SANS 2025 CTI Survey: Navigating Uncertainty in Today's Threat Landscape

Sponsored by Rapid7, the SANS 2025 CTI survey takes a deeper look at a steadily maturing cyber threat intelligence (CTI) field. Authored by Rebekah Brown and Andreas Sfakianakis, these results showcase dynamic areas for growth and empowerment of CTI personnel and tooling.

Download the report to gain insight into how cybersecurity professionals are navigating the ever-evolving landscape of cyber threat intelligence and learn how:

AI can support CTA teams: It has the power to improve the tailoring of CTI tooling to specific stakeholders and/or use cases.
A lack of skills is increasingly a roadblock to effective CTI: 34% of respondents thought so.
Reporting is driving strategic decision-making: Intelligence has little value if it isn't communicated effectively.
The MITRE ATT&CK framework is integral: It has become the de facto language within the CTI community for organizing and communicating adversary behavior.

Download the report to gain insight into how cybersecurity professionals are navigating the ever-evolving landscape of cyber threat intelligence and learn how:

AI can support CTA teams: It has the power to improve the tailoring of CTI tooling to specific stakeholders and/or use cases.
A lack of skills is increasingly a roadblock to effective CTI: 34% of respondents thought so.
Reporting is driving strategic decision-making: Intelligence has little value if it isn't communicated effectively.
The MITRE ATT&CK framework is integral: It has become the de facto language within the CTI community for organizing and communicating adversary behavior.

Customers