UpTrajectory Review
CNBC reports that the major cybersecurity vendors just turned in record quarters, and the driver is a shift in the threat picture: artificial intelligence. The piece's framing line is that security leaders are piling into identity security because AI agents now outnumber humans. The context a small-business operator needs: identity security means controlling which accounts, human or machine, can touch which systems and data. As companies deploy AI agents that log in, call APIs, and act on their own, every one of those agents becomes a new credential to steal, misuse, or hijack. The perimeter firewall mattered when attackers came through the network; now they come through a login.
This lands directly on the small-business operator, who usually has no security staff and a stack of SaaS tools, each with its own accounts, API keys, and AI features quietly switched on. If AI agents outnumber humans inside enterprises, the same ratio shift is happening inside your own operation, whether you counted it or not. Your bookkeeper uses an AI assistant. Your support inbox runs a bot. Your scheduling tool talks to your calendar. Each one is an identity. A record quarter for the security giants signals that the attack surface you actually need to defend has moved from your devices to your accounts, and most small shops still guard the devices.
What is genuinely new here is the causal claim: AI is not just another threat vector, it is the growth engine for the security industry itself. We agree with the direction but urge skepticism about the vendor framing. Security companies benefit from alarm, and 'AI agents outnumber humans' is a line that sells identity products. The under-reported angle is the small-business gap: enterprise identity platforms assume a directory, an admin, and a budget. A ten-person firm has none of those, so the record-quarter economics may widen the divide between firms that can buy identity defense and firms that cannot, leaving smaller operators as the soft target attackers route around enterprise controls to reach.
The second-order effects run through your vendor choices and your insurance bill. As identity security becomes the hot segment, expect your SaaS providers to bundle in 'AI agent management' features, often as a pricier tier, and expect cyber insurers to start asking how you govern machine accounts before they renew your policy. Downstream, the talent and budget flowing into identity security may drain attention from basics that still sink small firms, like phishing, weak passwords, and unpatched software. The cost of the AI boom is not only new attack paths; it is distraction from the old ones that still work.
Watch two things. First, whether the major platforms you already pay for, such as Microsoft 365 or Google Workspace, ship native controls for AI agent identities at no extra charge, since that will set your baseline protection. Second, whether insurers and regulators start treating unmanaged machine credentials as negligence. In the meantime, do the unglamorous work: inventory every AI tool and integration that holds a login or API key, turn off what you do not use, require multifactor authentication on everything, and review third-party access quarterly. Record quarters for security vendors are a signal, not a solution. Your accounts are the perimeter now; act like it.
“The cybersecurity leaders are leaning into identity security, a critical cyber segment, as AI agents outnumber humans” — CNBC Top News
Takeaway: Inventory every AI tool and API credential in your business, enforce multifactor authentication, and treat account access as your real security perimeter.
Excerpt from the original — CNBC Top News
The cybersecurity leaders are leaning into identity security, a critical cyber segment, as AI agents outnumber humans