21.68% of organizations maintain overly permissive CI/CD token permissions.

May 27, 2026

21.68% of organizations maintain overly permissive CI/CD token permissions. — This cybersecurity statistic was published by Orca Security in May 2026. It covers topics including CI/CD Token Permissions, Access Control. The original data appears in 2026 State of Application Security Report . For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 4/7/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

21.68% of organizations maintain overly permissive CI/CD token permissions. This data was published by Orca Security and covers CI/CD Token Permissions, Access Control.

Where does this data come from?

This statistic comes from 2026 State of Application Security Report , published by Orca Security on May 27, 2026. You can view the original report at https://orca.security/lp/2026-state-of-application-security-report/.

What cybersecurity topics does this cover?

This statistic relates to CI/CD Token Permissions, Access Control. Browse more statistics on CI/CD Token Permissions or from Orca Security.

CYBERSTATS

21.68% of organizations maintain overly permissive CI/CD token permissions.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

12% of organizations maintain direct user-to-server administrative pathways, meaning a single compromised employee device can provide immediate access to high-value systems.

24% of organizations say they have no AI-specific access controls

16% of organizations enforce AI access controls consistently across the environment

Within organizations that track AI identities, 57% use the same system as for human identities.

67% of organizations using AI agents suspect those agents have already accessed data beyond their intended scope.

Within organizations that track AI identities, 43% authenticate and authorize AI identities using a separate system from human identities.

Browse by Topic

Stay Ahead of Cyber Threats