Visa demonstrated how an AI model can find vulnerabilities in payment networks, highlighting enterprise engineering capabilities. A concerning 53% of enterprises have experienced agentic security incidents or near-misses. Despite this, 65% enforce agent permissions, but only 18% isolate high-risk agents, and a mere 8% combine both. Enterprises heavily rely on provider-native security, with 92% defaulting to hyperscalers and AI platform providers. The research indicates a widening containment gap between enterprise needs and implemented security measures. Interestingly, enterprises that experienced incidents rate their security tools higher than those who haven't. This suggests that simply being saved from a breach leads to a trust premium, a sign of a nascent market. Enterprises that isolate their highest-risk agents are actually less satisfied with their tools. This dissatisfaction drives them towards more robust engineering efforts like Visa's. A significant 49% grant each agent a unique identity, yet only 11 of them also implement isolation. This focus on identity over isolation is a critical flaw, as demonstrated by incidents where valid credentials were misused.