SailPoint Survey Highlights Security Gaps as AI Agent Adoption Accelerates

· Original Report (PDF) ↗

Original report publisher: not verified. Report discovered via Awesome Annual Security Reports.

Summary

SailPoint surveyed 100 security and identity leaders at Fortune 500 and Global 2000 firms: 91% said their organization deploys or evaluates AI agents, but only 30% reported complete real-time visibility and 11% fully implemented least privilege.

Key points

  • The survey included 100 security and identity practitioners at Fortune 500 and Global 2000 organizations; polling ran from April 22 to April 28, 2026.
  • 91% of respondents said their organizations were deploying or evaluating AI agents, and 47% reported agents operating in production.
  • The report says 73% of agents access sensitive customer data; 48% access HR data and 43% access financial records.
  • Only 30% of organizations reported complete, real-time visibility into their AI agents; 44% lacked formal processes to detect unsanctioned AI tools.
  • 69% of organizations had only partially implemented least-privilege access for AI agents, while 11% had fully implemented it; governance policies were still in development at 57%.
  • SailPoint presents its Agentic Fabric identity-security product as a framework for agent discovery, governance, audit, and response.

Article Details

Publisher
SailPoint
Report Period
2026-04-22 to 2026-04-28
Scope
Survey of security and identity practitioners at Fortune 500 and Global 2000 organizations on AI agent adoption, security, and governance.
Sample Size
100 respondents
Key Statistics
  • 91% of surveyed organizations were deploying or evaluating AI agents.
  • 47% had AI agents operating in production environments.
  • 97% of AI agents reportedly had access to sensitive data.
  • 30% of organizations reported complete, real-time visibility into their AI agents.
  • 11% of organizations had fully implemented least-privilege access for AI agents.
Recommendations
  • Maintain a unified inventory of AI agents and their owners, entitlements, and data access.
  • Assign clear human ownership and apply lifecycle controls, including provisioning and de-provisioning.
  • Enforce least-privilege and just-in-time access for AI agents.
  • Continuously monitor agent behavior and automate responses such as revoking entitlements or disabling agents.

Vendors

Products