The agent security gap: 54% of enterprises have already had an AI agent incident, and most still let agents share credentials

1Key Takeaways

• Across 107 enterprises, AI agents are being given real access to systems and data while the controls meant to contain them lag behind.
• More than half have already had a confirmed agent security incident or a near-miss; only about a third give every agent its own scoped identity, and most agents still share credentials; and only three in ten isolate their highest-risk agents.
• The security stack is overwhelmingly borrowed from the model providers and hyperscalers rather than purpose-built for….