Detection is solved. Closure is not. We measured what actually happens to a finding after it is found: 14.86 million detections across hundreds of enterprise environments and ten scanners, with the methodology published beside the numbers so anyone can check the working.
The distance between the moment a problem is visible and the moment it stops being true. Every vendor reports the first half. This is the second.
We measured what actually happens to a finding after it is found.
14.86M
detections analysed across hundreds of enterprise environments and ten CNAPPs
That is not caution. It is an immune reaction.
53%
of everything ever detected is still open, up from 41% in 2025
The number is moving the wrong way.
150
days for a critical finding to heal, up from 128
Vulnerability management slowed 22%.
282
from 230 to 282 days to close.
The primary barrier to enterprise adoption is fear of self-inflicted downtime.
Gartner · Aug 2026 · G00825668. Tamnoon is named a sample vendor in that research.
Every figure here carries its definition and its working. Nothing is rounded up, nothing is a platform average, and where a count is still being reconciled it says so instead of guessing.
See these numbers in your own account.
Read-only, against your own scanner findings, in the first meeting.
