Research Exposes $7M Mobile App Security Blindspot Fueled by Overconfidence

Guardsquare, the leading provider of mobile application security products, today unveiled the compelling results of an Enterprise Strategy Group study, “Mobile Application Security Cannot Be an Afterthought,” highlighting a critical misalignment between the perception and reality of mobile apps. While 93% of organizations believe their mobile app protections are sufficient to prevent attacks, the survey revealed that a substantial 62% of organizations faced at least one mobile app security incident in the past year. On average, organizations are reporting nine incidents per year.

The independent study, conducted by the Enterprise Strategy Group, surveyed more than 300 decision-makers from the application development, cybersecurity, and IT sectors worldwide. The research highlights the urgency of addressing the mobile app security perception gap, as the financial toll from these incidents continues to escalate. Survey results found the average cost of mobile app security breaches has reached $6.99 million in 2025.

Other Key Insights:

  • The impact goes beyond the balance sheet: The repercussions of mobile security lapses extend far beyond financial losses. Organizations reported application downtime (in more than 50% of cases), sensitive data leaks (48%), erosion of consumer trust (41%), and a diminished user experience (38%).
  • With the right mobile app protection in place, faster release cycles become a strength, not a risk: The average number of unique mobile applications released annually has jumped from 10 in 2023 to 13 in 2025. Yet a noteworthy 74% of organizations noted feeling increased pressure to accelerate their development cycles, with 71% conceding that this push for speed has come at the expense of robust mobile app security measures.
  • Significant gaps in security strategies: Nearly 40% of organizations rely solely on security measures built in-house or those included in operating systems. Only 31% employ code obfuscation techniques, leaving many mobile apps open to static analysis. Besides, 60% of organizations have not implemented Runtime Application Self-Protection (RASP).


The Multi-layered Security Imperative
The study highlights the need for a comprehensive security strategy. Such a strategy should encompass robust code hardening and obfuscation, proactive runtime application self-protection, rigorous mobile application security testing, and continuous threat monitoring. While a reasonable 63% of organizations are engaged in mobile application security testing and nearly 60% are utilizing threat monitoring, the study revealed that substantial weaknesses persist in other vital areas of defense.

New Priorities in Mobile App Security
The study also identified evolving priorities for organizations. Notable ones include:

  • Rising legal repercussions from mobile app breaches: 31% of organizations are already facing legal consequences stemming from a mobile app security breach.
  • Increased budget allocations: 84% of organizations plan to increase their financial commitment to mobile app security.
  • Tighter integration of security into development: 46% are prioritizing the integration of security measures directly into the tools, processes, and workflows used by their development teams.


To read or download the report, please click this Link.

Methodology
The research was conducted by Enterprise Strategy Group (ESG) between January 8 and January 30, 2025. The survey included 315 qualified respondents from the United States (37%), the United Kingdom (32%), Brazil (16%), and Singapore (16%). Respondents were application development/software engineering (51%), cybersecurity (39%), and IT (9%) decision-makers influential in the purchase process for mobile application security technologies. Organizations represented both midmarket (250 to 999 employees, 31%) and enterprise (1,000+ employees, 69%) segments across multiple industries.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading