{"slug": "enterprise-ai-agent-deployments-double-in-six-months-but-governance-lags-survey", "title": "Enterprise AI Agent Deployments Double in Six Months, But Governance Lags: Gravitee Survey", "summary": "Gravitee's third State of AI Agent Security survey, conducted by Opinion Matters in October 2026 among 900 senior technology leaders in the US (600) and UK (300), found that organizations running more than 150 AI agents rose from 7% to 16% since April 2026, while only 17% give each agent its own identity and fewer than one in ten have a named person formally accountable for agent actions. The share of respondents \"very prepared\" to respond to an agent incident fell from 47% to 29%, belief that current regulation covers agent risks dropped from 40% to 26%, and 52% reported an agent-related security or privacy incident in the past year. Only 6% can revoke a rogue agent's access within an hour and only one in eight organizations can fully reconstruct what an agent did 30 days ago, prompting Gravitee CEO Rory Blundell to call it \"an accountability gap, and it is widening as agent estates grow.", "body_md": "# Enterprise AI Agent Deployments Double in Six Months, But Governance Lags: Gravitee Survey\n\nGravitee, a vendor of AI agent management software, released the third wave of its State of AI Agent Security research on Monday, reporting that enterprise adoption of AI agents is accelerating faster than the controls needed to govern them.\n\nThe survey of 900 senior technology leaders in the United States (600) and United Kingdom (300), conducted in October 2026 by Opinion Matters, found that organizations running more than 150 agents jumped from 7% to 16% since the previous wave in April 2026. At the same time, only 17% of respondents said they give each agent its own identity, and fewer than one in ten have a named person formally accountable for what their agents do.\n\n\"Agents are making decisions and acting on their own inside enterprises, including banks, hospitals and government departments,\" said Rory Blundell, CEO of Gravitee. \"When one goes wrong, most organizations cannot say which agent it was, what it was allowed to do, or who is responsible. That is not a technology gap. It is an accountability gap, and it is widening as agent estates grow.\"\n\n### Confidence falling, controls static\n\nAs deployment expanded, confidence in the ability to manage incidents declined. The share of respondents who said they were \"very prepared\" to respond to an agent incident fell from 47% to 29%. Belief that current regulation covers agent risks dropped from 40% to 26%. The proportion of agents that are monitored and secured barely moved, from 56% to 57%.\n\nOver half of respondents (52%) reported an agent-related security or privacy incident in the past year.\n\n### Accountability gaps at every layer\n\nThe survey revealed significant shortfalls in control, monitoring, and intervention capabilities:\n\n- On average, only 51% of agents have policy enforced on what they can do.\n- Only one in eight organizations can fully reconstruct what an agent did 30 days ago.\n- Only 6% can revoke a rogue agent's access within an hour.\n\nNearly all respondents (97%) said they run agents that call other agents, and 40% connect to other organizations' agents. Yet only 27% define who is accountable across that chain.\n\nMore than half (58%) have already had to revoke an agent's access during a live incident. Afterward, only 25% held a named person responsible, and 17% changed nothing.\n\n\"Every organization we speak to wants to scale agents, and none of them want to slow down,\" said Linus Håkansson, CPTO of Gravitee. \"The answer is to manage agents the way you would manage any employee with access to sensitive systems. Give each one an identity, enforce what it can do, keep a record, and maintain the ability to revoke access within minutes when something goes wrong.\"\n\n### Sector differences\n\nThe report breaks out findings by sector:\n\n- **Government and public sector** : Have the largest fleets, with 25% running more than 150 agents, but the weakest traceability. Only 8.8% can fully reconstruct an agent action.\n- **Financial services** : Report the strongest controls, yet the most incidents (66%) and the least clarity on ownership (44% say accountability is unclear).\n- **Healthcare** : 63% had an incident, including exposed patient data.\n- **Telecommunications** : Only 21% have a documented process to pause or revoke an agent.\n\n### Framework and disclosure\n\nGravitee's Agent Accountability Framework defines six principles it says every agent in production should meet: Identity, Sponsor, Role, Authority, Oversight, and Recourse. The research states most organizations fall short on at least one.\n\nGravitee sells the Gamma platform, which spans Agent Management, API Management, Event Management, Authorization Management, and Identity & Access Management. The survey was commissioned by the company and compares results to its own prior wave in April 2026. Fieldwork for the current wave was conducted in October 2026.\n\nBlundell will discuss the findings at a Gravitee event at the National Gallery, London, on November 18. The full report is available at gravitee.io/state-of-ai-agent-security.\n\n## Sources\n\n1. [Enterprises Have Learned to Deploy AI Agents. They Have ...](https://markets.businessinsider.com/news/stocks/enterprises-have-learned-to-deploy-ai-agents-they-have-not-yet-learned-to-answer-for-them-1036737121) (markets.businessinsider.com)\n2. [Tallinn Digital Summit's first afternoon finds Europe slow ...](https://complexdiscovery.com/tallinn-digital-summits-first-afternoon-finds-europe-slow-where-ai-agents-are-fast) (complexdiscovery.com)\n3. [Cloudflare Says AI's Future Depends on Lower Costs](https://www.aitoday.io/cloudflare-says-ais-future-depends-on-lower-costs-a-33317) (aitoday.io)\n4. [Axon reports record Q3 2026 revenue of $909 million, up ...](https://investor.axon.com/2026-11-05-Axon-reports-record-Q3-2026-revenue-of-909-million,-up-28-year-over-year) (investor.axon.com)\n5. [Salesforce Dreamforce 2026: Complete Guide and Recap](https://valintry360.com/blogs/salesforce-dreamforce-2026-complete-guide) (valintry360.com)\n6. [Tiffany Wang](https://www.databreachtoday.co.uk/authors/tiffany-wang-i-7880) (databreachtoday.co.uk)", "url": "https://wpnews.pro/news/enterprise-ai-agent-deployments-double-in-six-months-but-governance-lags-survey", "canonical_source": "https://epyhia.com/enterprise-ai-agent-deployments-double-in-six-months-but-governance", "published_at": "2026-11-09 23:04:32+00:00", "updated_at": "2026-11-09 23:20:45.081354+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-policy"], "entities": ["Gravitee", "Opinion Matters", "Rory Blundell", "Linus Håkansson", "Gamma", "Agent Accountability Framework"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/enterprise-ai-agent-deployments-double-in-six-months-but-governance-lags-survey", "markdown": "https://wpnews.pro/news/enterprise-ai-agent-deployments-double-in-six-months-but-governance-lags-survey.md", "text": "https://wpnews.pro/news/enterprise-ai-agent-deployments-double-in-six-months-but-governance-lags-survey.txt", "jsonld": "https://wpnews.pro/news/enterprise-ai-agent-deployments-double-in-six-months-but-governance-lags-survey.jsonld"}}