The agent security gap: 54% of enterprises have already had an AI agent incident, and most still let agents share credentials
54%. That's the share of enterprises that have already had an AI agent security incident—and most still let their agents share credentials.
Why it matters
Agent adoption is outpacing security controls. A new VentureBeat survey of 107 enterprises reveals that while AI agents proliferate, only a third give every agent its own identity, only three in ten isolate high-risk agents, and incident rates climb with company size even as containment controls decline—exposing a structural gap between autonomy granted and controls in place.
The key facts
13 to know54% of enterprises (107 surveyed) have experienced an agent security incident (18%) or near-miss (36%)
Only 32% of enterprises give every agent its own scoped, managed identity; 69% have credential sharing somewhere in the fleet
Credential-sharing organizations hit at 63.5% incident rate vs. 40.9% for fully-scoped-identity organizations
Only 30% isolate highest-risk agents in sandboxes
47% observe agent activity, 49% enforce scoped permissions, but isolation (30%) lags both
82% rely on provider-native controls (OpenAI guardrails 51%, Google/Microsoft/Anthropic cloud controls); dedicated agent-security vendors in low single digits
Satisfaction with tooling at 4.2/5 despite incident exposure and identity gaps
Spending on agent security: 46% allocate 6–10% of security budget, 34% allocate 5% or less
Only 35% believe AI-enabled defenses are ahead of AI-enabled attackers; 53% rate balance as even or tilted toward attackers
59% plan to adopt, add, or replace agent security tooling within 12 months; 42.1% of hit organizations within 90 days
Only 12% include agent-identity products in consideration set
Incident rate rises from 49% (mid-market: 101–1,000 employees) to 63% (enterprises 1,000+); sandbox isolation falls from 35% to 20%
Survey: n=107 (self-selected, mid-market weighted, June 2026 single wave); 45% final decision-makers, 30% recommenders/influencers
Go to the source
VentureBeat AIventurebeat.com
Publisher excerpt: Across 107 enterprises, AI agents are being given real access to systems and data while the controls meant to contain them lag behind. More than half have already had a confirmed agent security incident or a near-miss; only about a third give every agent its own scoped identity, and most agents…