Identity Report

AI, Automation, and Risk in 2026

Identity at a Breaking Point

Identity attacks aren't just on the rise, they're changing. Fast. Discover why being “prepared” is often a mirage of compliance that dissolves against real-world, identity-driven attacks, and how innovative leaders are adopting AI and automation to turn the tide.

Download the report:

Business email*
Thanks for submitting the form.

Inside the Research

Leaders agree: We’re at a turning point in identity security. Legacy approaches leave organizations exposed to real threats, like dormant accounts and lateral attacks. Embracing AI isn’t optional anymore, it’s essential to stay secure, innovate, and thrive.

Top Takeaways

0%

of Identity leaders rate themselves as “prepared” to prevent identity-based attacks.

0%

of organizations managed to navigate the last year without a significant, identity-related incident.

0%

of leaders believe that AI will be pivotal in their detection and response efforts over the next 2 years.

Identity is at a breaking point

Download Report

Download the full report: AI, Automation, and Risk in 2026: Identity at a Breaking Point and dive into the following topics:

How attackers are leveraging identity as their primary entry point

Identity attack methodology trends for 2025

Growing risk from non-human identities

Designed for Leaders

CISOs, CIOs, & Identity Leaders

Threat Landscape Analysis

Product Leads

Threat Landscape Analysis

Fraud Analysts

Attack Vector Anatomy

Compliance

Global Regulatory Map

FAQs

Frequently Asked Questions

What is the AI, Automation and Risk Report?

The report is Lumos’ proprietary research into the state of Identity security, covering attack patterns, technology adoption, and the use of AI to discover, mitigate, and eliminate Identity risk. It explores emerging trends, real-world challenges, and practical recommendations for security and IT leaders navigating increasing identity complexity.

Where does the data in the 2026 AI, Automation, and Risk Report come from?

The report is based on survey data from 133 survey respondents from organizations ranging between 500 to over 10,000 employees. Data was collected in November 2025, covering the scope of the previous year.

Does the AI, Automation, and Risk report include recommendations for improving Identity security?

Yes! The report contains detailed recommendations and proactive steps that identity leaders can take to improve their organization’s identity maturity and security posture. The report highlights common attack methodologies, areas of risk and exposure, and ways to mitigate identity risk.

Is the AI, Automation, and Risk in 2026 report vendor-neutral?

The report is grounded in independent research, industry data, and real-world identity challenges. While it reflects Lumos’ perspective on the future of identity, the insights and recommendations are designed to be broadly applicable across tools, platforms, and maturity levels.

What topics does the report cover?

The report covers key topics including identity governance and administration (IGA), AI-driven access reviews, non-human identities, least-privilege enforcement, compliance and audit readiness, and how AI is enabling more autonomous identity operations.

How is AI changing identity governance and access management?

AI is transforming identity governance by shifting it from manual, reactive processes to automated and risk-aware decision-making. AI can analyze access patterns, detect anomalies, recommend access changes, and help teams enforce least privilege at scale—reducing risk while improving operational efficiency.

Ready to transform your Identity?

Business email*
Thanks for submitting the form.