Lumos

48.1% of organizations have experienced Multi-Factor Authentication (MFA) fatigue attacks

Over 54% of security leaders cite unchecked growth of permissions as their top hurdle

33.1% of organizations consider non-human identities to be a material risk

42.1% of organizations identify Mean Time to Detection as a top priority for improvement over the next year

37.5% of organizations report Lateral Movement

68.4% of organizations are using AI only in narrow use cases rather than AI-native tools and workflows

47.1% of security leaders distrust automated results

41.2% of security teams cite insufficient auditability as a barrier to automation

45.9% of organizations cite data quality and schema issues as a barrier to automation

52.6% of organizations cite skill gaps and lack of expertise as a barrier to automation

46.6% of organizations report Insider Access misuse

78.2% of security leaders believe they are able to secure and govern non-human identities

51.1% of organizations report dormant access exploitation

39.1% of organizations report Service Account abuse

Nearly 48% of teams struggle to detect identity misuse in real time

96% of organizations have experienced identity-related security incidents

Over 90% of security leaders say they feel prepared to defend themselves

Machine identities outnumber human users by ratios as high as 20:1

Only 3.8% of companies made it through the last year without a significant identity-related incident

43.6% of organizations report the use of stolen credentials as an entry vector

50.4% of leaders believe threat detection and risk triage will benefit most from AI automation

88.7% of identity leaders rate AI as important or very important to detection and response efforts over the next two years

85% of organizations leverage AI in some capacity in their identity governance processes