--- title: Every AI Agent Is an Identity. Most Organizations Don't... description: AI agents are increasingly connected to critical enterprise systems like Salesforce, GitHub, Snowflake, and production databases, yet most organizations lack... canonical: https://daily.dev/posts/every-ai-agent-is-an-identity-most-organizations-don-t-treat-them-that-way-lfuwbbpbz twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way | daily.dev og:description: AI agents are increasingly connected to critical enterprise systems like Salesforce, GitHub, Snowflake, and production databases, yet most organizations lack... og:url: https://daily.dev/posts/every-ai-agent-is-an-identity-most-organizations-don-t-treat-them-that-way-lfuwbbpbz og:image: https://api.daily.dev/og/posts/LfUwBbpbZ.png og:image:alt: Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 6 min read · 1 upvotes · 0 comments ## Summary AI agents are increasingly connected to critical enterprise systems like Salesforce, GitHub, Snowflake, and production databases, yet most organizations lack identity governance frameworks to manage them. A 2026 CSA survey found 82% of organizations discovered at least one AI agent created without security team knowledge, and 65% experienced a security incident involving an AI agent. The core problem is overprivileged agents with low visibility — agents often accumulate broad access early and are never properly scoped. Effective governance requires continuous discovery and inventory of agent identities, purpose-based permission scoping aligned to least privilege, and ongoing monitoring rather than point-in-time audits. The piece is sponsored by Token Security, which offers tooling for AI agent identity lifecycle management. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What percentage of organizations have discovered AI agents created without security team knowledge? 82% of organizations discovered at least one AI agent created without the knowledge of security, IT, or governance teams within the past year, and 41% found this happening multiple times, according to a CSA survey commissioned by Token Security. This points to widespread shadow AI agent sprawl operating outside existing identity and access governance processes. _Security teams tracking agentic AI risk trends can follow ongoing coverage on daily.dev._ ### How common are security incidents caused by AI agents in enterprises? 65% of organizations experienced a security incident involving an AI agent within the past year, and 61% of those reported exposure or mishandling of sensitive data as a result, per a CSA survey commissioned by Token Security. The risk stems from agents holding broad access to systems like CRMs, source code, and cloud credentials without matching governance. _Teams weighing agentic AI rollout risk can keep up with incident data like this on daily.dev._ ## Similar posts on daily.dev - [The AI Agent Identity Problem: Why Governance Is the Missing Layer in Enterprise AI](https://daily.dev/posts/the-ai-agent-identity-problem-why-governance-is-the-missing-layer-in-enterprise-ai-eve3dusim) · Snowflake · 0 upvotes · 0 comments - [Agentic AI Has an Identity Problem and Attackers Know It](https://daily.dev/posts/agentic-ai-has-an-identity-problem-and-attackers-know-it-fvn8olett) · BleepingComputer · 2 upvotes · 0 comments - [The Next Security Battleground: Agentic Identity](https://daily.dev/posts/the-next-security-battleground-agentic-identity-nvsuarfg5) · Security Boulevard · 0 upvotes · 0 comments - [The Replicant in Your Directory: AI Agents and the Identity Security Gap](https://daily.dev/posts/the-replicant-in-your-directory-ai-agents-and-the-identity-security-gap-cy7vcf5ua) · BleepingComputer · 0 upvotes · 0 comments - [AI Agents Are Privileged Users; Who Is Auditing Their Access?](https://daily.dev/posts/ai-agents-are-privileged-users-who-is-auditing-their-access--gprca2dhv) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cloud](https://daily.dev/tags/cloud), [#ai-agents](https://daily.dev/tags/ai-agents) [View this post on daily.dev](https://daily.dev/posts/every-ai-agent-is-an-identity-most-organizations-don-t-treat-them-that-way-lfuwbbpbz) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way","url":"https://daily.dev/posts/every-ai-agent-is-an-identity-most-organizations-don-t-treat-them-that-way-lfuwbbpbz","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/every-ai-agent-is-an-identity-most-organizations-don-t-treat-them-that-way-lfuwbbpbz"},"datePublished":"2026-06-19T13:14:11.459Z","dateModified":"2026-09-14T09:12:56.541Z","description":"AI agents are increasingly connected to critical enterprise systems like Salesforce, GitHub, Snowflake, and production databases, yet most organizations lack...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c595d3419bb9be8cec03e9e618b75b6c?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c595d3419bb9be8cec03e9e618b75b6c?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/every-ai-agent-is-an-identity-most-organizations-don-t-treat-them-that-way-lfuwbbpbz","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cloud,ai-agents","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/every-ai-agent-is-an-identity-most-organizations-don-t-treat-them-that-way-lfuwbbpbz#faq","mainEntity":[{"@type":"Question","name":"What percentage of organizations have discovered AI agents created without security team knowledge?","acceptedAnswer":{"@type":"Answer","text":"82% of organizations discovered at least one AI agent created without the knowledge of security, IT, or governance teams within the past year, and 41% found this happening multiple times, according to a CSA survey commissioned by Token Security. This points to widespread shadow AI agent sprawl operating outside existing identity and access governance processes. Security teams tracking agentic AI risk trends can follow ongoing coverage on daily.dev."}},{"@type":"Question","name":"How common are security incidents caused by AI agents in enterprises?","acceptedAnswer":{"@type":"Answer","text":"65% of organizations experienced a security incident involving an AI agent within the past year, and 61% of those reported exposure or mishandling of sensitive data as a result, per a CSA survey commissioned by Token Security. The risk stems from agents holding broad access to systems like CRMs, source code, and cloud credentials without matching governance. Teams weighing agentic AI rollout risk can keep up with incident data like this on daily.dev."}}]} ```