43% of enterprises have no capability to build a threat profile around someone actively being targeted.

Nearly seven in ten enterprises describe their digital risk program as unaware, reactive, or still developing.

Only 16% of enterprises have formal protection covering most or all employees.

AI adoption reaches 75% among organizations that rate themselves at the highest maturity levels, compared to 43% among lower-maturity programs.

97% of US-based physical security operations professionals are either currently using AI or actively evaluating it for security operations.

Only 5% of enterprises ever trace brand impersonation back to a full campaign.

Nearly 30% of organizations rely on manual device health checks instead of fully automated monitoring systems.

84% of enterprises experienced material digital risk incidents in the past year.

Only 7% of enterprises describe their digital risk program as "leading."

96% of enterprises have no automated way to stop a hijacked AI agent.

44% of enterprises say AI-generated attacks are already indistinguishable from legitimate activity.

Large enterprises report false alarm rates approaching 44%.

53% of enterprises had an executive or employee impersonated in the past year.

53% of enterprises report manual remediation as their top cost category for digital risk.

43% of enterprises report that more than half of employees use AI agents regularly.

24% of enterprises rely on human-in-the-loop models for most AI agent tasks.

47% of enterprises experienced a security incident involving an AI agent in the past year.

53% of enterprises have had AI agents exceed their intended permissions, leaving them vulnerable to increased risk.

68% of enterprises report high confidence in their visibility into AI agents.

82% of enterprises have discovered previously unknown AI agents in the past year.