AI confidence just dropped 17 points in six months. That’s actually great news.
Our take
The recent dip in reported AI maturity confidence among IT leaders isn’t a cause for alarm; in fact, it signals a welcome dose of realism entering the AI deployment landscape. Six months ago, a seemingly optimistic 40% of organizations claimed AI maturity; now that number sits at 23%. Before interpreting this as a widespread retreat, consider the nuance revealed by JumpCloud’s Q3 2026 trends report, which surveyed 800 IT leaders across the U.S. and U.K. The decline isn't about losing faith in AI's potential, but rather a consequence of confronting the practical challenges that emerge when AI agents move beyond carefully controlled pilot programs and into real-world operational environments. This shift in perception is echoed in recent experiences, such as the complexities faced by Hugging Face's incident response team when utilizing AI models to analyze a security breach [Safety guardrails blocked Hugging Face's defenders, not the attacker, when an AI agent breached its systems], highlighting that even sophisticated AI tools aren’t a panacea for all security challenges. The emergence of AI infrastructure companies like Infinity, which recently secured $15 million in funding [Inference startup Infinity raises $15M from Touring Capital, OpenAI and Anthropic researchers], demonstrates the growing need for robust and scalable AI solutions.
The core of the issue, as JumpCloud’s research points out, lies in the stark difference between a pilot and production environments. A pilot allows for controlled testing of a single AI function, while production demands constant operation, access to sensitive systems, and decision-making impacting real workflows. This expanded scope necessitates a level of governance and oversight far beyond what's required for a pilot. Organizations are now facing uncomfortable truths: can they truly track every agent running in their environments? Do they understand the scope of each agent’s access? The ability to quickly diagnose unexpected behavior is crucial, and for many, the answer to these questions is unsettling. The report’s focus on “Zombie Agents” – non-human identities operating without proper governance – is particularly pertinent, underscoring a critical vulnerability as non-human identities increasingly outnumber human users within organizations.
What’s truly encouraging is that the organizations undergoing this recalibration are the ones actively engaging with AI at scale. They aren’t retreating from AI; they’re refining their approach. They're prioritizing unified IT environments, treating AI agents as governed identities, and measuring actual outcomes rather than simply counting deployments. This shift reflects a maturing understanding of AI operations – moving away from blind enthusiasm towards a more disciplined and responsible implementation strategy. The organizations demonstrating the most progress are not merely adopting AI; they are building the foundational infrastructure that will enable sustainable and trustworthy AI adoption across their organizations, as evidenced by their ability to identify and address the critical gap between autonomy and oversight.
Ultimately, the decline in AI maturity confidence isn't a failure, but a necessary course correction. It suggests a market that's moving beyond hype and embracing a more pragmatic view of AI deployment. The focus now shifts to building robust governance structures, managing non-human identities effectively, and measuring the tangible value of AI initiatives. As we move forward, the question becomes: will organizations prioritize building this foundational infrastructure now, or will they continue to chase rapid deployment at the expense of long-term stability and security? The coming year will likely reveal which organizations have truly learned from this pivotal shift in perception and are best positioned to harness the transformative power of AI responsibly.
Presented by JumpCloud
The organizations losing confidence in AI are the ones most likely to get it right.
Six months ago, 40% of IT leaders described their organizations as mature in AI deployment. Today that number is 23%. Before you read that as a setback, consider what it actually reflects.
We recently surveyed 800 IT leaders across the U.S. and U.K. for our Q3 2026 trends report, and the data tells a consistent story: the organizations revising their self-assessment downward are overwhelmingly the ones that have moved AI agents from pilots into production. They’re not losing faith in AI. They’re running into the problems that only show up when agents are doing real work in real systems, and they’re being honest about what they found.
That kind of honesty is harder to come by than it sounds, and it matters more than the confidence number itself.
Deployment was the easy part
84% of organizations plan to expand AI use in IT operations over the next 6 to 24 months, so the drop in confidence isn’t a retreat. What it reflects is a more accurate picture of what production actually requires.
In a pilot, an AI agent does one thing in a controlled setting. In production, it accesses real systems, makes decisions that affect real workflows, and operates continuously, often without a human in the loop. The governance infrastructure that entails is materially different from what it took to get the pilot working. Most organizations built enough to ship. Fewer built enough to scale.
The IT leaders revising their self-assessment are confronting questions they didn’t have to ask at the pilot stage: Can we see every agent running in our environment? Do we know what each one can access? If an agent behaved unexpectedly last week, how long would it take to find out? For most organizations, at least one of those answers is uncomfortable.
The gap between perception and reality is where risk accumulates
The graphic above captures the structural problem. Across confidence, governance, and autonomy, the same pattern holds: deployment is moving faster than the controls built around it.
The organizations that have closed this gap share specific characteristics. They’ve consolidated their IT environments rather than adding tools to solve each new problem, because every additional platform creates another place where agent identity, access, and accountability can go unmanaged. They treat AI agents as governed identities rather than tolerated shadow processes. And they measure what AI actually produces, not just what it deploys.
The payoff is tangible. Organizations in the top tier of our maturity model are five times more likely to report no barriers to expanding their AI agents than the average organization. They are not more cautious about AI. They are more confident in it, because they built the foundation that makes confidence earned rather than assumed.
The governance gap has a specific shape
The hardest problem in enterprise AI right now is not capability. It is accountability, and the data makes the specific failure point clear: non-human identity governance is the least adopted AI security practice we measured, in place at just 21% of organizations.
Non-human identities now outnumber human users in 83% of organizations, and that population is growing fast. Yet most of those identities exist without the governance structures that every human employee has as a matter of course: no formal record, no named owner, no defined scope of access, no offboarding process when their purpose expires. They keep running. They keep accessing systems. They keep accumulating permissions. We call these Zombie Agents, and they are the service account problem of the AI era, operating at machine speed and in every department.
The accountability gap is where real risk lives. When a human employee takes an action, there is an implicit accountability chain. When an autonomous agent takes an action, that chain breaks unless it has been deliberately engineered. Most organizations have not yet engineered it, and the gap between the autonomy agents are being granted and the oversight structures in place to manage them is widening every month.
What the confidence drop is actually telling us
When AI maturity confidence was uniformly high across the market, that was worth worrying about. It meant most organizations hadn’t yet run into the hard parts. A selective drop, concentrated among organizations actively running agents in production, means the market is developing a more accurate picture of what AI operations genuinely require.
The organizations recalibrating are doing the work that makes long-term AI adoption possible: building identity infrastructure that covers agents alongside humans and devices, unifying the environments where governance needs to apply, and measuring outcomes rather than just counting deployments. They haven’t lowered their ambitions for AI. They have raised their standards for what it means to run it responsibly.
84% of organizations plan to expand AI use over the next two years. The ones that will do it well are honest enough, right now, to admit what they haven’t yet built.
JumpCloud’s Q3 2026 AI Readiness Research report (n=800 IT leaders, U.S. + U.K.) is available here. The report covers AI agent deployment stages, identity governance gaps, IT unification benchmarks, and budget realism across mid-market and enterprise organizations.
Rajat Bhargava is CEO and Co-founder at JumpCloud.
Sponsored articles are content produced by a company that is either paying for the post or has a business relationship with VentureBeat, and they’re always clearly marked. For more information, contact sales@venturebeat.com.
Read on the original site
Open the publisher's page for the full experience