Gartner’s secure AI Hype Cycle predicts twice the incidents without preproduction offensive GenAI testing

Gartner’s secure AI Hype Cycle predicts that enterprises skipping preproduction offensive testing of generative AI deployments will face twice as many cybersecurity incidents by 2028 as proactive users. That is a forecast, not a measured outcome.
Funding is already a constraint. Among organizations piloting or implementing offensive AI security technologies, 50% have either not secured funding or diverted money from existing cybersecurity initiatives. This finding describes surveyed adopters, not half of all enterprises.
Meanwhile, my count of the complete Priority Matrix puts 23 of 24 technologies at least two years from mainstream adoption. Security teams therefore need to control deployed agents before most specialist markets mature. The immediate questions are what each agent can do, which controls enforce its limits and what a new product would add.
Gartner’s Hype Cycle for Secure AI, 2026 (G00846820), published October 12, 2026, separates controls for employee AI use, enterprise-built applications and agents acting across systems. Those distinctions make it useful for testing a security architecture, not simply compiling a vendor shortlist.

















