Whitepaper

Download the 2025 SANS SOC Survey Report

The annual SANS SOC Survey reveals how 457 security teams across 57 countries are building and managing their operations. Get data-driven insights from 9 years of industry research.

Download Resource

White tapered dashes forming waves across the section background

Beyond the Hype AI Agents in the SOC benchmark report cover and survey results

Download the 2025 SOC Survey Report

79% of SOCs operate 24/7 but 69% still rely on manual reporting

62% say their organizations aren't doing enough to retain talent

AI/ML paradox: 40% use these tools but satisfaction ranks dead last

Upward arrow illustrating AI SOC adoption for MSSPs

What You’ll Learn:

Optimal SOC team size and structure benchmarks

Which technologies actually deliver value (hint: EDR wins, AI/ML loses)

Why average tenure is only 3-5 years and how to improve retention

Real incident response capabilities vs. "threat hunting" myths

Budget and resource allocation insights from your peers

Written by Christopher Crowley, 25-year security veteran and SANS Senior Instructor, this report provides the benchmarks you need to evaluate your SOC’s performance and make your case for resources.

Download Resource

Share this resource

Trusted by security teams. Recognized by analysts.

What our customers say

"We've seen a huge reduction in repetitive work. Dropzone has offloaded about 30–50% of our alert volume. That's time we can now spend threat hunting, onboarding customers, or improving coverage."

Chris DeBrunner

Vice President, Security Operations

CBTS

"Dropzone saves you and your team so much time from distracting redundant tasks that add little to no value. It gives you an accurate analysis of data sources that you would never think of looking through. The embedded AI capabilities allow you to solve critical problems that you and your team don't have the bandwidth to solve."

Chris DeBrunner

Vice President, Security Operations

CBTS

"No other technology has the ability to unlock an improvement in detection and response speed like Dropzone AI."

Andrew Marsh

Director, Information Security

Indiana Farm Bureau insurance

"Simply adding more people to the team is not a scalable solution; using augmented AI to enhance your team’s capabilities is the way forward"

Kevin Turnbull

Global IT Director

Assala Energy

What our customers say

"We've seen a huge reduction in repetitive work. Dropzone has offloaded about 30–50% of our alert volume. That's time we can now spend threat hunting, onboarding customers, or improving coverage."

Chris DeBrunner

Vice President, Security Operations

CBTS

"Simply adding more people to the team is not a scalable solution; using augmented AI to enhance your team’s capabilities is the way forward"

Kevin Turnbull

Global IT Director

Assala Energy

"No other technology has the ability to unlock an improvement in detection and response speed like Dropzone AI."

Andrew Marsh

Director, Information Security

Indiana Farm Bureau insurance

"Dropzone saves you and your team so much time from distracting redundant tasks that add little to no value. It gives you an accurate analysis of data sources that you would never think of looking through. The embedded AI capabilities allow you to solve critical problems that you and your team don't have the bandwidth to solve."

Chris DeBrunner

Vice President, Security Operations

CBTS

What our customers say

"We've seen a huge reduction in repetitive work. Dropzone has offloaded about 30–50% of our alert volume. That's time we can now spend threat hunting, onboarding customers, or improving coverage."

Chris DeBrunner

Vice President, Security Operations

CBTS

"Dropzone saves you and your team so much time from distracting redundant tasks that add little to no value. It gives you an accurate analysis of data sources that you would never think of looking through. The embedded AI capabilities allow you to solve critical problems that you and your team don't have the bandwidth to solve."

Chris DeBrunner

Vice President, Security Operations

CBTS

"No other technology has the ability to unlock an improvement in detection and response speed like Dropzone AI."

Andrew Marsh

Director, Information Security

Indiana Farm Bureau insurance

"Simply adding more people to the team is not a scalable solution; using augmented AI to enhance your team’s capabilities is the way forward"

Kevin Turnbull

Global IT Director

Assala Energy

What our customers say

"We've seen a huge reduction in repetitive work. Dropzone has offloaded about 30–50% of our alert volume. That's time we can now spend threat hunting, onboarding customers, or improving coverage."

Chris DeBrunner

Vice President, Security Operations

CBTS

"No other technology has the ability to unlock an improvement in detection and response speed like Dropzone AI."

Andrew Marsh

Director, Information Security

Indiana Farm Bureau insurance

"Simply adding more people to the team is not a scalable solution; using augmented AI to enhance your team’s capabilities is the way forward"

Kevin Turnbull

Global IT Director

Assala Energy

"Dropzone saves you and your team so much time from distracting redundant tasks that add little to no value. It gives you an accurate analysis of data sources that you would never think of looking through. The embedded AI capabilities allow you to solve critical problems that you and your team don't have the bandwidth to solve."

Chris DeBrunner

Vice President, Security Operations

CBTS

Consent Preferences