Companies are not looking before they're leaping into the AI playpen

Jump to main content

Search

REG AD

Devops

Companies are not looking before they're leaping into the AI playpen

93% of organizations report infrastructure incidents attributable to AI

Thomas Claburn

Thomas<br>Claburn

Senior reporter

Published<br>wed 24 Jun 2026 // 23:55 UTC

AI vendors have been pushing organizations to board the AI hype train as it races by at full speed. But many of the companies doing so, unable to move quite that fast, have stumbled along the way.<br>According to a survey of 406 IT decision makers, 93 percent of organizations have experienced AI-caused infrastructure incidents, but a mere 19 percent had the necessary governance to respond.<br>The survey, conducted in April by Panterra Group at the behest of Spacelift, forms the basis of the orchestration platform's 2026 State of Infrastructure Automation report [PDF]. It posits an "AI Readiness Gap," meaning that companies are adopting AI before they're ready to do so and are paying the price.

REG AD

"The findings are unambiguous: organizations are using AI to generate infrastructure code at a rate their governance frameworks were never designed to handle,” said Paweł Hytry, co-founder and CEO of Spacelift, in a statement.

REG AD

The consequences of these incidents, respondents say, consist of reworking AI-generated changes (37 percent), security misconfigurations that reached production (36 percent), compliance violations (36 percent), infrastructure drift attributable to AI changes (35 percent), and incidents caused by agentic systems (33 percent).<br>The report characterizes 24 percent of organizations as "exposed."<br>"Exposed organizations are using AI, but without the governance or frameworks to support it safely," the report says. "What they are doing diverges significantly from what they have in place to manage it."<br>And then there are the "fragmented" entities, 32 percent of respondents, that use AI sometimes, unevenly, and have some governance, but no coherent plan.<br>The two remaining categories, "outpacing" and "pioneer," at 25 percent and 19 percent respectively, describe heavy AI adoption that's ahead of business controls, and AI use in conjunction with structural discipline, respectively.<br>In terms of AI-caused infrastructure incidents, 97 percent of "exposed" organizations reported at least one such snafu. Meanwhile, among "pioneer" entities, 17 percent said they had no AI-related infrastructure incidents.

MORE CONTEXT

OpenAI gets chippy with Broadcom

Microsoft uses AI to link two malware operations in racketeering suit

Windows 11 turns five, leaving some important lessons for Microsoft

Loop engineering, latest AI buzzword, still needs humans in the loop

Spacelift, an infrastructure-as-code (IaC) platform, contends that automated validation accounts for the difference here because it outperforms manual code review.<br>Across the board, respondents report greater use of AI for generating code – 82 percent say between 25 percent and 74 percent of their code was created with help from AI.

REG AD

This has a downstream effect on the infrastructure teams that deploy said code: 40 percent of respondents say security vulnerabilities are showing up more frequently, 40 percent say governance has become more challenging, 37 percent cited higher change volume, 35 percent see strains on the development pipeline, and 35 percent report infrastructure drift.<br>Spacelift's report calls out the cognitive dissonance – a blameless formulation of "self-delusion" – among organizations adopting AI: 86 percent say they can govern it, while only 30 percent actually have a formal AI governance policy in place.<br>The report advises organizations to start paying attention to AI-oriented metrics that few organizations bother to track, specifically the volume of AI-generated IaC in deployment pipelines, error rates due to AI-generated changes, and infrastructure drift attributable to AI changes.<br>It also stumps for greater automation through IaC, for building governance to cover that automation, getting AI-generated code into governed IaC orchestration workflows, and planning for the governance of AI agents. ®

ai<br>devops<br>spacelift<br>governance

REG AD

systems

Micron locks in historically high memory prices for five years

Big buyers agree to deals that will deliver historically enormous margins and profits

Devops

Companies are not looking before they're leaping into the AI playpen

93% of organizations report infrastructure incidents attributable to AI

ZTE and China Telecom Guangdong advance cross‑vendor IP network simulation pilots, paving the way for intelligent network operations

PARTNER CONTENT: Leveraging >95% digital twin fidelity and multi-vendor collaboration to eliminate network change risks and achieve zero-error O&M

Security

The hits keep on coming for Cisco vulnerabilities

CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we...