Palo Alto Networks finds 37% of organizations can revoke an AI agent's credentials

Revoking a credential is the crudest off switch there is, and it is the one Palo Alto Networks asked about. Its report also puts immutable audit logging of agent activity at 30% ^[5]. Read the two findings from the other side and 63% of organizations cannot cut an agent's credentials on demand, while 70% cannot produce a tamper-proof record of what the agent did before anyone thought to ask ^[2][3].

The timing is where the vault stops helping. Unit 42's incident response report puts the path from initial access to exfiltration at 25 minutes for AI-assisted attacks ^[6], and Palo Alto Networks says the fastest rotation policies measure in hours ^[8]. At an hourly rotation, the attack finishes with 35 minutes to spare before the credential changes ^[4].

The two survey numbers most likely to end up on a slide together do not share a denominator. The 40% is a share of agents with data access; the 37% is a share of organizations that say they can revoke ^[6]. Nothing in the post says how many organizations answered, who they were, or what counted as adopting an AI agent ^[15]. That last omission decides how much the adoption figure means, because one sanctioned pilot in one business unit puts a whole company inside it.

What the post describes is agents running on static API keys handed out of a vault, and it says AI agents need cryptographic identity instead ^[13]. Growth will not relieve the pressure. 77% of organizations expect machine identities per human to keep climbing ^[7], and the ratio already grew about 33% in a year ^[1].

The thing to fix by Monday is three fields per agent in production: the named human who owns it, the credential it authenticates with, and the time from a decision to kill it to the moment it stops making calls. Measure that last one end to end. Anything slower than half an hour outlasts the intrusion Unit 42 timed ^[6].

Palo Alto Networks sells the long version of this as a five-level maturity index, opened at its Impact 2026 conference in Austin, and the post concedes that most enterprises will not sit at a single level ^[9][10]. The level-one KPI is the percentage of secrets inventoried across cloud, on-premises, CI/CD and SaaS environments, with the vendor's own Idira Discovery and Context named as the tool for surfacing the unmanaged ones ^[11][14]. On that first metric the post writes: "If you can't answer this with a number, you're still at level 1." ^[12]