Agentic security: Enterprises enforce agent permissions two-thirds of the time — and isolate high-risk agents less than one in five
Across 116 enterprises, agents are in production and so are the incidents: A majority have already had a confirmed agent security event or a near-miss. Two-thirds of enterprises enforce scoped permissions at runtime. Barely one in five isolates its highest-risk agents, making containment the weakest layer in the stack precisely as autonomy scales. Credential sharing persists across nearly…
Recent VentureBeat Pulse Research reveals that while two-thirds of enterprises enforce scoped permissions at runtime for their AI agents, only one in five isolates their highest-risk agents. This containment gap is causing growing concerns over the security of agentic systems. Credential sharing is prevalent across most agent fleets, with 53% of enterprises experiencing confirmed security incidents or near-misses.
Despite the heightened risk, only 18% of enterprises isolate their most critical AI agents. The majority of enterprises rely on security controls provided by hyperscalers or model providers, leading to a growing lack of confidence in their defenses. As AI-armed attackers may now be ahead of enterprise defenses, 74% of enterprises plan to adopt, add, or replace agent security tooling within the next year, despite overall satisfaction scores of 4.29 out of 5.
Written by urgent.news from VentureBeat's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
