2026 report

The State of AI in Enterprise Security

Senior security leaders on the hype, the trust gap, and what would actually move them.

Tired of hearing — vendor claims security leaders distrust mostThe opening — where leaders would point AI firstThe centerpiece — CISOs and practitioners fear different things

Page 1 of 3

Three numbers that jumped out

18%

Nearly one in five say nothing is blocking them — they're already running AI-driven security automation.

6%

Only 6% say AI means hiring fewer people. Teams are flat or growing, and leaders plan to redeploy staff.

77%

More than three-quarters of CISO-level leaders name an external threat as their top AI risk.

From the report

From the CISO chair

“Calling something hype is not the same as writing it off. Most of us are saying we have seen the demo, and we are still waiting for the part where it survives contact with our environment.”

Yonesy Núñez
Yonesy NúñezCISO, Surf AI

Download the full report