The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn’t

A 2026 State of Agent Security Report finds roughly 1,280 third-party products now embed AI, with about 282 sitting behind single sign-on and the rest largely invisible to identity infrastructure. Identity stacks can only govern what authenticates through them, leaving most embedded AI agents unmanaged by default. The report highlights a growing blind spot for enterprise security teams.