Only 33% of security leaders are confident their current identity provider can stop identity-based attacks.

This gap in confidence reflects what I observe regularly: teams face significant challenges as identities multiply and AI-driven threats grow.

Duo’s 2025 Identity Security Trends report highlights key numbers behind these challenges:

✔️ 94% of leaders agree that the growing complexity of their identity infrastructure actually reduces overall security.

✔️ 75% acknowledge they don’t have complete visibility into identity vulnerabilities across their organisations.

✔️ 87% see phishing-resistant MFA as essential, yet only 30% feel very confident about their phishing defenses.

✔️ 61% want to move towards passwordless access but expect to encounter implementation hurdles.

✔️ 86% are concerned about insufficient controls over contractor and third-party access.

These figures make it clear why prioritising a security-first IAM approach is critical. Treating identity security as a core foundation—not an afterthought—is the best way to close the gaps attackers seek to exploit.