AI Agent Security & Compliance Survey

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

We're researching how regulated companies are managing AI agent deployments today. Takes ~3 minutes. All responses are anonymous.

What best describes your primary role/org ?

CISO / Security Org

GRC / Compliance Team

CTO/ Engineering Org

Other:

Clear selection

What industry are you in?

Financial Services (banking, fintech, trading, insurance)

Healthcare & Life Sciences

Defense & Government

Other:

Clear selection

How many AI agents or automated AI workflows does your company currently have running in production?

None Yet

1-10

11-50

50+

Clear selection

What is the single biggest operational or compliance challenge your team faces with AI agents in production today?

We have no visibility into what our agents are doing at runtime

We can't produce evidence for auditors about what AI systems accessed or did

Getting agents through security review takes too long and blocks deployment

Our agents borrow credentials with no individual identity or accountability

We don't have a consistent way to enforce policy across agents in multiple clouds

Regulatory requirements (SOC 2, HIPAA, FedRAMP) are unclear for AI agent workloads

Other:

Which of the following keeps you up at night when it comes to AI agents accessing sensitive systems or data? (select up to 2)

Not knowing which agent accessed what data and when

Failing an audit because of an AI system we can't fully explain

Credentials being leaked or misused by an agent

Agents acting outside their intended scope without detection

Regulatory penalties from HIPAA, SOC 2, or FedRAMP non-compliance

None of these are concerns today

Have AI agents or automated systems ever created a finding, delay, or concern during a compliance audit or security review?

Yes, it has already happened

Not yet but we expect it to

No and we don't anticipate it

Clear selection

How long does it take to get a new AI agent deployment through security review and into production?

Less than 1 week

1–2 weeks

3–4 weeks

More than a month

Clear selection

Roughly how many engineering or compliance hours does your team spend per audit cycle producing evidence related to AI or automated systems?

Less than 10 hours

10 - 40 hours

40 - 100 hours

We don't track this

Clear selection

What are you currently using to manage security, identity, or compliance for AI agents? (select all that apply)

We built something in-house

We rely on our cloud provider (AWS IAM, GCP, Azure)

A third-party security or identity tool (name it in the box below)

Nothing yet, its an unsolved gap

Other:

If third-party, which tool?

How satisfied are you with your current approach?

Very satisfied

Somewhat satisfied

Unsatisfied, it covers some gaps but not all

Very unsatisfied, we have no real solution today

Clear selection

Imagine a platform that automatically gives every AI agent its own secure identity, logs every action with full attribution, and produces audit-ready compliance reports, deployable in three commands with no code changes, across any cloud. How would you feel if this type of solution did not exist?

Very disappointed , this would leave a critical gap

Somewhat disappointed, it would be a setback

Not disappointed, we can manage without it

Clear selection

If a solution like this existed today, what would be your primary buying trigger?

An upcoming audit or compliance deadline

A security incident involving an AI agent

A new regulatory requirement

Board or executive pressure on AI governance

Cost savings vs. building in-house

We wouldn't buy, we'd build it ourselves

Clear selection

What would you expect to pay annually for a platform like this?

Under $25,000

$25,000 – $75,000

$75,000 – $150,000

$150,000 – $300,000

More than $300,000

Clear selection

Would you be open to a 30-minute conversation on this topic?

Yes, please reach out

Send me more information first

No, not at this time

Clear selection

Name (optional)

Work email (optional)

Submit

Clear form

Never submit passwords through Google Forms.

This form was created inside of UC Berkeley.

Does this form look suspicious? Report

Forms