State of AI Agent Identity 2026
New category. AI agents are non-human identities calling APIs at machine scale; existing IAM controls cover them poorly. Benchmarks reflect the early state of programs + the rapidly-growing identity-control gap.
Reviewed
2026-05-22
5 benchmarks · CC BY 4.0
Regulators
NIST AI RMF · EU AI Act (compliance) · evolving sector regulators
68%
Orgs lacking AI agent identity controls
Share of organizations that lack identity security controls for AI agents specifically. Only 45% apply the same privileged access controls to AI agents as they do to human identities; 33% have no clear AI access policies at all.
Source: CyberArk 2025 Identity Security Landscape · 2025
80:1
Machine-to-human identity ratio
Median ratio of machine identities (service accounts + API keys + AI agents) to human identities in mid-large enterprises. AI agent rollouts accelerate this dramatically.
Source: CyberArk 2025 Identity Security Landscape · 2025
14%
ObservationFormal AI agent identity programs
Share of mid-large enterprises with formalized lifecycle controls (provisioning, scoping, revocation, audit) for AI agent identities. Rapidly-emerging category.
Source: askmeidentity practice observations · 2026
3.4x
ObservationUntracked service accounts (ratio)
Median ratio of discovered service accounts (including AI agents) to documented service accounts on first PAM discovery scan. The undocumented majority is the single biggest privileged-identity gap as AI rolls out.
Source: askmeidentity practice observations · 2026
45%
Orgs applying privileged controls to AI agents
Share of organizations applying the same privileged-access controls (vault, monitoring, JIT) to AI agents as to human privileged identities. The other 55% are running AI agents with weaker controls than the humans they replace.
Source: CyberArk 2025 Identity Security Landscape · 2025
Cite this page
Reference our benchmarks in your reporting.
These benchmarks are licensed under CC BY 4.0 — free to cite, quote, and link to with attribution. Pick a format below.
askmeidentity. (2026). The State of Identity, live (v2026.05). Retrieved 2026-05-22 from https://askmeidentity.com/resources/state-of-ai-agent-identity/
"The State of Identity, live." askmeidentity, v2026.05, https://askmeidentity.com/resources/state-of-ai-agent-identity/. Accessed 2026-05-22.
@misc{askmeidentity_state_of_identity_2026_05, title = {The State of Identity, live}, author = {{askmeidentity}}, year = {2026}, note = {Version 2026.05, retrieved 2026-05-22}, url = {https://askmeidentity.com/resources/state-of-ai-agent-identity/} }