This report was administered o