AIToday
Large Language ModelsAI Safety & AlignmentAI Business & IndustrySiliconANGLE AIPublished: Sep 30, 2026, 10:01 JST

97% of AI agents touch sensitive data; only 21% of firms confident

97% of AI agents touch sensitive data; only 21% of firms confident

3 Key Points

  1. What happened

    SailPoint research shows 97% of AI agents have access to sensitive data, yet only 21% of organizations are highly confident they can manage AI agent security risks.

  2. Why it matters

    This gap means sensitive data sits with agents that most organizations cannot govern, and SailPoint's own research places the confidence figure at just 21%.

  3. What to watch

    Whether SailPoint's Agentic Fabric, generally available for about two months, can close this gap, and what customers report about agents found and shut down.

WHO IT HITSChief information security officers and identity and access management teams at enterprises deploying AI agents face a governance gap: the vast majority of agents can reach sensitive data, but few organizations are confident they can manage the associated risks, according to SailPoint research.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

Palo Alto Networks' 2026 Identity Security Landscape report found organizations manage an average of 109 machine identities for every human identity, with AI agent identities expected to grow 85% over the next 12 months. The same research found that more than half of organizations cannot consistently enforce least-privilege access for service accounts across cloud, SaaS and on-premises systems.

On SailPoint's most recent earnings call, management described a proof-of-concept at a Fortune 500 company that uncovered more than 10,000 previously unknown AI agents and thousands of related risks. SailPoint CEO Mark McClain said enterprises need to know what data each agent can access, which human is accountable, and how to revoke access when necessary. SailPoint launched Agentic Fabric in May, which became generally available in August as part of its Identity Security solution.

The outcome hinges on whether identity tools like Agentic Fabric can deliver production proof and integrate with the broader agent stack, and on whether organizations can shift from quarterly reviews to continuous, automated governance for identities created and destroyed in minutes.

FAQ
How many AI agents have access to sensitive data?
According to SailPoint research cited in the article, 97% of AI agents have access to sensitive data.
How confident are organizations in managing AI agent security risks?
Only 21% of organizations are highly confident they can manage AI agent security risks, per SailPoint research.
How many machine identities exist per human identity?
Palo Alto Networks' 2026 Identity Security Landscape report found organizations now manage an average of 109 machine identities for every human identity.
SiliconANGLE AIRead Original Article

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleOpenAI's DevDay 2026: midrange model at one-fifth flagship price