Datadog’s State of DevSecOps 2025 Report Finds Only 18% of Critical Vulnerabilities Are Truly Worth Prioritising

A recent report by Datadog provides a critical insight into the actual handling of vulnerabilities in cloud applications. The results show that most of the vulnerabilities identified as critical are not at all – at least not in a practical context. Less alarm, more focus: New method of risk assessment The central message of the State of DevSecOps 2025: Security teams often focus on wrong priorities. "The State of DevSecOps 2025 shows that securi…

Datadog’s State of DevSecOps 2025 Report Finds Only 18% of Critical Vulnerabilities Are Truly Worth Prioritising

SYDNEY, 24 April 2025 - Datadog, Inc. (NASDAQ: DDOG), the monitoring and security platform for cloud applications, today released its new report, the State of DevSecOps 2025, which found that only a fraction of critical vulnerabilities are truly worth prioritising.  To better understand the severity of a vulnerability, Datadog developed a prioritisation algorithm that factored in runtime context to its Common Vulnerability Scoring System (CVSS) …