F5, the global leader in delivering and securing every app and API, has unveiled its 2025 State of AI Application Strategy Report, revealing that just 2% of global organisations are fully prepared to scale AI securely across their operations. The report draws insights from 650 IT leaders worldwide, along with in-depth research involving 150 AI strategists, all representing organisations with annual revenues of at least US$200 million.
The findings paint a stark picture of current enterprise AI readiness and the challenge of adapting quickly enough to match ongoing innovation. While 77% of companies show moderate levels of AI readiness, most still lack strong governance and cross-cloud security measures—leaving them vulnerable. Meanwhile, 21% are categorised as low-readiness, putting them at risk of falling behind as AI reshapes industries.
F5’s research illustrates the rapid expansion of AI across enterprise environments. Around 70% of moderately ready organisations already have generative AI in active use, with nearly all others currently experimenting. On average, AI features in 25% of applications, but this figure rises significantly among highly ready firms, which are moving towards full portfolio integration. By contrast, low-readiness firms typically deploy AI in fewer than one-quarter of apps—often in isolated or experimental ways.
The report also highlights how enterprises are working across a mix of AI models. Nearly two-thirds (65%) of respondents reported using two or more paid models, alongside at least one open-source tool. The average organisation is now running three models concurrently, with multi-model usage linked to deployment across different locations or cloud environments. While paid models like GPT-4 dominate, open-source tools such as Meta’s Llama, Mistral AI variants, and Google’s Gemma are also widely used.
“As AI becomes core to business strategy, readiness requires more than experimentation—it demands security, scalability, and alignment,” stated John Maddison, Chief Product and Corporate Marketing Officer at F5. “This report highlights actionable steps for organisations to operationalise AI with confidence. AI is already transforming security operations, but without mature governance and purpose-built protections, enterprises risk amplifying threats.”
Cybersecurity Challenges in AI Adoption
The report highlights growing concerns over cybersecurity as enterprises scale AI efforts. Key challenges include:
-
AI as a security asset: 71% of respondents are already using AI to bolster cybersecurity efforts.
-
Lack of AI-specific defences: Just 18% of moderately ready firms have implemented an AI firewall, though 47% plan to do so within a year.
-
Weak data governance: Only 24% engage in continuous data labelling, exposing them to reduced transparency and heightened risk.
-
Cross-cloud vulnerabilities: Hybrid environments are causing governance gaps that leave workflows exposed.
-
Broader attack surfaces: Multiple AI models—especially open-source—are increasing exposure without adequate control frameworks.
Steps to Improve AI Readiness
F5’s AI Readiness Index offers a framework based on six operational maturity factors, including infrastructure and security alignment. To boost readiness, the report recommends:
-
Diversifying AI models: Combine paid and open-source tools while reinforcing governance to reduce risk.
-
Broadening AI adoption: Extend AI beyond pilots into analytics, operations, and security to drive transformation.
-
Implementing AI-specific safeguards: Adopt measures such as AI firewalls and robust data governance protocols.
Organisations with high AI readiness will be able to scale confidently, reduce risks, and drive innovation. Those without such maturity face operational inefficiencies, compliance hurdles, and lost momentum. The AI Readiness Index provides a practical roadmap for companies to assess progress and accelerate secure, scalable AI adoption.
“The research in the State of AI Application Strategy Report aligns with what we’re observing across the Middle East, where many organisations are increasingly integrating AI into their operations, often without all the necessary levels of governance or safeguards in place,” stated Mohammed Abukhater, RVP for the Middle East, Türkiye, and Africa at F5. “While most companies demonstrate moderate AI readiness, they still need to ensure robust governance and comprehensive cross-cloud security to avoid exposure to significant risks. In line with the report’s AI Readiness Index, we are committed to empowering our customers to embed AI in their operations for seamless application delivery and security.”
