MFA Statistics 2026: Only 1 in 9 Online Services Supports Phishing-Resistant Sign-In
MFA statistics from our count of 2,571 online services in the open 2FA Directory: 73.9% offer some form of multi-factor authentication, but only 10.9% (280) support a phishing-resistant method, a hardware security key or a passkey. SMS remains the common fallback: 45.8% of services with MFA accept a text or voice code, including 61% of those that also offer keys.
Passkey 9.8%Security key 1.1%App or OTP token 50.4%SMS, voice or email only 12.6%No MFA 26.1%
All 2,571 services by the strongest method each one offers. Data sourced from 2FA Directory by 2factorauth, joined to the Passkeys Directory, retrieved October 15, 2026.
The support matrix: strongest method by category
Most published MFA statistics are survey answers about whether people or companies switched MFA on. This page measures the other side: what services let you use. We downloaded every entry in the 2FA Directory, a volunteer-maintained list of sites that handle money, personal data or account control, and matched it by domain to the Passkeys Directory from the same project. Each service is placed in the bar by the strongest method it documents.
A service can belong to more than one category. Categories with at least 40 listed services are shown, plus insurance, identity and remote access. Hover a segment for counts.
Three groups lead on phishing-resistant support: universities (47%), identity and password services (45%) and email providers (39%). Money is not where the strong methods are. Banks sit at 6%, finance and accounting services at 5%, investing platforms at 6%, and none of the 37 insurers support a security key or passkey. Crypto exchanges are the opposite case: 98% offer MFA, almost all through authenticator apps, but only 6% support keys or passkeys.
Consumer services show the largest gaps in basic coverage. 77% of food delivery services, 67% of transport services, 66% of entertainment services and 54% of retailers list no MFA at all. Healthcare is split: 38% of the 52 health services offer none, and 10% support a key or passkey.
Is SMS-only MFA still common?
As the only option, SMS is a minority: 147 services (5.7% of all listed) offer SMS or voice codes and nothing stronger, and a further 178 offer only email codes or a mix of email and phone codes. It concentrates in financial categories. SMS-or-voice-only is the case for 24% of insurers, 17% of investing platforms, 17% of payment services and 11% of banks.
As a fallback, SMS is everywhere. CISA’s guidance on mobile communications warns that enrolling an authenticator app “does not automatically unenroll the account’s SMS,” which “can create a weak, exploitable fallback mechanism.” In the directory, 871 of the 1,901 services with MFA (45.8%) list SMS or voice among their methods, and 170 of the 280 services that support keys or passkeys (61%) do too.
The 280 phishing-resistant services, by the weakest method they also accept
SMS or voice call 170Email code 13Authenticator app or token 83Security key or passkey only 14
One square per service. Hover for the name.
Weakest method offered, all 1,901 services with MFA
Ranking follows CISA’s strongest-to-weakest table. Whether a weaker method can be switched off varies by service and is not recorded in the directory.
The directory records which methods a service supports, not whether a user can remove the weaker ones. Some services let you delete a phone number once a key is enrolled; others keep SMS for account recovery. CISA notes that some services “may default to SMS during account recovery flows.” Recovery questions are weaker still, since the personal details behind them are sold, as our data brokers list shows.
Banking: the largest category, and one of the weakest
Banks are the biggest single category in the directory, with 270 entries. 27% list no MFA, 21% rely on SMS, voice or email codes alone, and 47% top out at an app or code token, often the bank’s own app or a card reader. Just 15 support a security key or passkey.
US banks do better than the rest on availability but not on SMS. Of 88 banks tagged as US, 13 (15%) list no MFA and 13 (15%) are SMS or voice only, while 10 support keys or passkeys. Among 181 banks tagged with other countries, 60 (33%) list no MFA, 18 (10%) are SMS or voice only, and 5 support keys or passkeys. The directory’s bank list is not a complete census of either market.
The most-linked services and their MFA methods
Popularity is not in the directory, so we ranked services by their position in the Majestic Million, a list of domains ordered by how many distinct IP subnets link to them. Of the 30 highest-ranked services in the directory, 19 support a security key or passkey, 19 accept SMS or voice, and 4 list no MFA.
| Majestic rank | Service | Category | SMS / voice | TOTP app | Vendor app / token | Security key | Passkey | Weakest offered | |
|---|---|---|---|---|---|---|---|---|---|
| 2 | Social media | ✓ | · | ✓ | · | ✓ | ✓ | SMS or voice call | |
| 3 | YouTube | Entertainment | ✓ | · | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| 4 | Social media | ✓ | · | ✓ | · | · | · | SMS or voice call | |
| 5 | X (Twitter) | Social media | ✓ | · | ✓ | · | ✓ | ✓ | SMS or voice call |
| 6 | Social media | ✓ | · | ✓ | ✓ | · | ✓ | SMS or voice call | |
| 10 | GitHub | Developer tools | ✓ | · | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| 11 | Wikipedia | Other | · | · | ✓ | · | ✓ | ✓ | Authenticator app or token |
| 12 | Google Play | Entertainment | ✓ | · | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| 22 | Social media | ✓ | · | · | ✓ | · | · | SMS or voice call | |
| 23 | TikTok | Social media | ✓ | ✓ | ✓ | · | · | ✓ | SMS or voice call |
| 27 | Communication | ✓ | ✓ | · | · | · | ✓ | SMS or voice call | |
| 29 | Vimeo | Entertainment | · | ✓ | ✓ | · | · | · | Email code |
| 31 | Amazon | Retail | ✓ | · | ✓ | · | · | ✓ | SMS or voice call |
| 34 | Google Drive | Backup and file sync | ✓ | · | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| 38 | Adobe | Creative tools | ✓ | ✓ | · | ✓ | · | ✓ | SMS or voice call |
| 40 | WordPress.com | Social media | ✓ | · | ✓ | · | ✓ | ✓ | SMS or voice call |
| 48 | Social media | · | · | ✓ | · | · | ✓ | Authenticator app or token | |
| 51 | Yahoo | ✓ | · | ✓ | · | ✓ | ✓ | SMS or voice call | |
| 52 | Spotify | Entertainment | · | · | · | · | · | · | No MFA listed |
| 57 | GoDaddy | Domain registrars | ✓ | · | ✓ | · | ✓ | ✓ | SMS or voice call |
| 60 | Tumblr | Social media | ✓ | · | ✓ | · | · | · | SMS or voice call |
| 61 | Internet Archive | Other | · | · | · | · | · | · | No MFA listed |
| 65 | Microsoft Copilot | Other | ✓ | ✓ | ✓ | ✓ | · | ✓ | SMS or voice call |
| 68 | Flickr | Social media | · | · | · | · | · | · | No MFA listed |
| 73 | Medium | Social media | · | · | · | · | · | · | No MFA listed |
| 75 | SoundCloud | Entertainment | · | · | ✓ | · | · | · | Authenticator app or token |
| 76 | Namecheap | Domain registrars | · | · | ✓ | · | ✓ | ✓ | Authenticator app or token |
| 81 | Zoom | Communication | ✓ | · | ✓ | · | · | · | SMS or voice call |
| 85 | SourceForge | Developer tools | · | · | ✓ | · | · | · | Authenticator app or token |
| 86 | PayPal | Payments | · | · | ✓ | · | ✓ | ✓ | Authenticator app or token |
Services whose sign-in lives on a subdomain (for example appleid.apple.com or aws.amazon.com) have no Majestic rank of their own and are covered in the next table. Methods are as recorded by the 2FA Directory and Passkeys Directory on October 15, 2026.
The MSP tool stack, method by method
For the accounts an MSP actually administers, the picture is mixed. Identity providers, cloud consoles and password managers mostly support keys or passkeys. Remote access and RMM tools mostly do not: 1 of the 10 remote access and RMM products below list a security key or passkey, and most have an authenticator app as their strongest method. Across the directory’s 24 remote access services, 17% do.
| Service | SMS / voice | TOTP app | Vendor app / token | Security key | Passkey | Weakest offered | |
|---|---|---|---|---|---|---|---|
| Identity and productivity | |||||||
| Microsoft 365 / Entra sign-in | ✓ | ✓ | ✓ | ✓ | · | ✓ | SMS or voice call |
| Google Account (Gmail) | ✓ | · | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| Apple Account | ✓ | · | · | ✓ | ✓ | ✓ | SMS or voice call |
| Okta | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| JumpCloud | · | · | ✓ | · | ✓ | ✓ | Authenticator app or token |
| Slack | ✓ | · | ✓ | · | · | · | SMS or voice call |
| Zoom | ✓ | · | ✓ | · | · | · | SMS or voice call |
| Cloud, DNS and code | |||||||
| Amazon Web Services | · | · | ✓ | ✓ | ✓ | ✓ | Authenticator app or token |
| Microsoft Azure | ✓ | · | ✓ | ✓ | · | ✓ | SMS or voice call |
| Google Cloud Platform | ✓ | · | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| Cloudflare | · | · | ✓ | · | ✓ | ✓ | Authenticator app or token |
| GoDaddy | ✓ | · | ✓ | · | ✓ | ✓ | SMS or voice call |
| GitHub | ✓ | · | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| Dropbox | ✓ | · | ✓ | · | ✓ | ✓ | SMS or voice call |
| Remote access and RMM | |||||||
| TeamViewer | · | · | ✓ | · | · | · | Authenticator app or token |
| AnyDesk | · | · | ✓ | · | · | · | Authenticator app or token |
| ConnectWise ScreenConnect | ✓ | ✓ | ✓ | ✓ | · | · | SMS or voice call |
| Splashtop | · | · | ✓ | · | · | · | Authenticator app or token |
| Atera | · | · | ✓ | · | · | · | Authenticator app or token |
| Autotask | · | · | ✓ | · | · | · | Authenticator app or token |
| Datto | · | · | ✓ | ✓ | · | · | Authenticator app or token |
| N-able | · | · | ✓ | · | · | · | Authenticator app or token |
| SolarWinds | · | · | ✓ | · | · | · | Authenticator app or token |
| Twingate | · | · | ✓ | · | ✓ | · | Authenticator app or token |
| Password managers | |||||||
| 1Password | · | · | ✓ | ✓ | ✓ | ✓ | Authenticator app or token |
| Bitwarden | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| Keeper | ✓ | · | ✓ | · | ✓ | ✓ | SMS or voice call |
| LastPass | ✓ | · | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
| Dashlane | · | · | ✓ | · | · | · | Authenticator app or token |
| Finance, payroll and banking | |||||||
| QuickBooks Online | ✓ | ✓ | ✓ | · | · | · | SMS or voice call |
| Xero | · | · | ✓ | ✓ | · | · | Authenticator app or token |
| Gusto | ✓ | · | ✓ | · | · | · | SMS or voice call |
| ADP | · | · | · | · | · | · | No MFA listed |
| PayPal | · | · | ✓ | · | ✓ | ✓ | Authenticator app or token |
| Stripe | ✓ | · | ✓ | · | ✓ | ✓ | SMS or voice call |
| Chase | ✓ | · | · | ✓ | · | ✓ | SMS or voice call |
| Bank of America | ✓ | ✓ | · | · | ✓ | · | SMS or voice call |
| Wells Fargo | ✓ | · | · | ✓ | · | ✓ | SMS or voice call |
| Government | |||||||
| IRS | ✓ | · | · | ✓ | ✓ | ✓ | SMS or voice call |
| Social Security (SSA) | ✓ | ✓ | · | · | · | · | SMS or voice call |
| Login.gov | ✓ | · | ✓ | ✓ | ✓ | ✓ | SMS or voice call |
Selection by The Uptime Report of services commonly administered by MSPs. The directory tracks each service’s own sign-in. Many business tools also accept single sign-on through Microsoft Entra ID, Google or Okta, where phishing-resistant MFA can be enforced at the identity provider; SSO options are not recorded here. Microsoft 365 sign-in is listed in the directory under its Microsoft Copilot entry, which covers login.microsoftonline.com and office.com.
The directory since 2015: MFA spread, SMS did not fade
The 2FA Directory’s full history is public on GitHub, so we rebuilt the list as it stood on January 1 of each year from 2015. The share of listed services offering any MFA rose from 49.5% of 418 sites in 2015 to 73.5% of 2,572 today. Security keys grew from 5.5% of listed services in 2022 to 7.9%. The share of MFA services that accept SMS or voice has not moved: it has stayed between 44.9% and 47.6% in every snapshot.
Snapshots of github.com/2factorauth/twofactorauth on January 1 of each year and on October 15, 2026. Security keys are shown from 2021, the first snapshot in which the data separated FIDO U2F keys from other hardware tokens. This series uses 2FA Directory methods only, so it excludes 12 services whose only listed strong method is a passkey.
The list itself grew, which can move the shares. To control for that, we followed the 1,755 services listed in both January 2022 and October 2026. In that fixed group, services supporting a security key rose from 92 to 129 (41 added one). Over the same period, 63 services added SMS as a method and 14 removed it.
Passkeys: big-platform defaults, thin long tail
The Passkeys Directory lists 268 services with passkey support: 131 allow passkey sign-in without a password and 175 accept a passkey as a second factor. It held 183 supported entries in December 2023, a month after the repository was created, and 268 by October 2026, though that growth reflects volunteer additions as well as new deployments. Matched to the 2FA Directory, 252 of its 2,571 services (9.8%) support passkeys.
The large platforms moved first. Apple, Google and Microsoft announced a joint commitment to passkey support on May 5, 2022. Google made passkeys the default option for personal Google Accounts on October 10, 2023. On May 1, 2025, Microsoft said new Microsoft accounts would be “passwordless by default” and that it sees “nearly a million passkeys registered every day,” figures that are Microsoft’s own. Most of the long tail has not followed: 90% of services in the 2FA Directory have no passkey entry.
How effective is MFA? What the primary sources say
The most quoted MFA effectiveness figures come from two organizations. Microsoft’s Partner Center documentation states: “We’ve found that more than 99.9% of compromised accounts don’t have MFA.” A 2023 paper by Microsoft researchers, studying Azure Active Directory accounts with suspicious activity, found MFA “reduces the risk of compromise by 99.22% across the entire population and by 98.56% in cases of leaked credentials,” and that authenticator apps outperformed SMS. CISA’s MFA page tells users that MFA “makes you 99% less likely to be hacked.” These are Microsoft’s and CISA’s claims, not our measurements.
Weak MFA matters because stolen logins are a working entry route. Passwords alone fail often: 92% of 634 passwords built to pass complexity rules were already in Have I Been Pwned when we tested them. In our coding of CISA’s ransomware advisories, valid accounts appeared in 10 of the 22 advisories that list an entry technique, often used on an exposed VPN or remote desktop service.
What this means for MSPs
- Put admin accounts on keys or passkeys first. CISA urges “system administrators and other high-value targets” to move to phishing-resistant MFA. In the directory data, Microsoft 365, Google, AWS, Azure, Cloudflare and GoDaddy sign-ins support it, as do four of the five password managers in the table. Start there, with two keys per admin so a lost key does not force a fallback.
- Remove the SMS fallback, not just add the key. 61% of services that support keys still accept SMS or voice. After enrolling keys, delete phone numbers where the service allows it and document the ones where it does not.
- Front your RMM and remote access tools with SSO. Most remote access and RMM tools in the matrix top out at an authenticator app on their own sign-in. Where the vendor supports SSO, route admin logins through your identity provider and enforce phishing-resistant MFA there. Where it does not, treat app-code MFA as the ceiling and add IP or device restrictions.
- Use this matrix in client reviews. For each client’s banking, payroll and tax portals, check the methods in the CSV. Where a bank or insurer offers only SMS (11% of banks and 24% of insurers here), turn it on anyway, since any MFA beats none, and flag the account for extra payment controls.
- Report MFA strength, not just MFA coverage. “MFA enabled: 100%” hides whether those users are on SMS. Track the share of admins and users on phishing-resistant methods as its own number.
Frequently asked questions
What percentage of online services support MFA?
In the 2FA Directory’s list of 2,571 services, 1,901 (73.9%) offer some form of multi-factor authentication and 670 (26.1%) offer none. Coverage is uneven: 98% of crypto exchanges offer MFA, against 46% of retailers and 73% of banks.
What is the most common MFA method?
Authenticator apps using time-based one-time passwords (TOTP). 1,288 of the 1,901 services with MFA support them (68%), ahead of SMS codes at 868 (46%) and email codes at 396 (21%). Hardware security keys are listed for 202 services and passkeys for 252.
What percentage of attacks does MFA stop?
We did not measure this; the widely quoted figures come from Microsoft. Its Partner Center documentation states that more than 99.9% of compromised accounts it sees do not have MFA, and a 2023 study by Microsoft researchers found MFA cut the risk of account compromise by 99.22% across the accounts studied (98.56% where credentials had leaked). Both are Microsoft’s own measurements of its own tenants.
Which MFA method is most secure?
CISA ranks FIDO/WebAuthn (security keys and passkeys) and PKI-based authentication as phishing-resistant MFA, followed by app-based codes and push with number matching, with SMS and voice as a last resort. Only 280 of 2,571 listed services (10.9%) support a security key or passkey.
Is SMS two-factor authentication still common?
Yes. 871 services (45.8% of those with MFA) accept an SMS or voice code, and 147 (5.7% of all listed) offer nothing stronger. SMS-or-voice-only is most common in insurance (24%), investing (17%) and payments (17%). Banking is at 11%.
Do banks support passkeys or security keys?
Rarely. Of 270 banks listed, 15 (6%) support a security key or passkey, 73 (27%) offer no MFA, and 31 (11%) offer only SMS or voice codes.
Methodology
Sources. 2FA Directory API v3 (all.json), Passkeys Directory entries from github.com/2factorauth/passkeys, the git history of github.com/2factorauth/twofactorauth, and the Majestic Million, all retrieved October 15, 2026. Data sourced from 2FA Directory by 2factorauth.
Universe. 2,571 services in the 2FA Directory. The project lists consumer-facing sites that handle personal data, money or account control; new entries must rank in the Similarweb global top 200,000; self-hosted software, pornography and some other categories are excluded. It is a curated list, not a random sample of the web, and it is maintained by volunteers, so changes at a service can take time to appear.
Methods. SMS and voice call codes; email codes; TOTP authenticator apps; vendor apps and push (the directory’s custom-software) and proprietary tokens such as bank card readers (custom-hardware); FIDO U2F/WebAuthn security keys (u2f); and passkeys, as either a passwordless sign-in or a second factor, from the Passkeys Directory. Passkey entries were matched to 2FA Directory services by domain, including additional domains; 252 of 268 matched and the other 16 are left out of the category analysis. A service with no passkey entry is counted as not supporting passkeys.
Definitions. Phishing-resistant means a security key or passkey (FIDO/WebAuthn), following CISA. Strongest method is the highest tier a service offers: passkey, then security key, then app or token, then SMS, voice or email. Weakest method is the lowest the service lists, in CISA’s order. SMS-or-voice-only means a service lists SMS and/or voice and no other method. Categories are the directory’s own; 122 services sit in more than one. US banks are entries whose region list includes the US.
History. The repository was rebuilt as of January 1 of each year from 2015, and as of October 15, 2026. In snapshots before 2021, at least part of the data recorded all hardware tokens in one field, so the security key series starts in 2021. The git snapshot taken on the retrieval date holds 2,572 entries, against 2,571 in the API file used elsewhere on this page. The fixed-group comparison matches services by domain between January 2022 and today; renamed domains drop out.
Limitations. The directory records documented support, not defaults, enforcement or how many users enroll. It does not record SSO options or whether a weaker method can be removed. Majestic ranks count linking subnets, which is a proxy for prominence, not traffic.
Not advice. This is an analysis of public directory data, not a security assessment of any service.
Cite as:The Uptime Report. "MFA Statistics 2026: Only 1 in 9 Online Services Supports Phishing-Resistant Sign-In." October 2026. https://theuptimereport.com/mfa-statistics/
References
- 2FA Directory by 2factorauth, API v3 and github.com/2factorauth/twofactorauth (MIT licence). Accessed October 2026.
- Passkeys Directory by 2factorauth and github.com/2factorauth/passkeys (CC BY 4.0). Accessed October 2026.
- Majestic, The Majestic Million (CC BY 3.0). Accessed October 2026.
- CISA, Implementing Phishing-Resistant MFA (fact sheet, October 2022). Accessed October 2026.
- CISA, Mobile Communications Best Practice Guidance (December 18, 2024). Accessed October 2026.
- CISA, Multifactor Authentication. Accessed October 2026.
- Microsoft Learn, Security at your organization: Multifactor authentication statistics. Accessed October 2026.
- Meyer, L. A., et al. (Microsoft), How effective is multifactor authentication at deterring cyberattacks? arXiv:2305.00945 (2023). Accessed October 2026.
- Google, Passwordless by default: Make the switch to passkeys (October 10, 2023). Accessed October 2026.
- Microsoft Security Blog, Pushing passkeys forward (May 1, 2025). Accessed October 2026.
- FIDO Alliance, Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard (May 5, 2022). Accessed October 2026.
Research library
More original data reports from The Uptime Report. Every report includes its methodology and a free CSV download. Browse all research
Threats and breaches
- Hypervisor Vulnerabilities
Exploitation by hypervisor, NVD and KEV - DMARC Adoption Statistics 2026
Our scan of 15,000 domains - RMM Vulnerabilities and Remote Access Flaws in CISA KEV
MSP toolchain flaws in KEV - VPN Vulnerabilities by Vendor
VPN gateway KEV and CVEs by vendor - Password Statistics 2026
12,674 passwords tested against HIBP - Ransomware Groups 2026
Most active ransomware groups, ranked - Ransomware Statistics 2026
Leak-site victims by month since 2021 - Malicious npm Packages
Malicious npm packages, day by day - Cybersecurity Statistics 2026
70 sourced stats, every number traced - Zero-Day Statistics
Every tracked zero-day since 2014 - Phishing Statistics 2026
Four phishing measures, one evidence board - Patch Tuesday Statistics 2026
Every Microsoft CVE since 2021 - Disaster Declarations by State
FEMA data for continuity planning - Data Breach Statistics 2026
980 breaches in Have I Been Pwned - Ransomware Initial Access Vectors
CISA advisories coded by entry technique - CVE Statistics 2026
Vulnerabilities published per year, NIST NVD - How Long Do Companies Take to Report a Data Breach?
1,675 Washington notices - Known Exploited Vulnerabilities
The CISA KEV catalog analyzed - Healthcare Data Breach Report 2026
HHS OCR breach portal scorecard - Ransomware Reported to the FBI
Five-year IC3 trend
Infrastructure and uptime
- Domain Name Statistics 2026
Domains by TLD, renewals, registrars - Linux Market Share 2026
Linux desktop share, every headline traced - GitHub Outages
GitHub incidents by month since 2020 - Cloudflare Outage History
Every Cloudflare outage post-mortem - Starlink Statistics 2026
Satellites, subscribers, coverage, outages - Internet Access Statistics 2026
Home internet gaps by state and group - SQL Server End of Life
SQL Server support countdown + CVEs - Windows 11 Market Share 2026
Windows 10 vs 11 share by country - Cloud Computing Statistics 2026
Hyperscaler revenue and capex, SEC data - AWS Outage History
Every AWS Post-Event Summary since 2011 - Data Centers by State 2026
Sites, jobs, power for every state - Data Center Statistics 2026
Data center power, spending, jobs - 99.9% Uptime
Uptime calculator and 35 real SLAs - Power Outage Statistics by State
Outage hours by state, EIA data - Cost of Downtime
Revenue per hour for 3,001 public companies - Windows Server End of Life
Support dates and CVEs per server version
Regulation and disclosure
- FedRAMP Statistics 2026
Authorizations, reuse, and 3PAO market - Item 1C Cybersecurity Disclosures
Coded 10-K Item 1C sample - CMMC Certification Statistics 2026
CMMC demand vs assessor capacity - Data Brokers List 2026
728 brokers across three state registries - SEC Cybersecurity Incident Disclosures
Every 8-K Item 1.05 filing - HIPAA Enforcement Tracker
Every OCR penalty and settlement
Workforce and pay
- H-1B Statistics 2026
H-1B lottery, employers, and wages - AI Layoffs 2026
AI-blamed job cuts, sourced to filings - Help Desk Salary 2026
Help desk hourly pay, BLS OEWS - Cybersecurity Salary 2026
Security pay percentiles, BLS OEWS - Women in Tech Statistics 2026
Women’s share of tech jobs since 2011 - IT Unemployment Rate 2026
Tech vs national jobless rate, monthly - Tech Job Postings 2026
Tech postings vs 2020, by role and country - Tech Layoffs 2026
Tech layoffs from state WARN notices - Remote Work Statistics 2026
Telework by job, industry, and state - Highest Paying Cities for IT Jobs 2026
Metro pay by role, BLS OEWS - The Tech Job Market in 2026
Openings, quits, hires, layoffs - IT Salaries by State 2026
Pay matrix for four IT roles - IT and Cybersecurity Jobs Outlook 2026
BLS employment projections
MSP market and spending
- MSP Market Size 2026
Managed services market, built from Census - Small Business AI Adoption 2026
AI use by firm size, sector, state, Census - Cyber Insurance Statistics
Cyber insurance market, NAIC 2015-2024 - IT Spending by Industry
IT investment by industry, BEA - IT Services Industry Growth 2026
Census revenue by service industry - IT Hourly Rates 2026
Hourly IT labor rates, GSA contracts - VoIP Statistics 2026
Business VoIP vs landlines, FCC - MSP Industry Statistics 2026
Jobs, wages, and firms, BLS QCEW - Federal IT Spending 2026
IT services contracts, USAspending - IT Services Firms by State
Census business patterns atlas
Leave a Reply