WhiteHat Security Statistics Report is the only one that focuses exclusively on unknown vulnerabilities in custom web applications, code that is unique to an organization, and found in real-world websites.
The 2015 report reveals an industry shift towards risk reduction by most organizations. When customers were asked about the primary driver for resolving website vulnerabilities, 35% said risk reduction, which beat out compliance by more than 20 points. During May 2013 report, compliance was the number one driver. The leading theory is that most organizations that are required to be compliant with industry regulations have become so… yet the hacks keep happening. To keep hacks from happening, it appears risk reduction has taken center stage.
Download the report form here – https://info.whitehatsec.com/rs/whitehatsecurity/images/2015-Stats-Report.pdf