ThreatMate Research

Research from the real SMB attack surface.

Data and analysis from professionally managed SMB environments, built to help MSPs understand where security is improving, where gaps repeat, and what deserves attention next.

Featured report

2026 · Edition One

The State of the SMB Attack Surface

What does security actually look like across a real MSP-managed SMB base? Measured security data from a research sample of 1,692 professionally managed SMB environments, across vulnerabilities, identity, email and domain security, endpoint configuration, internet exposure and live testing.

91.5%of endpoint-covered environments had at least one vulnerability on CISA's Known Exploited Vulnerabilities catalogue. (n = 1,090 endpoint-covered environments)

Explore the report

The collection

Built to grow with each edition.

Edition One sets the baseline. Everything that follows is designed to be compared against it.

Annual editions

The State of the SMB Attack Surface re-runs the same core measures each year so movement can be tracked.

Edition One available

Research briefs

Shorter deep dives into a single surface, cohort or finding.

Coming with Edition One follow-ups

Benchmark updates

Interim reads on the core measures between editions.

Following the Edition One baseline