40% of organizations rank integrating generative and agentic AI into the business among their top three cybersecurity priorities.

58% of organizations use automated remediation tools for identity-related issues.

46% of organizations say improving attack path visibility and privilege relationships is a top cybersecurity priority over the next 12 months.

30% of organizations are actively researching or evaluating an identity-based Attack Path Management (APM) solution.

65% of organizations use risk-based prioritization for identity attack paths.

35% of organizations have fully implemented an identity-based Attack Path Management (APM) solution, up from 21% in 2025.

36% of organizations rank privilege relationships among their top three cybersecurity priorities.

43% of organizations rank attack path visibility among their top three cybersecurity priorities.

75% of organizations report increased identity security spending.

Identity, cloud, and credential compromise accounted for 85% of actionable security alerts.

96% of organizations have experienced identity-related security incidents

Infostealer malware led to the exposure of over 300,000 ChatGPT credentials in 2025.

Only 3.8% of companies made it through the last year without a significant identity-related incident

Over 60% of organizations cite automating identity lifecycle processes and scaling identity operations as their primary GenAI use cases.

76% strongly agree identity security is core to cybersecurity strategy.

69% of cybersecurity professionals in North America and Europe at companies with at least 1,000 employees believe that vulnerabilities in AI agents and autonomous systems pose a greater threat to their company's security and identity systems than human misuse of AI (2026).

91% of U.S. organizations report that at least half of their privileged access is always-on, providing unrestricted access to sensitive systems.

Organizations now manage machine identities at a ratio commonly exceeding 100:1, with some sectors approaching 500:1.

46% of organizations identify emerging identity complexities as a top investment priority for 2026.

Nearly 3 in 4 organizations in the United States have a fragmented IAM stack.