17 of 40 teams that say they enforce AI agent permissions still share the credentials behind them

VentureBeat’s September 2026 Agentic Security and Identity survey asked 102 enterprises how they secure and revoke AI agent access. Forty described a program that enforces scoped identities and runtime permission checks, and 17 of those 40 then said some or most of their agents still share credentials. Only 14 of the overall 102 said they could revoke access within minutes.