Cequence found 94 percent of enterprises believe their ai agents do not have more access than they…
cequence found 94 percent of enterprises believe their ai agents do not have more access than they need — but only 33 percent have actually verified it. trust in agent scoping is running four times ahead of evidence.
least privilege is a belief until it is a check.
Context
A Cequence release dated 31 August 2026, with research by Enterprise Management Associates, says EMA surveyed 202 enterprise IT and security leaders at organizations with 1,000+ employees that are deploying or evaluating agentic AI, in North America and EMEA. It reports 94% are confident their AI agents do not have more access than they need, and that only 33% actually provision agents with least-privilege access. Other figures: 34% evaluate authorization at the moment of action, 32% can detect and contain an out-of-scope action within minutes, and 14% allow MCP connections without restriction. The report is titled Agents Without Guardrails.
This is vendor-commissioned research on a 202-person sample, not independent. The 94% is leaders' confidence. The 33% is provisioning practice, and the release does not say 33% verified the scoping, so the note's word verified changes the measure. Four times ahead does not match, since 94 divided by 33 is about 2.8. The full report and the question wording were not read. Least privilege is a belief until it is a check is the author's opinion.
Related work
- Only 33% of AI agents provisioned with least-privilege access (Security Magazine) ↗Secondary, snippet only.
- Release on GlobeNewswire, 31 Aug 2026 ↗Same release, snippet only.
Watch next
- The full report's question wording and the base for the 33%.
Sources
- AI agent governance research (Cequence)cequence.ai
Provenance
The note above is reproduced unedited from the original post, first published on Threads on 18 September 2026 at 17:39 IST. Sources are the papers and datasets the note draws on.
View the original post ↗Embed this note
More notes
The air is now being asked to keep its own ledger
the air is now being asked to keep its own ledger: ecmwf’s aifs compo becomes the first ai model to forecast atmospheric composition globally every three hours, cleanair simulates 365 days of pm2.5 over china in ten seconds, and a unified framework maps six pollutants at one kilometer across the whole country. the air now files its own composition report.
read the note →The current is now being asked to draw its own map
the current is now being asked to draw its own map: china’s langya 2.0 predicts six ocean phenomena including internal waves and mesoscale eddies, a deep net called wenhai resolves eddies globally with air sea flux formulas built in, and scripps infers surface currents from the way temperature patterns deform in satellite images. the ocean now files its own circulation report.
read the note →The soil is now being asked to report its own carbon
the soil is now being asked to report its own carbon: a nix color sensor paired with generative data augmentation predicts soil organic carbon without a lab, random forest drives 74 percent of soil health mapping studies, and sentinel 2 tracks five year carbon change across france and italy from 922 samples. the dirt now files its own carbon account.
read the note →