About the report

Agents now change infrastructure faster than the governance built to check it. Deploy-time policy only sees changes that come through a pipeline, and human review can’t keep up. This report gives platform teams five steps, in order, to govern what’s actually running, plus three numbers that show whether it’s working.

Key takeaways

• Agents are already changing your cloud. 65% of practitioners use AI to generate infrastructure as code, and 43% name agents bypassing security controls as a major threat.

• Human review can’t keep pace with agents. More than twice as many teams rely on a person reading every change (35%) as on automated validation loops (17%).

• Order matters. Give agents write access before you can see what’s running, or know who owns it, and you add to the drift you’re trying to fix. The report shows where to start and what to track from month one