New study reveals a dangerous gap between enterprise confidence and preparedness for the next wave of autonomous, AI-driven attacks.
Arkose Labs, the leading fraud prevention, device ID and bot management company, has released a new study titled AI Maturity in Cybersecurity, reveals that while enterprises are rapidly adopting AI for cybersecurity, a dangerous gap exists between their perceived readiness and the emerging threat of Agentic AI. The findings show that while confidence is high, most organizations are not prepared to distinguish between malicious and legitimate AI agents, creating a significant market opportunity.
Also Read: CIO Influence Interview with Duncan Greatwood, CEO at Xage Security
“The rapid evolution of agentic AI has exposed a critical gap in enterprise readiness. Most organizations lack the tools to distinguish between legitimate and malicious automation,” said Kevin Gosschalk, Founder and CEO of Arkose Labs.
“The rapid evolution of agentic AI has exposed a critical gap in enterprise readiness. Most organizations lack the tools to distinguish between legitimate and malicious automation,” said Kevin Gosschalk, Founder and CEO of Arkose Labs. “This study underscores the urgency of building robust identification frameworks , as the ability to navigate these challenges will define the leaders of tomorrow’s cybersecurity landscape.”
“The results of this study make it clear that while enterprises are optimistic about AI, there is still much work to do to address the complexities and risks that come with rapid adoption,” said Frank Tuerel, Chief Operating Officer of Arkose Labs. “It’s a pivotal moment for the industry to critically assess how we prepare for emerging, AI-powered threats.”
Widespread AI Adoption Boosts Security Confidence
The research indicates that AI adoption in security operations is now nearly universal, fueling a surge in preparedness against known threats.
- 8 in 10 enterprises report an improved cybersecurity posture as a result of AI adoption.
- 44% of companies now feel very well prepared for AI-powered volumetric attacks, a sharp increase from 2024.
- Enterprises are dedicating one-third of their cybersecurity budgets to AI, with US firms investing heavily in training and external expertise.
Overconfidence Creates a Significant Gap for Agentic AI Threats
This confidence may be dangerously inflated when confronted with the next wave of AI-driven threats. The study reveals a significant market paradox between perceived readiness and the urgent need for new capabilities.
- Over half of enterprises are already using Agentic AI.
- 7 in 10 warn that Agentic AI will create fundamentally new security risks.
- 98% of enterprises feel confident in their ability to distinguish between human and AI agents, yet 71% simultaneously state it is critical to urgently develop this capability.
This urgency to develop “Know Your Agent” (KYA) safeguards, coupled with high trust in AI vendors, signals a clear opportunity for advanced security solutions. While enterprises are increasingly aware of evolving threats like AI-powered bots and API abuse, their focus has yet to fully shift to the agentic systems that can operate autonomously to execute complex attacks. The data suggests that as Agentic AI becomes more prevalent, the ability to accurately identify and block malicious automated activity will become the defining factor in a successful defense strategy.
Catch more CIO Insights: The CIO’s Role In Data Democracy: Empowering Teams Without Losing Control
[To share your insights with us, please write to psen@itechseries.com ]
