Half of security analysts’ time is lost to data correlation: Palo Alto Networks

Palo Alto Networks, today released its State of Cloud Security Report 2025, highlighting a growing disconnect between how quickly organizations can detect cyber threats and how long it takes them to fully respond and recover.

The report shows that while detection has improved, response has not kept pace. Nearly three-quarters of organizations (74%) say they can detect and contain cloud-based attacks within 24 hours. However, far fewer can sustain that speed through resolution. One in three organizations need more than a day to fully close an incident, and among these, 9% take between a week and a month to resolve a breach.

A key factor slowing response is operational fragmentation. Half of the surveyed respondents reported that 50% of analysts’ time is spent on data correlation, instead of actively responding to threats. For one in five analysts, this burden is even heavier, consuming up to 80% of ...