Enterprise Patch and Remediation Benchmark: How Does Your Organization Compare?
Summary: Qualys reports that over the last 12 months enterprises deployed more than 8 million Google Chrome patches, with Visual C++ and .NET among the most delayed applications and an average mean time to remediation for complex apps of 5 months and 10 days. Of the 150 million patches Qualys deployed in that period, about 40 million were deployed autonomously with no human in the loop, according to President and CEO Sumedh Thakar.
Bottom line: A 5-month-and-10-day remediation window for complex applications means a known vulnerability can sit open for most of a year, and 40 million patches already shipping without human review sets a pace that manual patch cycles cannot match.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026