Nine in Ten Open Critical and High — Severity Vulnerabilities Remain Exposed for More Than 90 Days, Detectify Finds

For best results when printing this announcement, please click on link below: Nine in Ten Open Critical and High-Severity Vulnerabilities Remain Exposed for More Than 90 Days, Detectify Finds Detectify’s H2 2026 Cyber Hygiene Index, based on a sample of 1,300 organizations across the US, UK and Nordics, shows that greater visibility into cyber exposure is not consistently translating into faster remediation, and organizations with exposed AI tooling tend to resolve critical and high-severity vulnerabilities at less than half the rate of the broader customer base. Nine in ten open critical and high-severity vulnerabilities have remained exposed for more than 90 days across organizations analyzed in the H2 2026 Cyber Hygiene Index from Detectify ( ), the Swedish application security platform built and trusted by hackers. The problem was consistent across every market: 97% of open critical.