SpecterOps

65% of organizations use risk-based prioritization for identity attack paths.

41% of organizations cite difficulty prioritizing attack paths as a challenge to operationalizing Identity APM.

43% of organizations rank attack path visibility among their top three cybersecurity priorities.

37% of organizations cite bandwidth and team overwhelm as a barrier to operationalizing Identity APM.

58% of organizations use automated remediation tools for identity-related issues.

35% of organizations have fully implemented an identity-based Attack Path Management (APM) solution, up from 21% in 2025.

40% of organizations rank integrating generative and agentic AI into the business among their top three cybersecurity priorities.

36% of organizations rank privilege relationships among their top three cybersecurity priorities.

32% of organizations cite tool complexity as a barrier to operationalizing Identity APM.

32% of organizations cite integration challenges as a barrier to operationalizing Identity APM.

30% of organizations are actively researching or evaluating an identity-based Attack Path Management (APM) solution.

75% of organizations report increased identity security spending.

46% of organizations say improving attack path visibility and privilege relationships is a top cybersecurity priority over the next 12 months.