Cloud Security Alliance (CSA)

28% of organizations can reliably trace agent actions to a human or system across all environments.

58% of organizations estimate they currently have between 1 and 100 agents deployed.

44% of organizations use or plan to use static API keys and 43% use or plan to use username/password combinations for agents.

18% of IT and security professionals are highly confident their current IAM systems can manage agent identities effectively, while 35% report moderate confidence, 29% report slight confidence, and 18% report no or uncertain confidence.

40% of organizations are increasing their overall identity and security budgets to accommodate AI agents, with 34% adding a dedicated budget line and 22% reallocating funds from other security areas.

Over 70% of organizations expect to manage dozens to hundreds of agents within the next 12 months, with 39% expecting 1–100 agents and 31% expecting 101–500 agents.

21% of organizations maintain a real-time registry or inventory of their agents.

84% of organizations doubt they can pass a compliance audit focused on agent behavior or access controls.