The enterprise security landscape has crossed a critical threshold. In 2026, 79% of organizations run AI agents in production environments. These agents are making autonomous decisions, querying critical databases, and executing transactions onbehalf of the business. Yet only 2% have deployed identity security tools purposebuilt to govern and secure them. This gap, between the breakneck speed of agenticdeployment and the lagging maturity of the identity controls meant to govern it, isthe central focus of the fifth annual Horizons of Identity Security report.
To quantify this shift, SailPoint surveyed 340 senior identity, IT, cybersecurity, and riskleaders across North America, Europe, Asia Pacific, and Latin America. Evaluatingorganizations across strategy, operating models, talent, and technical capabilities, the 2026 Horizons of Identity Security maturity model assesses where enterprises stand on a five-tier evolutionary scale:
