Identity APM Has Gone Mainstream. The Hard Work Is Just Starting.

Executive summary: SpecterOps summarizes an Omdia survey showing rapid adoption and increased spending on identity-based Attack Path Management (APM) but highlights a structural prioritization gap—organizations have tools and findings but struggle to decide what to remediate first. The report emphasizes that AI agents create new identity and trust relationships that expand attack paths, and argues the solution is operational (inventory, ownership, short-lived credentials, continuous validation, prioritized remediation) rather than purely technological.