The Uptime Report Research
Industry research and data for MSP and MSSP operators
Original analysis of government datasets, regulatory records, and official industry data on the security, economics, and workforce of managed IT. Every figure is sourced, and every report ships with a free dataset.
Reports and data
Stage pipeline · Source: NRC, FERC, SEC, DOE, EIA, LBNL · Dataset included
Data Centers Using Nuclear Power: Every US Deal
One named campus has a live contract. 34.9 GW announced, 6.9 GW from running reactors, 0 new MW online. NRC status and docket for every project.
Legal matrix · Source: OFAC, FinCEN, statutes · Dataset included
Are Ransomware Payments Illegal? Law by Jurisdiction
Usually not, but NC, FL and TN ban public bodies and OFAC fines reach twice the payment. Legal matrix, reporting clocks, 5 confirmed payments, FinCEN totals.
Site ledger · Source: State WARN notices, SEC EDGAR · Dataset included
Intel Layoff Tracker
7,792 workers in WARN notices since 2024, 57% in Oregon; core staff 76,500 vs a 75,000 plan. Every notice by site and date, newest first.
Settlement tracker · Source: Court filings, Kroll, SEC, FCC, state AGs · Dataset included
AT&T Data Breach Settlement Payout Date
No payout date set. Kroll’s Oct. 30, 2026 update says not in 2026. Tier estimates $6.50 to $40, 4.92M claims, 804,381 declined for fraud, every incident dated.
Lane timeline · Source: SEC, MSRC, CISA, CSRB, DOJ · Dataset included
Microsoft Data Breach History: Three Lanes
4 confirmed intrusions of Microsoft since 2020, kept apart from customer attacks and exposures, with CISA directives and 40 KEV additions in 2026.
Model strip · Source: Anthropic status page · Dataset included
Claude Outage History
Every incident on Anthropic’s status page since March 2023: 382 in 2026 so far, by model, product and hour, with stated causes and a searchable ledger.
Comparison matrix · Source: Federal Register, Reginfo, eCFR · Dataset included
HIPAA Security Rule Changes 2026
None are final: HHS moved final action from May 2026 to July 2027. 19 provisions compared line by line with 90 FR 898, plus agenda dates and OCR’s $9B cost.
Trigger checklist · Source: FTC, Federal Register, WA and IN AGs · Dataset included
FTC Safeguards Rule Breach Notification
500 consumers, 30 days. The FTC got about 163 notices in 2025, 42% over its estimate, with no public list found. Requirement checklist and 13 enforcement matters.
Revenue ladder · Source: SEC filings, Steam Hardware Survey · Dataset included
AMD vs Nvidia Market Share Over Time
Steam has AMD at 18.7% vs Nvidia’s 72.9%, AMD’s best year since 2018, but AMD’s share of the pair’s data center revenue fell from 31.4% to 7.0%.
State map · Source: State WARN files, Amazon filings · Dataset included
Amazon Layoffs by State
18,584 workers in WARN notices in 8 states since Oct 2025, plus every site and date. Only 7,560 of Amazon’s 30,000 corporate cuts show up.
Dollars chart · Source: State WARN files, Oracle 10-K/10-Q · Dataset included
Oracle Layoffs by State
3,392 workers in WARN notices since Aug 2025, sites and dates, set against $2.8B in restructuring and a 9,000 drop in U.S. staff.
State ledger · Source: Local records, legislatures, GPO, CC BY trackers · Dataset included
Data Center Moratorium by State 2026
558 local moratoria active in 45 states, 91 bans, no state law signed. Every state’s actions with dates, terms and primary or press-only evidence grades.
Premium staircase · Source: DOL OFLC LCA filings, BLS, GSA · Dataset included
Cloud Architect vs Cloud Engineer Salary
Cloud architects get a $143,766 median on H-1B filings vs $127,200 for engineers, but the gap falls to 4.3% at the same wage level. AWS, Azure, consulting splits.
Title ladder · Source: DOL OFLC LCA filings, BLS, GSA · Dataset included
Entry Level DevOps Engineer Salary
DevOps Level I offers have a $91,520 median on H-1B filings, rising to $163,000 at Level IV. Level I filings fell 44% in the first weighted cap season.
Fiscal timeline · Source: State WARN files, SEC filings · Dataset included
Microsoft Layoff History Timeline
14,964 workers in WARN notices since 2014, in 8 of 13 years and every year since 2023. Every round dated, with a test of the July pattern and Redmond site data.
Year ledger · Source: State WARN files, SEC filings · Dataset included
Google Layoffs by Year
WARN notices peaked at 2,219 workers in 2023 and fell to 155 in 2025, while Alphabet headcount hit a record 204,757. Year table, California ledger, severance.
Country table · Source: StatCounter, DAP, Apple SEC filings · Dataset included
iPhone Market Share by Country 2026
Denmark 67.0%, US 52.0%, India 5.1% in October 2026. Full table with Samsung, plus why US federal traffic says 68%.
Support stack · Source: Google, Android bulletins, StatCounter · Dataset included
Android Market Share by Version 2026
Android 16 25.4%, 14 15.3%, 15 14.7%. 43.6% of devices run versions security bulletins no longer list; Android 14 may be next.
Employer leaderboard · Source: DOL OFLC LCA filings, BLS OEWS · Dataset included
AI Engineer vs ML Engineer Salary
ML engineer titles show a $187,741 median vs $150,000 for AI engineer titles on 4,220 H-1B filings, but the gap falls to about 3% in the same metro and wage level.
Experience ladder · Source: DOL OFLC LCA filings, BLS OEWS, BEA · Dataset included
Data Engineer Salary by Experience
Data engineer offers on 8,904 H-1B filings run from a $95,000 median at entry Level I to $163,342 at Level IV, with metro tables and no invented year bands.
Calendar heatmap · Source: OpenAI status page · Dataset included
OpenAI Outage History
Every incident on status.openai.com since 2021: record incident count in 2026, fewer full outages, ChatGPT outage hours, and what OpenAI’s write-ups blame.
State tiles · Source: FBI IC3 + Census · Dataset included
IC3 Report 2025: Ten Years of FBI Internet Crime Data
$20.877B reported in 2025, 14x 2016. Loss per complaint quadrupled, 60+ share hit 37%, and every state ranked per resident.
Bump chart · Source: GitHub Innovation Graph, Stack Overflow · Dataset included
Most Popular Programming Languages 2026
JavaScript leads GitHub in 178 of 182 economies; TypeScript climbed from 9th to 3rd and PowerShell pushers rose 187% in a year. Plus Stack Overflow 2026.
Taxonomy treemap · Source: AI Incident Database (CC BY-SA) · Dataset included
AI Incidents Statistics 2026
1,777 AI incidents analyzed: 463 dated 2025, not the 362 first reported. 52% involve deepfakes, and AI agent incidents are up 4x in 2026, like for like.
Revision tracker · Source: Census C30 + BLS · Dataset included
Data Center Construction Spending 2026
$85.0B annual rate in Aug 2026, up 73%; 63% of US office construction. Census first estimates ran 4.5% to 32% low in 9 of 9 archived releases.
Ratio dashboard · Source: SEC EDGAR filings · Dataset included
AI Capex 2026: Big Tech Spending Tracker
Microsoft, Alphabet, Amazon, Meta and Oracle spent $230.4B in Q3 2026, 116% of operating cash flow, plus $1.28T of signed leases not yet started.
Pipeline atlas · Source: NCES IPEDS, BLS EP · Dataset included
Computer Science Graduates Per Year
122,747 CS bachelor’s in 2023-24, 2.8x 2010-11, and 65% of 91,322 master’s to nonresidents. IPEDS by state and school, plus BLS openings.
Calendar countdown · Source: Microsoft Lifecycle + ESU pages · Dataset included
Microsoft End of Support 2026
69 Microsoft products and versions lose updates in 2026, 27 on Oct 13 alone. Only SQL Server 2016 has paid ESU, and Microsoft’s own list has .NET 9 wrong.
Percentile ladder · Source: BLS OEWS, EP, DOL OFLC · Dataset included
Data Scientist Salary 2026
Data scientists earn a $120,230 median, $185,080 in San Jose. Percentile ladder, H-1B entry-level offers, metro dot map, states, industries, real pay since 2021.
Tile grid · Source: BLS OEWS, EP, CPI, BEA · Dataset included
Web Developer Salary 2026
Web developers earn a $92,650 median, $43,330 below software developers, as jobs fell 21% since 2022. State tile map, paired pay bars, trend since 2012.
Ranked slope · Source: FCC BDC · Dataset included
Fiber Internet Availability by State 2026
55.9% of US homes can get fiber per FCC map data, up from 46.0% in June 2024. Rural fiber now beats rural cable. All 50 states and DC ranked.
Tile multiples · Source: FCC BDC · Dataset included
5G Coverage Map 2026
5G reaches 51.2% of US area outdoors per FCC data. T-Mobile 40.7%, AT&T 34.2%, Verizon 24.5%; Verizon’s 5G area grew 2.6x since mid-2024. Every state.
Agency waterfall · Source: OMB budget, DHS/CISA, enacted law · Dataset included
Cybersecurity Budget 2027: Federal, CISA and Benchmarks
Civilian federal cyber spending peaked at $12.98B in FY2024; the FY2027 request is 13% lower after inflation. CISA FY2019-27 and IT-share benchmarks.
Incident timeline · Source: SEC, HHS, state AGs, CISA · Dataset included
Cyber Attacks 2026: Every Major Incident
40 public-company 8-K attack disclosures, 612 HHS breaches and a 136-day median wait for victim notices, every 2026 incident linked to its primary filing.
Outage chronicle · Source: FCC PSHSB, DIRS, EB orders · Dataset included
Cell Phone Outage History: Verizon, AT&T, T-Mobile
6 of 11 FCC-documented wireless outages began with a network change. AT&T 2024 blocked 92M calls; Maria cut 95.2% of Puerto Rico cell sites. 466 DIRS reports.
Country map · Source: StatCounter, DAP, Apple SEC filings · Dataset included
Mac Market Share 2026
Macs ran 16.74% of desktops worldwide and 26.44% in the US in September 2026, no higher than in 2020, even as Apple’s Mac revenue grew 12.4%.
Stream chart · Source: StatCounter Global Stats + DAP · Dataset included
Browser Market Share 2026
Chrome had 66.45% of page views in September 2026, Safari 18.20% (30.35% in the US) and Edge a record 14.64% on desktops. Data since 2009.
Stacked treemap · Source: NIST NVD / CISA KEV / WordPress.org · Dataset included
WordPress Vulnerabilities: 39,265 CVEs Analyzed
10,943 WordPress CVEs so far in 2026, up 20%. 90% hit plugins, 3 core flaws reached CISA KEV, and NIST has analyzed only 50 of them.
Timeline checker · Source: State legislatures, US Census · Dataset included
State Privacy Laws 2026
All 23 US state comprehensive privacy laws compared from enacted text: thresholds, cure periods, opt-out rules, penalties, and an applicability checker.
Law tracker · Source: State legislatures, Federal Register, court dockets · Dataset included
State AI Laws 2026: Tracker of 131 Enacted Laws
131 enacted state AI laws in 36 states, each checked on official bill records. Colorado replaced its AI Act; 25 business laws start by Oct 2027.
Authorization census · Source: GSA FedRAMP marketplace · Dataset included
FedRAMP Statistics 2026
517 authorized cloud services, 140 authorized in 2025, and the top 10% of products hold 55% of agency authorizations. GSA marketplace data.
Exploitation ratio · Source: NIST NVD + CISA KEV · Dataset included
Hypervisor Vulnerabilities
ESXi and vCenter have 9.5 exploited flaws per 100 CVEs; Xen, QEMU and VirtualBox, with 7x the CVEs, have none. NVD and CISA KEV.
Filing sample · Source: SEC EDGAR 10-K filings · Dataset included
Item 1C Cybersecurity Disclosures
A random sample of 600 2025 10-Ks: 27% name a CISO, 50% give oversight to the audit committee, 90% cite outside firms.
Measured scan · Source: DNS scan · Dataset included
DMARC Adoption Statistics 2026
A DNS scan of 15,000 domains: 61% of top-10k mail domains enforce DMARC, but only 31% in the long tail. Full dataset.
Exposure timeline · Source: CISA KEV · Dataset included
RMM Vulnerabilities and Remote Access Flaws
VPN gateways are listed in CISA KEV a median 1 day after disclosure; half of remote support flaws feed ransomware.
Price ledger · Source: Microsoft announcements + BLS CPI-U · Dataset included
Microsoft 365 Price Increase 2026: Every Change Since 2011
July 2026 raised 18 of 22 Microsoft 365 plans. Business Basic is up 40% since 2022 vs 19% inflation, yet no plan beats inflation since launch.
Measured census · Source: Majestic Million, SEC, FDIC, CISA .gov + DNS · Dataset included
Microsoft 365 Market Share 2026: A DNS Census
Microsoft 365 handles email for 71% of US public companies and 77% of banks vs 12% and 2% for Google. Top 100K sites: 32% vs 27%.
Anatomy timeline · Source: CrowdStrike PIR/RCA, BTS, SEC EDGAR · Dataset included
CrowdStrike Outage: Minute-by-Minute Timeline and Costs
A 78-minute bad update, 8.5M PCs, 10.8 days to 99% recovery. Delta booked $550M; only 7 of 37 SEC filers that discussed it put a number on the impact.
Wording ladder · Source: Census HTOPS + Gallup, RPS, Pew · Dataset included
AI at Work Statistics 2026
38.6% of US workers used AI at work last week and 55.6% ever (Census, March 2026). Gallup, St. Louis Fed and Pew surveys reconciled by wording.
Price-load scatter · Source: EIA, PJM, Independent Market Monitor · Dataset included
Data Center Electricity Prices 2026: The PJM Test
PJM home power prices rose 11.3% in a year vs 5.8% elsewhere, but states with faster data center load growth saw smaller rises. EIA prices for all 50 states.
Index dashboard · Source: BLS CPI, PPI, MXP + Census trade · Dataset included
Computer Prices 2026
CPI for computers rose 9.7% in a year, a record since 1997; laptop PPI jumped 17.8% in July. Laptop import values up 23% while duty paid fell to 0.11%.
Two-role comparison · Source: BLS OEWS, BEA, GSA · Dataset included
Network Engineer Salary 2026
Network architects (engineers) earn a $134,050 median, $34,920 above sysadmins; telecom pays $111,690. States, metros, industries, outlook, GSA rates.
Industry wall · Source: BLS OEWS, BEA, GSA, OPM · Dataset included
IT Manager Salary 2026
IT managers earn a $175,140 median; BLS now publishes the 90th percentile, $297,510. Pay for 64 industries, cost-adjusted states, metros, GSA and OPM rates.
Price ladder · Source: FCC URS, BLS CPI · Dataset included
Average Internet Bill 2026
The median US home internet plan lists at $89.95 a month, mean $98.49, per FCC rate data; price per Mbps fell 90% since 2017. Prices by speed, technology and state.
Long-run strip · Source: StatCounter + US v. Google court record · Dataset included
Search Engine Market Share 2026
Google had 89.94% of search referrals in September 2026 after a record 2.82-point two-year fall that went to Bing and Yandex. Data since 2009 by country.
Share race · Source: StatCounter Global Stats + OpenAI · Dataset included
ChatGPT Market Share 2026: 80.5% of AI Referrals
ChatGPT sent 80.47% of AI chatbot referrals in September 2026, and Gemini rose from 2.82% to 10.94%. Why other trackers say 46% to 57%.
Blast radius · Source: Google Cloud Service Health + Internet Archive · Dataset included
Google Cloud Outage History: 1,472 Incidents Mapped
Google Cloud’s public incident history rebuilt from its own feed: 50 of 86 major incidents began with a Google change; the June 2025 outage hit 55 products.
PIR casebook · Source: Microsoft Azure status history + Internet Archive · Dataset included
Azure Outage History: Every Microsoft PIR, 2016 to 2026
219 Azure post incident reviews read and coded: 58% began with Microsoft’s own change. Power events rising, 42% name no single region.
Water balance · Source: Google, Microsoft, Meta, Amazon + LBNL, USDM · Dataset included
Data Center Water Usage 2026: Every Disclosed Site
Google’s data centers consumed 10.5B gallons in 2025, doubling with power since 2022, while Microsoft, Meta and AWS cut water per kWh. 77 sites with drought data.
Energy ledger · Source: Google, Microsoft, Meta reports + LBNL, IEA · Dataset included
AI Energy Consumption 2026: The Big Tech Energy Ledger
Google, Microsoft and Meta used 80.0 TWh in 2024, up 142% since 2020, while US electricity rose 6.6%. Company reports, LBNL and IEA data, per-prompt claims.
Cycle quadrant · Source: Micron, Sandisk, WD, Seagate filings, BLS · Dataset included
SSD Prices 2026: The NAND Cycle
Micron NAND prices rose nearly 5x in a year, Sandisk’s price per GB rose 248%, and the BLS storage PPI rose 87%, a record.
Price tracker · Source: Micron SEC filings, SK hynix, BLS · Dataset included
RAM Prices 2026: The Memory Price Shock
Micron’s DRAM prices rose about 3.8x in a year (about 180% in fiscal 2026) as import prices jumped 36%, while the U.S. chip PPI fell.
Salary atlas · Source: BLS OEWS, BEA, DOL OFLC · Dataset included
Software Engineer Salary 2026
Software developers earn a $135,980 median, $213,110 in San Jose. Metro atlas, cost-adjusted states, industries, and H-1B offers vs local BLS pay.
State league · Source: FTC Consumer Sentinel · Dataset included
Identity Theft Statistics 2026: Every State Ranked
1.36M FTC identity theft reports in 2025, up 20%. Credit card fraud grew fastest (+33%); Florida leads at 728 per 100K. All 50 states and DC.
Loss funnel · Source: FTC Consumer Sentinel · Dataset included
Scam Statistics 2026: The FTC Loss Funnel
Americans reported $16.1B lost to fraud in 2025, up 25%, from 1.12M reports with a loss. Funnel by contact method, payment method and age.
Registry ledger · Source: ICANN registry reports + Verisign · Dataset included
Domain Name Statistics 2026
401.6M domains registered in mid-2026, up 8.1%. New gTLDs drove 54% of gTLD growth, and 25 of the 75 largest gTLDs renew under 20% of names.
Number reconciliation · Source: StatCounter, DAP, Steam · Dataset included
Linux Market Share 2026: Which Number Is Real?
Linux was 4.54% of desktops worldwide in September 2026. The 7% to 17% headlines came from a summer spike; every figure traced to its source.
Availability scorecard · Source: GitHub Availability Reports + githubstatus.com · Dataset included
GitHub Outages: Every Availability Report, 2020 to 2026
184 incidents from 75 GitHub Availability Reports: 52 in Jan to Sep 2026, up from 22 a year earlier, with 157 hours of degraded service.
Post-mortem anthology · Source: Cloudflare post-mortems + status API · Dataset included
Cloudflare Outage History: Every Post-Mortem, 2012 to 2026
40 Cloudflare post-mortems read and coded: 27 began with Cloudflare’s own change, including all 8 global core-network outages. Plus 6,534 status incidents.
Lottery league · Source: USCIS, DOL OFLC, BLS OEWS · Dataset included
H-1B Statistics 2026
Lottery entries fell 55% in two years and 14 IT services firms took 8% of FY2025 approvals, down from 26%. Top 30 employers, denials, and wages.
Readiness tracker · Source: Federal Register, DoW CIO, Cyber AB · Dataset included
CMMC Certification Statistics 2026: Demand vs Capacity
DoD expects 118,289 contractors to need Level 2 certification; about 2,000 have one. Phase II is suspended, and 110 C3PAOs can’t meet DoD’s own demand.
Bottom-up build · Source: Census Economic Census + QSS · Dataset included
MSP Market Size 2026: A Bottom-Up Census Count
US managed IT services were about $140B in 2025, growing 7.5% a year, built from Census product lines. Why vendor reports disagree by 2x.
Attribution ledger · Source: Challenger, Gray & Christmas + SEC EDGAR · Dataset included
AI Layoffs 2026: The Attribution Ledger
Employers cited AI for 120,136 U.S. job cuts Jan to Sep 2026, 21% of all cuts, then the monthly count fell 90%. Plus 37 filings that say so.
Pay histogram · Source: BLS OEWS, BEA, GSA · Dataset included
Help Desk Salary 2026
Help desk pays $29.74 an hour at the median ($19.70 to $48.34 from 10th to 90th). Metro top and bottom 15, MSPs vs in-house IT, GSA tier rates.
Pay ladder · Source: BLS OEWS, BEA, GSA, OPM · Dataset included
Cybersecurity Salary 2026
Security analysts earn a $129,180 median, from $75,090 at the 10th percentile to $199,850 at the 90th. Ladder, cost-adjusted states, industries, GSA rates.
Vendor scorecard · Source: CISA KEV + NIST NVD · Dataset included
VPN Vulnerabilities by Vendor
1 in 15 VPN gateway CVEs since 2020 is in CISA KEV, 14x the rate for all CVEs. 14 vendors scored, 42% of their KEV entries flagged for ransomware.
Orbital census · Source: GCAT, SEC, FCC BDC · Dataset included
Starlink Statistics 2026
11,152 Starlink satellites in orbit, 1,841 reentered, 12.0M subscribers per SEC filings, and FCC 100/20 coverage at 99.7% of US homes.
Registry cross-reference · Source: CalPrivacy, Texas SOS, Oregon DCBS · Dataset included
Data Brokers List 2026
728 data brokers across the California, Texas and Oregon registries, only 260 in all three. 19% of California brokers collect precise geolocation.
Share bars · Source: BLS CPS tables 11 and 39 · Dataset included
Women in Tech Statistics 2026
Women held 27.5% of U.S. computer and math jobs in 2025, barely up from 25.0% in 2011, and 15.9% of security analyst jobs. Share and pay by role.
Jobless gauge · Source: BLS CPS + New York Fed · Dataset included
IT Unemployment Rate 2026
Tech unemployment averaged 3.33% Jan to Sep 2026 vs 4.32% nationally: still lower, but the narrowest gap since 2003. Jobs, grads by major.
Gap atlas · Source: Census ACS, NTIA, FCC · Dataset included
Internet Access Statistics 2026
8.9 million US households had no home internet subscription in 2024. Gaps by state, income, age, race, rural areas and disability, and the ACP test.
Countdown board · Source: Microsoft Lifecycle + MSRC · Dataset included
SQL Server End of Life
Every SQL Server end of life date, 2008 to 2025. Since 2016 support ended, Microsoft listed 0 of 45 new 2017 CVEs for 2016, and none for 2014 since 2024.
Survey reconciler · Source: U.S. Census Bureau BTOS · Dataset included
Small Business AI Adoption 2026
23.8% of US employer businesses used AI in the last two weeks, against 58% to 89% in private surveys. Census BTOS by firm size, sector and state.
Index race · Source: Indeed Hiring Lab · Dataset included
Tech Job Postings 2026: Indeed Index by Role
Software postings are up 28% from the May 2025 low but 22% below 2020. IT support, at 69.8, is now 3rd weakest of 47 sectors.
Support matrix · Source: 2FA Directory + Passkeys Directory · Dataset included
MFA Statistics 2026
2,571 services checked: 73.9% offer MFA, but only 10.9% support security keys or passkeys, and 61% of those still accept SMS codes.
Lab notebook · Source: Have I Been Pwned Pwned Passwords · Dataset included
Password Statistics 2026
92% of 634 passwords built to pass complexity rules were already in Have I Been Pwned, while 0 of 1,200 random passphrases were.
Group dossiers · Source: RansomLook + CISA · Dataset included
Ransomware Groups 2026: The Most Active Gangs, Ranked
Qilin leads with 1,023 leak-site victims and The Gentlemen, first seen September 2025, is second. 161 groups active, 84 new, with top-10 dossiers.
Monthly pulse · Source: RansomLook · Dataset included
Ransomware Statistics 2026
8,009 leak-site victims Jan to Sep 2026, up 33% on 2025, with a record 1,222 in August. Groups under a year old post nearly half.
Calendar heatmap · Source: OpenSSF / OSV · Dataset included
Malicious npm Packages: 222,159 OpenSSF Reports Analyzed
63% of malicious npm reports were one tea.xyz token-farming flood. 19 records hit top-1,000 packages like chalk, axios, and keyv. Typosquats are 0.4%.
Crossover chart · Source: StatCounter Global Stats · Dataset included
Windows 11 Market Share 2026
Windows 11 hit 71.5% of Windows desktop views in September 2026; Windows 10 still holds 27.8% a year after support ended.
Earnings race · Source: SEC EDGAR filings · Dataset included
Cloud Computing Statistics 2026
AWS, Microsoft, Google and Oracle cloud revenue rose 43% to $116.2B in Q2 2026, while capex at five tech giants grew 87%. From SEC filings.
Incident log · Source: AWS Post-Event Summaries · Dataset included
AWS Outage History: Every Major Event, 2011 to 2026
18 AWS Post-Event Summaries since 2011: 12 hit us-east-1 and 13 were software, not power. Plus the 2026 Middle East region disruption.
Live tracker · Source: State WARN notices (CA, WA, NY) · Dataset included
Tech Layoffs 2026: Live WARN Notice Tracker
23,178 tech workers in CA, WA and NY WARN notices Jan to Sep 2026, double 2025, while other layoffs fell 23%. Meta and Amazon lead.
Hex atlas · Source: PNNL, Census, EIA · Dataset included
Data Centers by State 2026
Virginia has 239 of 1,207 mapped data center sites. A league table and hex map with Census industry jobs and EIA commercial power growth for every state.
Energy dashboard · Source: LBNL, EIA, Census · Dataset included
Data Center Statistics 2026
US data centers used 4.4% of the country’s electricity in 2023, and construction hit an $85B annual rate in August 2026. Federal power, spending and jobs data.
Nines ladder · Source: Provider SLA documents · Dataset included
99.9% Uptime: Downtime Calculator and Provider SLAs
99.9% uptime allows 43.8 minutes of downtime a month. 35 provider SLAs read line by line: a full-day outage earns a median 25% credit.
Reliability scatter · Source: EIA Form EIA-861 + DOE OE-417 · Dataset included
Power Outage Statistics by State
U.S. customers lost 7.0 hours of power a year in 2021 to 2025, up 46% on 2013 to 2017. Major storms caused 91% of the rise. All 50 states and DC ranked.
Price ticker · Source: SEC EDGAR XBRL · Dataset included
Cost of Downtime: Revenue at Stake Per Hour
The median US-listed company books $96K of revenue an hour. Industry medians, the top 100, filed outage costs, and a calculator.
Fact sheet · Source: FBI, CISA, NIST, HHS and more · Dataset included
Cybersecurity Statistics 2026
70 cybersecurity statistics, each traced to its primary source: CVEs up 103%, KEV additions up 30%, and most 2026 federal patch deadlines now 3 days.
Market scorecard · Source: NAIC Cyber Supplement · Dataset included
Cyber Insurance Statistics: 10 Years of NAIC Data
U.S. cyber premiums fell 7.1% to $9.14B in 2024, the first drop on record, as top-20 loss ratios rose again. Top insurers, claims, policies.
Heatmap atlas · Source: BLS CPS and ATUS · Dataset included
Remote Work Statistics 2026
22.1% of workers teleworked Jan to Sep 2026, barely below 2024. Federal telework halved after the return-to-office memo; private telework barely moved.
Industry slopegraph · Source: BEA Fixed Assets and GDP by Industry · Dataset included
IT Spending by Industry
U.S. firms invested $1.19T in IT in 2025, 2.53% of output. Information leads at 14.3%; finance grew fastest, +179% in ten years.
Lifecycle Gantt · Source: Microsoft Lifecycle + MSRC · Dataset included
Windows Server End of Life
Every Windows Server end of life date, 2008 to 2025, plus 1,939 CVEs in 2012/2012 R2 since 2023 fixed only for ESU buyers. 2016 support ends Jan 12, 2027.
Vendor strip · Source: Google Project Zero · Dataset included
Zero-Day Statistics: 412 Exploits by Vendor
Every zero-day in Google Project Zero’s tracker since 2014. Microsoft leads with 166, browser share fell to 21%, and edge devices now top new KEV entries.
Evidence board · Source: APWG, FBI IC3, HHS OCR · Dataset included
Phishing Statistics 2026: Four Primary Sources
APWG saw 3.8M phishing sites in 2025, up 33% on 2021, while FBI phishing complaints fell 44%. BEC losses hit $3.05B.
Growth race · Source: U.S. Census Bureau QSS · Dataset included
IT Services Industry Growth 2026
IT services revenue up 3.2% a year while hosting grew 20.4% and software 15.0%. Government is the faster-growing customer.
Rate card · Source: GSA CALC+ · Dataset included
IT Hourly Rates 2026: What Contracts Pay by Role
Hourly rates for help desk, network, sysadmin, security, and cloud roles from thousands of GSA contract labor categories.
Patch ledger · Source: Microsoft MSRC · Dataset included
Patch Tuesday Statistics 2026
Microsoft fixed 2,859 of its own CVEs from January to September 2026, triple 2025, while exploited zero-days held flat.
Continuity risk · Source: FEMA OpenFEMA · Dataset included
Disaster Declarations by State
2024 set a record with 100 major disaster declarations, and 85% of US counties had at least one in a decade.
Telecom data · Source: FCC Form 477 · Dataset included
VoIP Statistics 2026
VoIP is 83.6% of US business wireline phone connections, up from 3.2% in 2008. Trends and state data.
Breach anatomy · Source: Have I Been Pwned · Dataset included
Data Breach Statistics 2026: Inside 980 Breaches
13.2 billion accounts in Have I Been Pwned. Passwords now appear in only 19% of 2026 additions, while phone numbers reach 62%.
Metro leaderboard · Source: BLS OEWS metro data · Dataset included
Highest Paying Cities for IT Jobs 2026
Metro leaderboards for security analysts, sysadmins, network support, and help desk, with a local pay multiple.
Industry census · Source: BLS QCEW · Dataset included
MSP Industry Statistics 2026
Managed IT establishments up 10.6% since 2023 while jobs fell 5.1% and weekly pay rose 14.3%, with a state league table.
Spending ledger · Source: USAspending.gov · Dataset included
Federal IT Spending 2026
Civilian IT services obligations hit a record $43.9B. Why the raw FY2026 total misleads, and the like-for-like number.
Technique matrix · Source: CISA · Dataset included
Ransomware Initial Access Vectors: 25 CISA Advisories
Every #StopRansomware advisory coded by entry technique. Public-facing app exploits appear in 73%, phishing in 59%.
Chart essay · Source: NIST NVD · Dataset included
CVE Statistics 2026: Vulnerabilities Published Per Year
74,838 CVEs published January to September 2026, more than double the same period of 2025, while NIST now scores only about 1 in 10 itself.
Disclosure tracker · Source: SEC EDGAR · Dataset included
SEC Cybersecurity Incident Disclosures: Every Item 1.05 Filing
58 material-incident disclosures by 57 public companies since December 2023, by quarter, industry, and state.
Breach anatomy · Source: Washington Attorney General · Dataset included
How Long Do Companies Take to Report a Data Breach?
1,675 Washington notices: the median time from discovery to notice hit 134 days in 2025, driven by ransomware cases.
Labor dashboard · Source: BLS JOLTS · Dataset included
The Tech Job Market in 2026
Information sector openings down 55% from the 2022 peak, quits and hires below the national rate, layoffs rising.
Pay matrix · Source: BLS OEWS · Dataset included
IT Salaries by State 2026
Median pay for security analysts, sysadmins, network support, and help desk in all 50 states and DC.
Enforcement ledger · Source: HHS Office for Civil Rights · Dataset included
HIPAA Enforcement Tracker: Every OCR Penalty and Settlement
A verified ledger of 164 OCR actions, updated monthly. 2025 set a record with 21, and the median penalty fell 85% from 2016 to 2019 levels.
State atlas · Source: U.S. Census Bureau · Dataset included
IT Services Firms by State: A Census Atlas
145,813 computer services establishments mapped by state, with pay and density. MSP-type firms fell 7.2% in one year.
Catalog analysis · Source: CISA · Dataset included
Known Exploited Vulnerabilities: An Analysis of the CISA KEV Catalog
All 1,733 KEV entries analyzed. 2026 additions are running 32% ahead of 2025, and edge devices are overrepresented in ransomware.
Scorecard · Source: HHS OCR breach portal · Dataset included
Healthcare Data Breach Report 2026
802 large breaches and 140 million individuals affected in 2025, with 80.9% caused by hacking.
Trend brief · Source: FBI IC3 · Dataset included
Ransomware Reported to the FBI: A Five-Year Trend
Complaints reached a four-year high in 2025. Why reported losses understate the real cost.
Data observatory · Source: U.S. BLS · Dataset included
IT and Cybersecurity Jobs Outlook 2026
Security roles projected to grow 21% while IT support declines. What BLS data shows.
Cost estimator · Source: Federal Register, eCFR, DoW CIO, NIST · Dataset included
CMMC Level 2 Assessment Cost: DoD Figures vs Market
Estimator built on DoD’s unit figures: $37,196 to $117,768 over 3 years, C3PAO fee $31,234 to $52,056, market claims compared, Phase 2 suspended.
Cost calculator · Source: Azure Retail Prices API, Microsoft Learn · Dataset included
SQL Server 2016 ESU Cost
$0.19 or $0.74 per core-hour, no free Azure tier for 2016. Calculator, 4 to 64-core scenarios, and the 525% claim traced back.
Exploit timeline · Source: ConnectWise, NIST NVD, CISA KEV · Dataset included
ConnectWise ScreenConnect Vulnerabilities
21 ScreenConnect CVEs, 4 in CISA KEV, bulletin-to-KEV gaps of 3 to 799 days, cloud versus on-premises duties, and a version lookup. Be on 26.6.5 or later.
Product grid · Source: SonicWall PSIRT, NIST NVD, CISA KEV · Dataset included
SonicWall Vulnerabilities 2026
42 SonicWall CVEs in 2026, up 56% on the same months of 2025. All 4 KEV additions hit SMA 1000 with 3 day deadlines. Full dated list, product grid and SMA 100 facts.
Practice tracker · Source: HHS OCR breach portal, state AG lists · Dataset included
Dental Practice Data Breaches 2026
39 HHS dental reports by Oct 9, up from 18, split by practice, group, vendor and insurer, with a state map and 12 OCR actions.
State tiles · Source: State WARN files, Salesforce SEC filings · Dataset included
Salesforce Layoffs by State
2,180 workers in WARN notices, found only in California and Washington, with sites and dates, set against $3.04B in restructuring and 83,334 staff.
Headcount staircase · Source: SEC filings, state WARN files · Dataset included
Dell Layoffs by Year
133,000 staff in FY2023 to 97,000 in FY2026, $2.44B in severance, one Dell WARN notice found. Year table, notice calendar, VMware separated.
Patch timeline · Source: Apple, CISA KEV · Dataset included
Apple Zero Days 2026 List
Apple flagged 2 CVEs in 2026 against 7 in the same window of 2025. CISA added 10 Apple flaws to KEV, 8 with no Apple sentence. Dates, deadlines, backports.
Component stack · Source: Google bulletins, Samsung, CISA KEV · Dataset included
Android Zero Days 2026
Google flagged 3 CVEs in 2026 against 8 in the same window of 2025. 34% of flags since 2021 sit in chipset code. Samsung and Pixel patch timing from their bulletins.
Framework grid · Source: State legislatures, enacted text · Dataset included
Safe Harbor Cybersecurity Laws by State
10 states limit breach liability, and only 5 reward named frameworks. Enacted-text comparison, framework-by-state grid, vetoed bills and a client checker.
Blast radius · Source: State AGs, SEC, FTC, court filings · Dataset included
Auto Dealership Data Breach 2026 Tracker
10 dealers on state AG lists state 17,914 people, against 5.84M at one vendor, 700Credit. Dated rows, time to notice, CDK filings and Safeguards duties.
Dollars spine · Source: SEC filings, state WARN files · Dataset included
IBM Layoffs by Year
IBM reports dollars, not layoffs: $7.9B in workforce charges since 2015, headcount by year, and every WARN row we could read.
Quarterly heat · Source: SEC filings, state WARN files · Dataset included
Meta Layoffs by Year
Meta headcount by quarter, WARN notices by site and round, severance charges, and team mix from its Washington letters. Updated November 2026.
Size lens · Source: State AG lists, ABA, FBI · Dataset included
Law Firm Data Breaches 2026
82 firms on six state AG lists as of Nov. 5, up 15% to 29% on 2025. Median 2,408 people; 9 notices name social engineering. Dated list and ABA duty table.
Tax calendar · Source: State AG lists, IRS, 16 CFR 314 · Dataset included
Accounting Firm Data Breach 2026
45 firms on six state AG lists. Notices show no tax-season spike, but 41% of breaches since 2017 start Feb to Apr vs 27% for all filers. WISP checklist.
Budget grid · Source: Slack status site, SEC filings · Dataset included
Slack Outage History
Every Slack status entry since 2013: 1,459 by service and year, no Outage label since November 2025, and the 99.99% SLA that left the public page.
Title split · Source: DOL OFLC LCA filings, BLS OEWS, GSA · Dataset included
IT Director vs IT Manager Salary
IT director titles show a $200,250 median on H-1B filings vs $172,000 for IT managers, but the gap falls to 3% at the same wage level and metro.
Offer strip · Source: DOL OFLC LCA filings, BLS OEWS, GSA · Dataset included
Penetration Tester Salary Entry Level
Just 17 H-1B Level I offers name pen testing since 2020, at an $85,550 median; Level IV reaches $179,916. Climb ladder, SOC analyst comparison, every offer dated.
Gap waterfall · Source: DOL OFLC LCA filings, BLS OEWS · Dataset included
Site Reliability Engineer vs DevOps Salary
SRE titles show a $146,952 median vs $115,000 for DevOps on H-1B filings, but SREs sit 3.7% lower at the same employer, level and metro.
Career slope · Source: DOL OFLC LCA filings, BLS OEWS · Dataset included
Solutions Architect vs Software Engineer Salary
Engineers lead at every DOL wage level on H-1B filings, by $30,650 at Level IV, yet architects lead as filed at consulting firms and end customers.
Asset gradient · Source: FDIC BankFind, DNS · Dataset included
Bank DMARC Adoption 2026: 4,118 US Banks Measured
DNS scan of every FDIC-insured bank: 72% enforce DMARC, from 55% under $100M to 100% over $100B. By asset size, state, charter and mail provider.
Policy funnel · Source: SBA Small Business Search, DNS · Dataset included
MSP Email Security: Do MSPs Use DMARC?
DNS check of 1,430 MSP mail domains: 40% enforce DMARC, 34% have no valid record, 64% meet the Google/Yahoo SPF+DMARC floor. By provider and state.
State tiles · Source: NCES CCD, DNS census · Dataset included
Google Workspace vs Microsoft 365 in US Schools
DNS census of 10,591 US school districts: Google runs email for 76%, Microsoft 15%. State-by-state map, size and locale splits, DMARC by provider.
Agent heatmap · Source: Chrome UX Report, robots.txt, vendor docs · Dataset included
Block GPTBot: Who Does It, Top 10,000 Sites
16.7% of Chrome’s top 10,000 sites block GPTBot by name, only 4.1% OAI-SearchBot. Heatmap of 22 AI agents, training vs search split, llms.txt at 8.5%.
Price strip · Source: MSP websites, SBA Small Business Search · Dataset included
How Much Do MSPs Charge Per User?
Only 6 of 1,310 MSP websites post a per-user price ($38 to $279, median $118); 0.8% post any price. Disclosure by state from SBA-listed MSPs.
Population bars · Source: Own scan; CISA dotgov, SEC EDGAR, CrUX · Dataset included
security.txt Adoption 2026: Federal vs Corporate
Only 2.3% of federal .gov domains and 3.9% of the 500 largest US companies serve a valid security.txt; 46% of federal files expired. Scan of 4,155 domains.
State choropleth · Source: CISA .gov registry, DNS, Census · Dataset included
Government Email Security 2026: DMARC by State
A DNS scan of 15,485 .gov domains: 40% of city and county mail domains enforce DMARC vs 88% of federal ones. DNSSEC: 7% vs 85%. Every state ranked.
Asset ladder · Source: NCUA Call Report, DNS census · Dataset included
Credit Union Cybersecurity Statistics 2026
DMARC, SPF, DNSSEC, HTTPS and HSTS measured for 3,730 federally insured credit unions by asset band, state and mail provider. 55% do not enforce DMARC.
Scorecard grid · Source: CISA dotgov-data, Uptime Report scan · Dataset included
Government Website Security 2026: State and Local .gov Scan
Original scan of 9,196 state and local .gov homepages: 45% meet the federal HSTS bar vs 91% of federal sites, 18% still accept TLS 1.0/1.1. Scores by state.
Advisory ledger · Source: Citrix bulletins, NVD, CISA KEV · Dataset included
Citrix NetScaler Vulnerabilities 2026
Every NetScaler ADC and Gateway CVE of 2026 (48 in 7 bulletins), KEV status, days to listing, minimum fixed builds by branch and a build checker.
Product heatmap · Source: FortiGuard PSIRT, NVD, CISA KEV · Dataset included
Fortinet Vulnerabilities 2026
223 Fortinet CVEs to Nov 12, 99 on one day after AI-assisted testing. 9 added to CISA KEV, a median 66 days after the fix. Heatmap by product and month.
Two ledgers · Source: Okta advisories, NVD, CISA KEV, SEC · Dataset included
Okta Vulnerabilities: Every CVE and Incident
All 72 Okta and Auth0 CVEs with fixed versions and KEV status, kept separate from the 4 security incidents Okta itself disclosed, as of November 2026.
Version matrix · Source: Veeam KB, NVD, CISA KEV · Dataset included
Veeam Vulnerabilities
120 Veeam CVEs joined to CISA KEV: all 4 exploited are ransomware-linked. Fixed-build matrix for VBR 11 to 13.1, as of Nov 12, 2026.
Countdown ledger · Source: Broadcom KBs, NVD, CVE.org, CISA KEV · Dataset included
vSphere 8 End of Support: Oct 11, 2027
Broadcom ends vSphere 8 general support Oct 11, 2027. 10 of 19 exploited ESXi/vCenter CVEs hit 8.0; 0 of 5 CVEs since 7.0’s cutoff list 7.0.
Status board · Source: Microsoft Lifecycle, MSRC, CISA KEV · Dataset included
Office 2019 End of Life
Support ended Oct 14, 2025. Microsoft has since listed 352 Office 2019 flaws; volume copies got 13 monthly fix builds, retail copies none, and Mac went read-only.
Component leaderboard · Source: Zoom status page · Dataset included
Zoom Outage History
Every Zoom status-page incident since 2015: 225 in 2026 to Nov 11 (+53%), Contact Center and Phone ahead of Meetings, plus a clock chart of when Zoom breaks.
Licensing timeline · Source: Broadcom, SEC EDGAR, EU General Court · Dataset included
VMware Price Increase Broadcom Timeline
Every dated Broadcom VMware licensing and partner change since Nov 2023, sourced to Broadcom and EU court documents, with SEC software revenue up 4.4x.
Head-to-head ledger · Source: DOL OFLC LCA, BLS OEWS · Dataset included
Data Engineer vs Data Analyst Salary
Data engineers get a $28,500 (29.5%) higher median offer than data analysts in 13,211 H-1B filings; 11.3% at the same employer and level.
Tile ladder · Source: BLS OEWS, DOL LCA · Dataset included
Network Engineer vs System Administrator Salary
Network engineers out-earn sysadmins by $34,920 (BLS, May 2025), from $6,550 in Hawaii to $64,160 in Washington. Tile map, metros, H-1B title ladder.
Wage staircase · Source: DOL OFLC LCA, BLS OEWS · Dataset included
Security Analyst vs Security Engineer Salary
H-1B filings put security engineers at $145,000 vs analysts at $106,995. The gap by wage level, state and industry, and why it nearly vanishes at the same employer.
Metro scatter · Source: DOL OFLC LCA, BLS · Dataset included
Cloud Engineer vs DevOps Engineer Salary
Cloud engineers get a $127,200 median on H-1B filings vs $115,000 for DevOps, but the gap is under $100 in Dallas and New York. 15 metros, employers, titles.
Dual-axis timeline · Source: SEC EDGAR, CA EDD WARN · Dataset included
Cisco Layoffs by Year
Every Cisco restructuring plan from SEC filings: $7.9B charged since 2011, staff down 8,000 in two years, and California WARN notices reconciled.
Price staircase · Source: Adobe, Internet Archive, BLS CPI-U · Dataset included
Adobe Price Increase History: Every Change, 2012 to 2026
Creative Cloud All Apps went $49.99 to $69.99 (+40%) since 2012, +32% since 2022 vs 19% inflation. Every Adobe step dated from Adobe’s own pages.
How we source our research
We work from primary sources: federal statistical agencies (the Bureau of Labor Statistics, the Census Bureau), federal incident and enforcement records (the FBI Internet Crime Complaint Center, the HHS Office for Civil Rights, CISA), and official industry data. Where we can, we analyze the raw dataset ourselves rather than repeating published summaries. Every factual claim links to a source we opened, and anything we could not verify is excluded or labeled.
Using our data
Journalists, analysts, and operators are welcome to cite and reuse our datasets under a Creative Commons Attribution 4.0 license. Each report includes a ready-made citation and a CSV download.