Horizons Of Identity Security Report

The enterprise security landscape is transforming as artificial intelligence agents become increasingly embedded in business operations. In 2026, 79% of organizations have deployed AI agents in production environments, enabling these systems to make autonomous decisions, access critical databases, and execute business transactions. However, only 2% of organizations have implemented identity security solutions specifically designed to manage and protect these agents. This growing disparity between rapid AI adoption and the development of appropriate identity security controls is a central finding of SailPoint’s fifth annual Horizons of Identity Security report.

To better understand this evolving landscape, SailPoint surveyed 340 senior executives and decision-makers responsible for identity management, IT, cybersecurity, and risk across North America, Europe, Asia Pacific, and Latin America. The 2026 report evaluates organizational identity security maturity across several dimensions, including strategy, operating models, workforce capabilities, and technical infrastructure. Using a five-tier maturity framework, the report examines how enterprises are progressing in their identity security practices and identifies opportunities to strengthen governance as AI-driven technologies become more widespread.

The growing reliance on AI agents introduces new challenges for enterprise security teams, particularly as these systems operate with varying degrees of independence and require access to sensitive corporate information. Unlike traditional human users, AI agents may perform multiple activities simultaneously, interact with multiple applications, and take action without direct human intervention. These characteristics add complexity to identity governance, access management, and regulatory compliance. Organizations must consider how to assign appropriate permissions, monitor agent activities, establish accountability, and prevent unauthorized access or unintended actions. Without adequate oversight, the expanding use of autonomous technologies could introduce security vulnerabilities that conventional identity management frameworks were not designed to address.

The findings also underscore the need to develop identity security strategies that evolve alongside enterprise AI adoption. As organizations expand their use of intelligent automation, security leaders face increasing pressure to modernize governance frameworks, improve visibility into nonhuman identities, and establish consistent controls across their technology environments. This includes evaluating whether existing identity platforms can accommodate autonomous agents, implementing stronger authentication and authorization processes, and ensuring that access privileges remain aligned with business requirements. The report’s maturity framework gives organizations a way to assess current capabilities, identify gaps in security programs, and prioritize investments that support responsible AI deployment. Ultimately, balancing technological innovation with effective identity governance will become increasingly important as AI agents take on a larger role in enterprise operations.