FusionAuth’s survey of 300+ technology and security leaders argues that AI adoption has outpaced identity controls: widespread AI, shadow AI and non-human identities are creating new access risks.

The practical lesson is to treat every AI agent as a governed identity—using least-privilege access, strong tenant isolation, credential controls, audit trails, monitoring and rapid revocation.