The Uptime Report Research
Industry research and data for MSP and MSSP operators
Original analysis of government datasets, regulatory records, and official industry data on the security, economics, and workforce of managed IT. Every figure is sourced, and every report ships with a free dataset.
Reports and data
Authorization census · Source: GSA FedRAMP marketplace · Dataset included
FedRAMP Statistics 2026
517 authorized cloud services, 140 authorized in 2025, and the top 10% of products hold 55% of agency authorizations. GSA marketplace data.
Exploitation ratio · Source: NIST NVD + CISA KEV · Dataset included
Hypervisor Vulnerabilities
ESXi and vCenter have 9.5 exploited flaws per 100 CVEs; Xen, QEMU and VirtualBox, with 7x the CVEs, have none. NVD and CISA KEV.
Filing sample · Source: SEC EDGAR 10-K filings · Dataset included
Item 1C Cybersecurity Disclosures
A random sample of 600 2025 10-Ks: 27% name a CISO, 50% give oversight to the audit committee, 90% cite outside firms.
Measured scan · Source: DNS scan · Dataset included
DMARC Adoption Statistics 2026
A DNS scan of 15,000 domains: 61% of top-10k mail domains enforce DMARC, but only 31% in the long tail. Full dataset.
Exposure timeline · Source: CISA KEV · Dataset included
RMM Vulnerabilities and Remote Access Flaws
VPN gateways are listed in CISA KEV a median 1 day after disclosure; half of remote support flaws feed ransomware.
Price ledger · Source: Microsoft announcements + BLS CPI-U · Dataset included
Microsoft 365 Price Increase 2026: Every Change Since 2011
July 2026 raised 18 of 22 Microsoft 365 plans. Business Basic is up 40% since 2022 vs 19% inflation, yet no plan beats inflation since launch.
Measured census · Source: Majestic Million, SEC, FDIC, CISA .gov + DNS · Dataset included
Microsoft 365 Market Share 2026: A DNS Census
Microsoft 365 handles email for 71% of US public companies and 77% of banks vs 12% and 2% for Google. Top 100K sites: 32% vs 27%.
Anatomy timeline · Source: CrowdStrike PIR/RCA, BTS, SEC EDGAR · Dataset included
CrowdStrike Outage: Minute-by-Minute Timeline and Costs
A 78-minute bad update, 8.5M PCs, 10.8 days to 99% recovery. Delta booked $550M; only 7 of 37 SEC filers that discussed it put a number on the impact.
Wording ladder · Source: Census HTOPS + Gallup, RPS, Pew · Dataset included
AI at Work Statistics 2026
38.6% of US workers used AI at work last week and 55.6% ever (Census, March 2026). Gallup, St. Louis Fed and Pew surveys reconciled by wording.
Price-load scatter · Source: EIA, PJM, Independent Market Monitor · Dataset included
Data Center Electricity Prices 2026: The PJM Test
PJM home power prices rose 11.3% in a year vs 5.8% elsewhere, but states with faster data center load growth saw smaller rises. EIA prices for all 50 states.
Index dashboard · Source: BLS CPI, PPI, MXP + Census trade · Dataset included
Computer Prices 2026
CPI for computers rose 9.7% in a year, a record since 1997; laptop PPI jumped 17.8% in July. Laptop import values up 23% while duty paid fell to 0.11%.
Two-role comparison · Source: BLS OEWS, BEA, GSA · Dataset included
Network Engineer Salary 2026
Network architects (engineers) earn a $134,050 median, $34,920 above sysadmins; telecom pays $111,690. States, metros, industries, outlook, GSA rates.
Industry wall · Source: BLS OEWS, BEA, GSA, OPM · Dataset included
IT Manager Salary 2026
IT managers earn a $175,140 median; BLS now publishes the 90th percentile, $297,510. Pay for 64 industries, cost-adjusted states, metros, GSA and OPM rates.
Price ladder · Source: FCC URS, BLS CPI · Dataset included
Average Internet Bill 2026
The median US home internet plan lists at $89.95 a month, mean $98.49, per FCC rate data; price per Mbps fell 90% since 2017. Prices by speed, technology and state.
Long-run strip · Source: StatCounter + US v. Google court record · Dataset included
Search Engine Market Share 2026
Google had 89.94% of search referrals in September 2026 after a record 2.82-point two-year fall that went to Bing and Yandex. Data since 2009 by country.
Share race · Source: StatCounter Global Stats + OpenAI · Dataset included
ChatGPT Market Share 2026: 80.5% of AI Referrals
ChatGPT sent 80.47% of AI chatbot referrals in September 2026, and Gemini rose from 2.82% to 10.94%. Why other trackers say 46% to 57%.
Blast radius · Source: Google Cloud Service Health + Internet Archive · Dataset included
Google Cloud Outage History: 1,472 Incidents Mapped
Google Cloud’s public incident history rebuilt from its own feed: 50 of 86 major incidents began with a Google change; the June 2025 outage hit 55 products.
PIR casebook · Source: Microsoft Azure status history + Internet Archive · Dataset included
Azure Outage History: Every Microsoft PIR, 2016 to 2026
219 Azure post incident reviews read and coded: 58% began with Microsoft’s own change. Power events rising, 42% name no single region.
Water balance · Source: Google, Microsoft, Meta, Amazon + LBNL, USDM · Dataset included
Data Center Water Usage 2026: Every Disclosed Site
Google’s data centers consumed 10.5B gallons in 2025, doubling with power since 2022, while Microsoft, Meta and AWS cut water per kWh. 77 sites with drought data.
Energy ledger · Source: Google, Microsoft, Meta reports + LBNL, IEA · Dataset included
AI Energy Consumption 2026: The Big Tech Energy Ledger
Google, Microsoft and Meta used 80.0 TWh in 2024, up 142% since 2020, while US electricity rose 6.6%. Company reports, LBNL and IEA data, per-prompt claims.
Cycle quadrant · Source: Micron, Sandisk, WD, Seagate filings, BLS · Dataset included
SSD Prices 2026: The NAND Cycle
Micron NAND prices rose nearly 5x in a year, Sandisk’s price per GB rose 248%, and the BLS storage PPI rose 87%, a record.
Price tracker · Source: Micron SEC filings, SK hynix, BLS · Dataset included
RAM Prices 2026: The Memory Price Shock
Micron’s DRAM prices rose about 3.8x in a year (about 180% in fiscal 2026) as import prices jumped 36%, while the U.S. chip PPI fell.
Salary atlas · Source: BLS OEWS, BEA, DOL OFLC · Dataset included
Software Engineer Salary 2026
Software developers earn a $135,980 median, $213,110 in San Jose. Metro atlas, cost-adjusted states, industries, and H-1B offers vs local BLS pay.
State league · Source: FTC Consumer Sentinel · Dataset included
Identity Theft Statistics 2026: Every State Ranked
1.36M FTC identity theft reports in 2025, up 20%. Credit card fraud grew fastest (+33%); Florida leads at 728 per 100K. All 50 states and DC.
Loss funnel · Source: FTC Consumer Sentinel · Dataset included
Scam Statistics 2026: The FTC Loss Funnel
Americans reported $16.1B lost to fraud in 2025, up 25%, from 1.12M reports with a loss. Funnel by contact method, payment method and age.
Registry ledger · Source: ICANN registry reports + Verisign · Dataset included
Domain Name Statistics 2026
401.6M domains registered in mid-2026, up 8.1%. New gTLDs drove 54% of gTLD growth, and 25 of the 75 largest gTLDs renew under 20% of names.
Number reconciliation · Source: StatCounter, DAP, Steam · Dataset included
Linux Market Share 2026: Which Number Is Real?
Linux was 4.54% of desktops worldwide in September 2026. The 7% to 17% headlines came from a summer spike; every figure traced to its source.
Availability scorecard · Source: GitHub Availability Reports + githubstatus.com · Dataset included
GitHub Outages: Every Availability Report, 2020 to 2026
184 incidents from 75 GitHub Availability Reports: 52 in Jan to Sep 2026, up from 22 a year earlier, with 157 hours of degraded service.
Post-mortem anthology · Source: Cloudflare post-mortems + status API · Dataset included
Cloudflare Outage History: Every Post-Mortem, 2012 to 2026
40 Cloudflare post-mortems read and coded: 27 began with Cloudflare’s own change, including all 8 global core-network outages. Plus 6,534 status incidents.
Lottery league · Source: USCIS, DOL OFLC, BLS OEWS · Dataset included
H-1B Statistics 2026
Lottery entries fell 55% in two years and 14 IT services firms took 8% of FY2025 approvals, down from 26%. Top 30 employers, denials, and wages.
Readiness tracker · Source: Federal Register, DoW CIO, Cyber AB · Dataset included
CMMC Certification Statistics 2026: Demand vs Capacity
DoD expects 118,289 contractors to need Level 2 certification; about 2,000 have one. Phase II is suspended, and 110 C3PAOs can’t meet DoD’s own demand.
Bottom-up build · Source: Census Economic Census + QSS · Dataset included
MSP Market Size 2026: A Bottom-Up Census Count
US managed IT services were about $140B in 2025, growing 7.5% a year, built from Census product lines. Why vendor reports disagree by 2x.
Attribution ledger · Source: Challenger, Gray & Christmas + SEC EDGAR · Dataset included
AI Layoffs 2026: The Attribution Ledger
Employers cited AI for 120,136 U.S. job cuts Jan to Sep 2026, 21% of all cuts, then the monthly count fell 90%. Plus 37 filings that say so.
Pay histogram · Source: BLS OEWS, BEA, GSA · Dataset included
Help Desk Salary 2026
Help desk pays $29.74 an hour at the median ($19.70 to $48.34 from 10th to 90th). Metro top and bottom 15, MSPs vs in-house IT, GSA tier rates.
Pay ladder · Source: BLS OEWS, BEA, GSA, OPM · Dataset included
Cybersecurity Salary 2026
Security analysts earn a $129,180 median, from $75,090 at the 10th percentile to $199,850 at the 90th. Ladder, cost-adjusted states, industries, GSA rates.
Vendor scorecard · Source: CISA KEV + NIST NVD · Dataset included
VPN Vulnerabilities by Vendor
1 in 15 VPN gateway CVEs since 2020 is in CISA KEV, 14x the rate for all CVEs. 14 vendors scored, 42% of their KEV entries flagged for ransomware.
Orbital census · Source: GCAT, SEC, FCC BDC · Dataset included
Starlink Statistics 2026
11,152 Starlink satellites in orbit, 1,841 reentered, 12.0M subscribers per SEC filings, and FCC 100/20 coverage at 99.7% of US homes.
Registry cross-reference · Source: CalPrivacy, Texas SOS, Oregon DCBS · Dataset included
Data Brokers List 2026
728 data brokers across the California, Texas and Oregon registries, only 260 in all three. 19% of California brokers collect precise geolocation.
Share bars · Source: BLS CPS tables 11 and 39 · Dataset included
Women in Tech Statistics 2026
Women held 27.5% of U.S. computer and math jobs in 2025, barely up from 25.0% in 2011, and 15.9% of security analyst jobs. Share and pay by role.
Jobless gauge · Source: BLS CPS + New York Fed · Dataset included
IT Unemployment Rate 2026
Tech unemployment averaged 3.33% Jan to Sep 2026 vs 4.32% nationally: still lower, but the narrowest gap since 2003. Jobs, grads by major.
Gap atlas · Source: Census ACS, NTIA, FCC · Dataset included
Internet Access Statistics 2026
8.9 million US households had no home internet subscription in 2024. Gaps by state, income, age, race, rural areas and disability, and the ACP test.
Countdown board · Source: Microsoft Lifecycle + MSRC · Dataset included
SQL Server End of Life
Every SQL Server end of life date, 2008 to 2025. Since 2016 support ended, Microsoft listed 0 of 45 new 2017 CVEs for 2016, and none for 2014 since 2024.
Survey reconciler · Source: U.S. Census Bureau BTOS · Dataset included
Small Business AI Adoption 2026
23.8% of US employer businesses used AI in the last two weeks, against 58% to 89% in private surveys. Census BTOS by firm size, sector and state.
Index race · Source: Indeed Hiring Lab · Dataset included
Tech Job Postings 2026: Indeed Index by Role
Software postings are up 28% from the May 2025 low but 22% below 2020. IT support, at 69.8, is now 3rd weakest of 47 sectors.
Support matrix · Source: 2FA Directory + Passkeys Directory · Dataset included
MFA Statistics 2026
2,571 services checked: 73.9% offer MFA, but only 10.9% support security keys or passkeys, and 61% of those still accept SMS codes.
Lab notebook · Source: Have I Been Pwned Pwned Passwords · Dataset included
Password Statistics 2026
92% of 634 passwords built to pass complexity rules were already in Have I Been Pwned, while 0 of 1,200 random passphrases were.
Group dossiers · Source: RansomLook + CISA · Dataset included
Ransomware Groups 2026: The Most Active Gangs, Ranked
Qilin leads with 1,023 leak-site victims and The Gentlemen, first seen September 2025, is second. 161 groups active, 84 new, with top-10 dossiers.
Monthly pulse · Source: RansomLook · Dataset included
Ransomware Statistics 2026
8,009 leak-site victims Jan to Sep 2026, up 33% on 2025, with a record 1,222 in August. Groups under a year old post nearly half.
Calendar heatmap · Source: OpenSSF / OSV · Dataset included
Malicious npm Packages: 222,159 OpenSSF Reports Analyzed
63% of malicious npm reports were one tea.xyz token-farming flood. 19 records hit top-1,000 packages like chalk, axios, and keyv. Typosquats are 0.4%.
Crossover chart · Source: StatCounter Global Stats · Dataset included
Windows 11 Market Share 2026
Windows 11 hit 71.5% of Windows desktop views in September 2026; Windows 10 still holds 27.8% a year after support ended.
Earnings race · Source: SEC EDGAR filings · Dataset included
Cloud Computing Statistics 2026
AWS, Microsoft, Google and Oracle cloud revenue rose 43% to $116.2B in Q2 2026, while capex at five tech giants grew 87%. From SEC filings.
Incident log · Source: AWS Post-Event Summaries · Dataset included
AWS Outage History: Every Major Event, 2011 to 2026
18 AWS Post-Event Summaries since 2011: 12 hit us-east-1 and 13 were software, not power. Plus the 2026 Middle East region disruption.
Live tracker · Source: State WARN notices (CA, WA, NY) · Dataset included
Tech Layoffs 2026: Live WARN Notice Tracker
23,178 tech workers in CA, WA and NY WARN notices Jan to Sep 2026, double 2025, while other layoffs fell 23%. Meta and Amazon lead.
Hex atlas · Source: PNNL, Census, EIA · Dataset included
Data Centers by State 2026
Virginia has 239 of 1,207 mapped data center sites. A league table and hex map with Census industry jobs and EIA commercial power growth for every state.
Energy dashboard · Source: LBNL, EIA, Census · Dataset included
Data Center Statistics 2026
US data centers used 4.4% of the country’s electricity in 2023, and construction hit an $85B annual rate in August 2026. Federal power, spending and jobs data.
Nines ladder · Source: Provider SLA documents · Dataset included
99.9% Uptime: Downtime Calculator and Provider SLAs
99.9% uptime allows 43.8 minutes of downtime a month. 35 provider SLAs read line by line: a full-day outage earns a median 25% credit.
Reliability scatter · Source: EIA Form EIA-861 + DOE OE-417 · Dataset included
Power Outage Statistics by State
U.S. customers lost 7.0 hours of power a year in 2021 to 2025, up 46% on 2013 to 2017. Major storms caused 91% of the rise. All 50 states and DC ranked.
Price ticker · Source: SEC EDGAR XBRL · Dataset included
Cost of Downtime: Revenue at Stake Per Hour
The median US-listed company books $96K of revenue an hour. Industry medians, the top 100, filed outage costs, and a calculator.
Fact sheet · Source: FBI, CISA, NIST, HHS and more · Dataset included
Cybersecurity Statistics 2026
70 cybersecurity statistics, each traced to its primary source: CVEs up 103%, KEV additions up 30%, and most 2026 federal patch deadlines now 3 days.
Market scorecard · Source: NAIC Cyber Supplement · Dataset included
Cyber Insurance Statistics: 10 Years of NAIC Data
U.S. cyber premiums fell 7.1% to $9.14B in 2024, the first drop on record, as top-20 loss ratios rose again. Top insurers, claims, policies.
Heatmap atlas · Source: BLS CPS and ATUS · Dataset included
Remote Work Statistics 2026
22.1% of workers teleworked Jan to Sep 2026, barely below 2024. Federal telework halved after the return-to-office memo; private telework barely moved.
Industry slopegraph · Source: BEA Fixed Assets and GDP by Industry · Dataset included
IT Spending by Industry
U.S. firms invested $1.19T in IT in 2025, 2.53% of output. Information leads at 14.3%; finance grew fastest, +179% in ten years.
Lifecycle Gantt · Source: Microsoft Lifecycle + MSRC · Dataset included
Windows Server End of Life
Every Windows Server end of life date, 2008 to 2025, plus 1,939 CVEs in 2012/2012 R2 since 2023 fixed only for ESU buyers. 2016 support ends Jan 12, 2027.
Vendor strip · Source: Google Project Zero · Dataset included
Zero-Day Statistics: 412 Exploits by Vendor
Every zero-day in Google Project Zero’s tracker since 2014. Microsoft leads with 166, browser share fell to 21%, and edge devices now top new KEV entries.
Evidence board · Source: APWG, FBI IC3, HHS OCR · Dataset included
Phishing Statistics 2026: Four Primary Sources
APWG saw 3.8M phishing sites in 2025, up 33% on 2021, while FBI phishing complaints fell 44%. BEC losses hit $3.05B.
Growth race · Source: U.S. Census Bureau QSS · Dataset included
IT Services Industry Growth 2026
IT services revenue up 3.2% a year while hosting grew 20.4% and software 15.0%. Government is the faster-growing customer.
Rate card · Source: GSA CALC+ · Dataset included
IT Hourly Rates 2026: What Contracts Pay by Role
Hourly rates for help desk, network, sysadmin, security, and cloud roles from thousands of GSA contract labor categories.
Patch ledger · Source: Microsoft MSRC · Dataset included
Patch Tuesday Statistics 2026
Microsoft fixed 2,859 of its own CVEs from January to September 2026, triple 2025, while exploited zero-days held flat.
Continuity risk · Source: FEMA OpenFEMA · Dataset included
Disaster Declarations by State
2024 set a record with 100 major disaster declarations, and 85% of US counties had at least one in a decade.
Telecom data · Source: FCC Form 477 · Dataset included
VoIP Statistics 2026
VoIP is 83.6% of US business wireline phone connections, up from 3.2% in 2008. Trends and state data.
Breach anatomy · Source: Have I Been Pwned · Dataset included
Data Breach Statistics 2026: Inside 980 Breaches
13.2 billion accounts in Have I Been Pwned. Passwords now appear in only 19% of 2026 additions, while phone numbers reach 62%.
Metro leaderboard · Source: BLS OEWS metro data · Dataset included
Highest Paying Cities for IT Jobs 2026
Metro leaderboards for security analysts, sysadmins, network support, and help desk, with a local pay multiple.
Industry census · Source: BLS QCEW · Dataset included
MSP Industry Statistics 2026
Managed IT establishments up 10.6% since 2023 while jobs fell 5.1% and weekly pay rose 14.3%, with a state league table.
Spending ledger · Source: USAspending.gov · Dataset included
Federal IT Spending 2026
Civilian IT services obligations hit a record $43.9B. Why the raw FY2026 total misleads, and the like-for-like number.
Technique matrix · Source: CISA · Dataset included
Ransomware Initial Access Vectors: 25 CISA Advisories
Every #StopRansomware advisory coded by entry technique. Public-facing app exploits appear in 73%, phishing in 59%.
Chart essay · Source: NIST NVD · Dataset included
CVE Statistics 2026: Vulnerabilities Published Per Year
74,838 CVEs published January to September 2026, more than double the same period of 2025, while NIST now scores only about 1 in 10 itself.
Disclosure tracker · Source: SEC EDGAR · Dataset included
SEC Cybersecurity Incident Disclosures: Every Item 1.05 Filing
58 material-incident disclosures by 57 public companies since December 2023, by quarter, industry, and state.
Breach anatomy · Source: Washington Attorney General · Dataset included
How Long Do Companies Take to Report a Data Breach?
1,675 Washington notices: the median time from discovery to notice hit 134 days in 2025, driven by ransomware cases.
Labor dashboard · Source: BLS JOLTS · Dataset included
The Tech Job Market in 2026
Information sector openings down 55% from the 2022 peak, quits and hires below the national rate, layoffs rising.
Pay matrix · Source: BLS OEWS · Dataset included
IT Salaries by State 2026
Median pay for security analysts, sysadmins, network support, and help desk in all 50 states and DC.
Enforcement ledger · Source: HHS Office for Civil Rights · Dataset included
HIPAA Enforcement Tracker: Every OCR Penalty and Settlement
A verified ledger of 162 OCR actions. 2025 set a record with 25, while the median penalty fell 85% from 2016-2019 levels.
State atlas · Source: U.S. Census Bureau · Dataset included
IT Services Firms by State: A Census Atlas
145,813 computer services establishments mapped by state, with pay and density. MSP-type firms fell 7.2% in one year.
Catalog analysis · Source: CISA · Dataset included
Known Exploited Vulnerabilities: An Analysis of the CISA KEV Catalog
All 1,733 KEV entries analyzed. 2026 additions are running 32% ahead of 2025, and edge devices are overrepresented in ransomware.
Scorecard · Source: HHS OCR breach portal · Dataset included
Healthcare Data Breach Report 2026
802 large breaches and 140 million individuals affected in 2025, with 80.9% caused by hacking.
Trend brief · Source: FBI IC3 · Dataset included
Ransomware Reported to the FBI: A Five-Year Trend
Complaints reached a four-year high in 2025. Why reported losses understate the real cost.
Data observatory · Source: U.S. BLS · Dataset included
IT and Cybersecurity Jobs Outlook 2026
Security roles projected to grow 21% while IT support declines. What BLS data shows.
How we source our research
We work from primary sources: federal statistical agencies (the Bureau of Labor Statistics, the Census Bureau), federal incident and enforcement records (the FBI Internet Crime Complaint Center, the HHS Office for Civil Rights, CISA), and official industry data. Where we can, we analyze the raw dataset ourselves rather than repeating published summaries. Every factual claim links to a source we opened, and anything we could not verify is excluded or labeled.
Using our data
Journalists, analysts, and operators are welcome to cite and reuse our datasets under a Creative Commons Attribution 4.0 license. Each report includes a ready-made citation and a CSV download.