Recorded Future Survey Finds Threat Intelligence Teams Prioritize Integration and AI
Summary
A Recorded Future and UserEvidence survey of 768 enterprise cybersecurity professionals found that teams plan to increase threat intelligence spending, prioritize integration, and increasingly use intelligence in AI and automation workflows.
Key points
- The annual survey covered 768 cybersecurity professionals at enterprises with at least 1,000 employees.
- 79% plan to consolidate threat intelligence vendors, while 83% expect to increase spending; improving correlation was the leading consolidation driver.
- Only 25% said external intelligence and internal telemetry are in one place; 52% reported partial integration and 18% rely on manual correlation.
- Although 99% formally measure threat intelligence value, 39% measure cost savings and 31% measure whether triggered actions worked.
- 68% said formally documented, regularly reviewed Priority Intelligence Requirements govern their programs.
- 98% use AI in threat intelligence work, and 74% say threat intelligence feeds their organization’s AI or automation initiatives.
Article Details
- Publisher
- Recorded Future
- Report Period
- 2027 report; survey fieldwork dates not specified.
- Scope
- Survey on threat intelligence use, funding, measurement, and AI adoption among cybersecurity professionals at large enterprises.
- Sample Size
- 768 cybersecurity professionals at enterprises with at least 1,000 employees.
- Key Statistics
- 79% of respondents plan to consolidate threat intelligence vendors in the next year.
- 83% plan to increase threat intelligence spending in the next 12 months.
- 25% say external intelligence and internal telemetry reside in one place.
- 99% formally measure the value of their threat intelligence program.
- 74% say threat intelligence already feeds their organization's AI or automation initiatives.
- Recommendations
- When evaluating vendors, assess whether consolidation maintains or improves outcomes.
- Identify where manual handoffs remain in intelligence integration and correlation.
- Use Priority Intelligence Requirements as a benchmark and closed-loop validation to measure outcomes.
People
Vendors
Products
Impact & Metrics dashboardThe Impact & Metrics dashboard in the Recorded Future platform helps here by showing the hours and dollars saved through use of the platform.Recorded Future PlatformThe Impact & Metrics dashboard in the Recorded Future platform helps here by showing the hours and dollars saved through use of the platform.