Relative cost of remediating a security defect by phase discovered

Catching bugs early is roughly 100× cheaper than catching them after a breach. Hover a bar for details. (Log scale)

Multipliers are illustrative industry figures (IBM Systems Sciences Institute / NIST), not precise measurements.


Back to Documentation