The State of IT security in SMBs 2025

In today’s threat landscape, small and medium-sized businesses (SMBs) are no longer off the radar — they’re on the front lines. From phishing scams and ransomware to insider threats and cloud misconfigurations, cyberattacks now strike organizations of all sizes, in all sectors, with growing sophistication and financial impact. In fact, our survey indicates that 43% of SMBs faced at least one cyberattack in the past year.

To better understand how SMBs are responding to this new normal, Devolutions conducted its largest-ever global cybersecurity survey, collecting responses from 445 professionals across IT, security, and executive leadership roles. This year’s results shine a spotlight on six areas that reveal how far SMBs have come — and how far they still have to go.