Updated Oct 14, 2026
/Rocket Lab Neutron delay could cost $110 million quarterly/Bank of America Hires 1,000 Contractors to Patch AI-Exposed Software Flaws/DraftKings revenue hits $6.2 billion as stock falls 40%/Jerry Jones Says He Is Not Retiring From Dallas Cowboys Role/Oregon high school coach fired after 63-0 rout of rival/Ondas Falls 6% After Palantir Defense AI Launch/Rocket Lab Neutron delay could cost $110 million quarterly/Bank of America Hires 1,000 Contractors to Patch AI-Exposed Software Flaws/DraftKings revenue hits $6.2 billion as stock falls 40%/Jerry Jones Says He Is Not Retiring From Dallas Cowboys Role/Oregon high school coach fired after 63-0 rout of rival/Ondas Falls 6% After Palantir Defense AI Launch

Nine in 10 IT and C-suite leaders say identity management is a critical gap in agentic AI deployments

TINTON FALLS, N.J., July 16. Ninety percent of C-level and IT leaders surveyed say their organizations need identity-management improvements to address AI-related risks, according to findings released by Commvault (NASDAQ: CVLT). The survey, conducted by technology analysts and targeting senior decision-makers, identifies a specific exposure at the center of that concern: a surge of non-human identities gaining always-on access to corporate data.

By Hannah Voss2 min read
Share

Key takeaways

  • Ninety percent of surveyed C-level and IT leaders say their organizations need identity-management improvements to address AI-related risks, according to findings released by Commvault (NASDAQ: CVLT) on July 16, 2026.
  • The survey identifies non-human identities—such as AI agents—gaining always-on access to corporate data as the central exposure driving that concern.
  • Unlike a human employee whose access is tied to a login session, an AI agent holds its provisioned credentials continuously, making a misconfigured or compromised non-human identity a standing exposure.
  • The available summary does not specify the survey's sample size, full methodology, or the name of the technology analyst firm that conducted the research.
  • The survey frames identity management as the specific control point where agentic AI risk concentrates, positioning identity, access management, and data protection vendors to claim remediation spending.

TINTON FALLS, N.J., July 16. Ninety percent of C-level and IT leaders surveyed say their organizations need identity-management improvements to address AI-related risks, according to findings released by Commvault (NASDAQ: CVLT). The survey, conducted by technology analysts and targeting senior decision-makers, identifies a specific exposure at the center of that concern: a surge of non-human identities gaining always-on access to corporate data.

What the survey found

The research polled C-suite executives and IT leaders. Its central conclusion is that identity management, a control layer most enterprises built around human users, has become a recognized gap now that AI agents are operating inside corporate systems.

The mechanism is straightforward. A human employee's system access is tied to a login session. An AI agent's access is not. Whatever credentials an agent is provisioned with, it holds continuously, which makes a misconfigured or compromised non-human identity a standing exposure rather than a bounded incident. Nine in ten respondents told the survey their current controls are not adequate to manage that condition.

Non-human identities, as the survey frames them, include AI agents and similar automated systems that act on behalf of the organization without direct human involvement at each step.

Commvault and the source data

Commvault, based in Tinton Falls, N.J., and listed on Nasdaq as CVLT, describes itself as a provider of unified resilience. The company released the findings on July 16, 2026. The available summary does not specify sample size, full methodology, or the name of the technology analyst firm that conducted the research. Those details matter for gauging how broadly the 90% figure generalizes beyond the surveyed group.

Commercial implications

The survey frames identity management as the specific control point where agentic AI risk concentrates. Vendors in identity and access management and in data protection have a direct claim on remediation spending if organizations act on the gap they acknowledge.

Awareness of the problem is not what the data finds missing. Ninety percent of respondents have already concluded their controls fall short. What the survey does not answer is whether that acknowledgment moves budget.

Frequently asked

Who conducted and released the survey?

The findings were released by Commvault, a Tinton Falls, N.J.-based provider of unified resilience listed on Nasdaq as CVLT, based on research conducted by unnamed technology analysts polling C-suite executives and IT leaders.

Why are AI agents considered an identity-management risk?

An AI agent's access is not tied to a login session like a human employee's, so it holds whatever credentials it is provisioned with continuously, turning a misconfigured or compromised non-human identity into a standing exposure rather than a bounded incident.

What are non-human identities?

As the survey frames them, non-human identities include AI agents and similar automated systems that act on behalf of the organization without direct human involvement at each step.

What limitations does the reported data have?

The available summary does not disclose the sample size, full methodology, or the name of the analyst firm, details that matter for gauging how broadly the 90% figure generalizes beyond the surveyed group.

Does the survey show whether companies will spend to fix the gap?

No; while 90% of respondents have already concluded their controls fall short, the survey does not answer whether that acknowledgment moves budget toward remediation.