Armadin Finds 88% of Severe Exposures Missing From External Data

Armadin said in a press release that 88% of its critical and high security findings did not appear in external intelligence sources. Its report draws on agentic attacks conducted against live production systems at global enterprises across nearly a dozen industries during 2026.

The company found that 96% of clients had at least one critical finding. Nearly 70% of severe findings were accessible without an account, while 71% of credentials used in attack chains belonged to nonhuman identities. More than half of the documented attack chains ended with access to sensitive data, administrative control, or both.

Armadin said organizations could address 93% of severe findings without action from outside vendors. About 49% required no application code changes, while 43% could be resolved through a setting or policy change.