Start with Identity
Subscribe
Annual and topical

Reports

Independent, sourced analysis of where identity security stands. Every figure is attributed to a primary source. Free to read and cite with attribution, no email required and no sponsorship.

Report · 2026 · 12 min
The State of Identity 2026

Where identity security actually stands, in the numbers, and what to do about it

Credentials remain the dominant attack path: 22% of breaches start with stolen credentials and 88% of web-app attacks use them.