A survey of 107 enterprises reveals a significant security gap in how AI agents are managed. Over 54% have encountered a security incident or near-miss involving AI agents. Despite this, only about one-third provide each AI agent with a distinct, scoped identity, while most allow credential sharing, increasing risk exposure. Only 30% isolate their highest-risk agents in sandboxes, which limits damage when security fails. Enterprises rely heavily on provider-native security tools from OpenAI, Google, and Microsoft rather than specialized agent security solutions. Satisfaction with current tools is high (4.2/5), yet spending on AI agent security remains a small fraction of overall security budgets. Awareness of AI-enabled attackers is increasing, but only a third believe their defenses are currently ahead. Most organizations plan to adopt new or replacement tooling within the next year, signaling recognition of the urgent need to address these vulnerabilities. The findings highlight an urgent need for better identity management, isolation controls, and purpose-built security solutions to manage autonomous AI agents safely.
Back
