Weak IAM Affects Up to 98% of Cloud Environments
TechTarget, Tuesday, August 19th, 2025
Intruder's 2026 index finds weak identity and access management in 80-98% of cloud accounts.
Intruder's 2026 Cloud Security Index reports weak identity and access management affecting between 80% and 98% of accounts across AWS, Azure, and Google Cloud.
Each platform fails differently: AWS shows the highest prevalence of misconfiguration in five of six categories, while Google Cloud has the lowest rates in four.
Weak IAM worsens with scale, hitting 87% of small and midsize businesses, 95% of midmarket organizations, and 98% of large enterprises. Remediation timelines also vary by size, from 8 to 16 days at smaller organizations to a 35-day peak among midmarket firms.