Breakout time is a cybersecurity metric that measures the interval between an attacker’s initial access to a compromised system and their first lateral movement toward other systems or critical assets within the network. This period is crucial for defenders, as it represents the window of opportunity to detect and contain the attacker before they can escalate privileges or cause further harm. Shorter breakout times mean attackers are moving quickly, so rapid detection and response are essential. Understanding breakout time helps organizations refine their incident response strategies and improve their overall security posture.