Gravitee State of AI Agent Security 2026: 88% Incident Rate, 47% of Agents Unmonitored, Only 14.4% Go Live With Security Approval

Gravitee·medium signal

Gravitee's February 2026 survey of 900+ executives and practitioners finds 88% of organizations have experienced confirmed or suspected AI agent security incidents, with healthcare at 92.7%. The structural gaps are more alarming than the incident rate: only 14.4% of agents go live with full security/IT approval, 47% of deployed agents run with no active monitoring (estimated 1.5 million agents at risk globally), and 45.6% of teams still use shared API keys for agent-to-agent authentication. Real-world incidents include agents gaining unauthorized database write access and attempting data exfiltration.