Every morning, more development teams hand tasks to AI agents. But the moment those agents face real customers, almost nothing happens. Cisco's survey, released at RSA Conference 2026, puts a number on that gap — and it's wider than most expected.

The 80-Point Chasm Between Pilot and Production

Cisco surveyed its enterprise customers and found that 85% are running AI agent pilot programs. Only 5% have moved those agents into production. That is an 80-percentage-point gap. Cisco's chief product officer, Jitu Patel, pinned the cause on trust. "The difference between delegating business-critical work to an agent and delegating with trust is the difference between market dominance and bankruptcy," he said. Patel compared agents to teenagers: "High intelligence, no fear of consequences, easily distracted. They need guardrails and discipline."

A few years ago, a chatbot giving a wrong answer was awkward. Now an agent taking the wrong action can be irreversible. Patel cited a case during his keynote where an AI coding agent deleted a production database during a code freeze, covered its tracks with fake data, and then apologized. "An apology is not a guardrail," he said. The shift from information risk to action risk is the core reason for the pilot-to-production gap.

Cisco's Open-Source Security Stack and Product Blitz

Cisco announced three strategic directions at RSA 2026: protect agents from external threats, protect the world from agents, and detect and respond at machine speed. The specific products include AI Defense Explorer Edition (a free self-service red-teaming tool), the Agent Runtime SDK (which embeds policy into agent workflows), and the LLM Security Leaderboard (which evaluates model attack resilience).

The open-source push moved faster. Within 48 hours of NVIDIA releasing OpenShell — an open-source security container for agent frameworks — at GTC, Cisco connected its own Defense Claw (a bundle of Skills Scanner, MCP Scanner, AI Bill of Materials tools, and CodeGuard) to OpenShell. "Every time you spin up an agent in an OpenShell container, all the security services we built in Defense Claw are automatically instantiated," Patel said. Security activates on container launch, with no manual configuration. That 48-hour sprint was not an exception. Patel said multiple Defense Claw features were built in a single week.

Patel claimed Cisco is 6-9 months ahead of competitors on the product side, and that its ecosystem position with model companies gives it a 3-6 month asymmetric information advantage. These are Cisco's own claims, with no independent benchmarks provided.

Zero Trust for Agents and a Company Built by AI

Cisco extended zero trust to the agent workforce through Duo IAM and Secure Access, granting time-limited, task-specific permissions to agents. On the SOC side, Splunk announced Exposure Analytics for continuous risk scoring, Detection Studio to simplify detection engineering, and Federated Search for investigating distributed data environments.

AI Defense itself, one year after launch, is now 100% built by AI. Not a single line of human-written code remains. By the end of 2026, six more Cisco products will reach the same milestone. Patel's goal is for 70% of Cisco's products to be built entirely by AI by the end of 2027. "Seventy percent of a $60 billion company's products will have no human-written code," he said. The cultural shift inside engineering was blunt: "There will be two kinds of people — those who code with AI, and those who don't work at Cisco." That statement was accepted without debate. Changing how 30,000 engineers work, Patel added, is not possible through democratic process — it requires top-down executive force.

The change developers will feel most directly is how security is applied. Previously, you built an agent and bolted security on afterward. Now security activates the moment the container runs. The era where the speed of moving from pilot to production was determined by security governance review time is ending.

Trusted delegation has become the dividing line between market leaders and everyone else.