The State of Pentesting survey report from Pentera collected responses from 500 senior security executives and CISOs employed in companies with more than 3,000 workers, gaining insights into current budget priorities, security validation practices, and proactive risk management strategy adoption. 

According to the report, more than 50% of CISOs deploy software-based pentesting to bolster in-house testing practices. Furthermore, 50% consider software-based testing to be the predominant method for discovering exploitable security vulnerabilities within their organizations. These trends indicate a shift toward testing approaches that provide larger scale, span the entire attack surface, and allow continuous validation of the organization.