Report by ArmorCode & Purple Book Community (PBC)
State of AI Risk Management 2026 report
Key Findings
90% of enterprises say they have visibility into their AI footprint.
59% of enterprises confirm or suspect the presence of shadow AI within their environments.
51% of enterprises use 11 or more security scanning and vulnerability management tools.
73% of enterprises say AI-assisted development is increasing software velocity beyond the pace security teams can review.
70% of enterprises have confirmed or suspected vulnerabilities introduced by AI-generated code in their production systems.
73% of enterprises report extensive AI usage in their development processes.
78% of enterprises are piloting or deploying agentic AI systems capable of taking autonomous action.
46% of security teams at enterprises spend significant time triaging vulnerabilities that ultimately do not matter.