Major security vendors CrowdStrike, Cisco, and Palo Alto Networks unveiled agentic SOC tools at RSAC 2026 as adversary breakout times plummet to 27 seconds, but an 80-point gap remains between AI agent pilots and production deployments due to accountability concerns.

CrowdStrike CEO George Kurtz revealed that average adversary breakout time has dropped to 29 minutes from 48 minutes in 2024, with the fastest recorded at just 27 seconds, leaving defenders minimal response windows.

CrowdStrike sensors now detect over 1,800 distinct AI applications running on enterprise endpoints, representing nearly 160 million unique instances that generate massive volumes of detection and identity events.

Cisco found that 85% of enterprises have AI agent pilots underway, but only 5% have moved agents into production—an 80-point gap driven by security teams' inability to answer critical questions: which agents are running, what are they authorized to do, and who is accountable when they fail.