The State of AI Security & Governance: 2025 Report

As generative and agentic AI move from pilot to production, mature governance has become the strongest predictor of organizational readiness. This CSA and Google Cloud Security report reveals how security leaders are stepping up as early adopters—using AI to strengthen defenses while building the frameworks necessary to manage critical data risks.

First name

Last name

Business email

Calling Code

Business phone

Job title

Company name

Sign me up to receive news, product updates, event information, and special offers about Google Cloud from Google.

I understand my personal data will be processed in accordance with Google's Privacy Policy.

The Maturity Multiplier: Organizations with formal governance are twice as likely to adopt agentic AI and three times as likely to train staff on AI security tools.
Security Leads the Way: Over 90% of security teams are testing or planning to use AI for threat detection, red teaming, and access control.
The Multi-Model Shift: Enterprises now use an average of 2.6 models. Learn why Gemini has captured 48% adoption as organizations leverage multi-model strategies to balance innovation with data governance and security risk.
Top Concerns: 52% of organizations cite sensitive data exposure as their primary security risk, far outweighing AI-specific threats like prompt injection.