ServiceNow Research Study Warns Security Leaders: Ungoverned Agentic AI Exposure Is Compounding Inside Enterprises

ServiceNow, the Super Intelligence Control Tower for business reinvention, warned that ungoverned agentic AI exposure is compounding inside the enterprise, based on new global research of senior security leaders. The warning comes as AI agents move out of pilots and into the systems that run hospitals, airports, factory floors, financial institutions, and beyond. Environments where a single ungoverned action can mean devastating impacts on society. Nine in ten global organizations have already experienced an agentic AI security incident in the past year, and only 36% of those businesses contained it in under 24 hours.

Also Read: CIO Influence Interview with Srinivasan Panchapakesan, Chief Platform Officer at Hexaware

“The agentic incidents making headlines this year are a warning about what can happen when AI is deployed without the right controls,” said Ben de Bont, CISO, ServiceNow. “Organizations shouldn’t have to choose between moving quickly and managing risk. The ones that get this right will build governance into how they deploy agents from the start, so they can realize the benefits of AI without losing visibility or control.”

Inside the AI chaos: what the research found

According to Deployed but ungoverned: the state of agentic security, while many security leaders self-assess as having established agentic security postures, only 13% have defensible programs when measured against five key domains: attack surface, accountability, security by design, visibility, and audit readiness.

Most agentic AI is currently governed by legacy frameworks and human-driven systems, with less than half of organizations using governance frameworks that cover key elements of AI agent deployments. Just 44% of security teams globally design security into an agent’s development before it’s built, which means for the majority, permissions and guardrails are being implemented on an ad-hoc, after-the-fact basis. That’s reactive by design.

• Scale and blind spots compound organizations’ exposure
  • Forty-nine percent of organizations now run between 100 and 999 AI agents, and 35% run more than 1,000.
  • Fifty-seven percent of security teams have a full, accurate record of every AI agent in production and have processes to track changes.
  • Twenty-nine percent of security teams found AI agents running in production that had never been registered or known. What gets missed can surface later as shadow AI, discovered only after it’s already been running unsupervised.

• Machine-speed risk is outpacing human-speed response
  • Seventy-six percent of organizations say they maintain a complete, current map of every agent’s access, but only 19% can see more than 90% of their agents in real time.
  • Even organizations that can see a problem often can’t stop it fast enough. Two-thirds (66%) cannot act automatically when an agent behaves anomalously, which means a human still has to intervene before anything changes.

Closing the gap to restore control

ServiceNow’s Autonomous Security offering helps move companies from reactive, fragmented security to enable prevention-first, autonomously governed security that can operate faster than AI creates risk. Operating on the Shift Zero imperative, ServiceNow is supporting organizations to achieve as close to zero exposure at all times as possible, enabling enterprises to answer, with proof, what systems are doing, why, and who/what is accountable, while AI moves as fast as the business needs. This includes the rules and guardrails to safely adopt agentic AI, including a kill switch and AI Passport.

“Innovation and security have to move together, not in sequence,” said Nadir Izrael, GVP, Cybersecurity and Risk, ServiceNow. “That’s what Autonomous Security and Shift Zero are built for: governance embedded the moment an agent is built or deployed, not bolted on after. Security that runs at machine speed stops being the brake on AI adoption and becomes what makes scaling it safe.”