10 Web Application Security Statistics You Can't Ignore

The security of Web applications is a problem that is growing in importance. The largest attack surface for attackers is being exploited every day. The statistics tell the story of the in-security of Web applications.

73%

of organizations have been hacked at least once in the past two years through insecure Web applications.
State of Web Application Security Survey, Ponemon Institute

74%

of IT practitioners believe Web application security is either more critical or equally critical to other security issues faced by their organizations.
State of Web Application Security Survey, Ponemon Institute

70%

of threats are at the Web application layer.
Gartner

55%

of all disclosures were Web application vulnerabilities.
IBM X-Force 2010 Mid-Year Trend and Risk Report

Number of vulnerabilities per Web application.
Web Application Security Consortium

The average number of "serious" vulnerabilities on a website.
WhiteHat Security

$525

The amount the average business spends per employee annually on security.
Gartner

$3.8

million

Median annual cost of a cyber attack.
The First Annual Cost of Cyber Crime Study, Ponemon Institute

80%

of retailers and organizations that handle credit card transactions had been hit with a data breach.
PCI DSS Compliance Report 2009, Ponemon Institute

$3.5

million

The average annual cost of achieving regulatory security compliance in multinational companies.
The True Cost of Compliance, Ponemon Institute