non-human identity

Five independent research teams surveying 6,650+ enterprise leaders arrived at the same conclusion: the AI agent security crisis is measured, quantified, and widely ignored. AvePoint found 88.4% of organizations had AI agent security incidents. The Economist Enterprise study pushed it to 98%. Yet 82% of executives believe their policies protect them. Here's the confidence gap assessment and governance maturity model every CISO needs this quarter.

Machine identities outnumber humans 109:1 in the average enterprise, yet 57% of that identity estate is invisible to existing IAM tools. Palo Alto Networks surveyed 2,900 cybersecurity decision-makers and found 9 out of 10 organizations experienced identity-related breaches in the past year. AI agents are making the crisis exponentially worse — they discover and exploit ungoverned credential paths faster than any human attacker. Here's the maturity assessment and 90-day roadmap every CISO needs before Q4 agent deployments.

A four-year-old prototype credential at competitive intelligence vendor Klue gave attackers access to OAuth tokens for 195 customer organizations — including Huntress, Recorded Future, HackerOne, LastPass, Tanium, Jamf, Snyk, and OneTrust. The third major Salesforce OAuth supply chain attack in twelve months, the Klue breach exposes a structural blind spot in enterprise SaaS security: non-human identities with persistent, broad API access that no one is monitoring. SaaS integration risk assessment matrix and supply chain incident response playbook inside.