Security Tool Sprawl: 65% of Leaders Report Too Many Tools
Global – October 27, 2026 -- Sixty-five percent of 2,000 senior security decision-makers say they have too many security tools or vendors, and 53% say their tools can't be integrated, according to 2025 research by Barracuda and Vanson Bourne. For application security (AppSec) teams, the sprawl shows up as overlapping findings from static application security testing (SAST), software composition analysis (SCA), and cloud-native application protection platforms (CNAPPs).
Duplicate alerts, coverage gaps and lost context drive sprawl costs
One vulnerable open-source package can surface three times: as an SCA finding in the repository, as a container image finding in the registry, and as a runtime finding in the CNAPP. Each carries its own severity score, owner, and ticket, so triage time goes to reconciling one issue three times.