Identity attacks aren't just on the rise, they're changing. Fast. Discover why being “prepared” is often a mirage of compliance that dissolves against real-world, identity-driven attacks, and how innovative leaders are adopting AI and automation to turn the tide.
Leaders agree: We’re at a turning point in identity security. Legacy approaches leave organizations exposed to real threats, like dormant accounts and lateral attacks. Embracing AI isn’t optional anymore, it’s essential to stay secure, innovate, and thrive.
of Identity leaders rate themselves as “prepared” to prevent identity-based attacks.
of organizations managed to navigate the last year without a significant, identity-related incident.
of leaders believe that AI will be pivotal in their detection and response efforts over the next 2 years.
Download the full report: AI, Automation, and Risk in 2026: Identity at a Breaking Point and dive into the following topics:
How attackers are leveraging identity as their primary entry point
Identity attack methodology trends for 2025
Growing risk from non-human identities
Threat Landscape Analysis
Threat Landscape Analysis
Attack Vector Anatomy
Global Regulatory Map
The report is Lumos’ proprietary research into the state of Identity security, covering attack patterns, technology adoption, and the use of AI to discover, mitigate, and eliminate Identity risk. It explores emerging trends, real-world challenges, and practical recommendations for security and IT leaders navigating increasing identity complexity.
The report is based on survey data from 133 survey respondents from organizations ranging between 500 to over 10,000 employees. Data was collected in November 2025, covering the scope of the previous year.
Yes! The report contains detailed recommendations and proactive steps that identity leaders can take to improve their organization’s identity maturity and security posture. The report highlights common attack methodologies, areas of risk and exposure, and ways to mitigate identity risk.
The report is grounded in independent research, industry data, and real-world identity challenges. While it reflects Lumos’ perspective on the future of identity, the insights and recommendations are designed to be broadly applicable across tools, platforms, and maturity levels.
The report covers key topics including identity governance and administration (IGA), AI-driven access reviews, non-human identities, least-privilege enforcement, compliance and audit readiness, and how AI is enabling more autonomous identity operations.
AI is transforming identity governance by shifting it from manual, reactive processes to automated and risk-aware decision-making. AI can analyze access patterns, detect anomalies, recommend access changes, and help teams enforce least privilege at scale—reducing risk while improving operational efficiency.