Cerby Flags Rising Cyber Risk From Disconnected Apps in New Ponemon Study

New updates have been reported about Cerby.

Cerby has released a joint research report with the Ponemon Institute warning that “disconnected” business applications, which sit outside centralized identity systems, are driving a material rise in enterprise cyber incidents and compliance failures. Based on a survey of 614 IT and security leaders, the study found that 77% of organizations suffered at least one security event tied to these unmanaged apps, with 44% incurring financial loss, 31% facing regulatory scrutiny, and nearly half reporting exposure of sensitive or confidential data.

For Cerby, the findings directly validate demand for its identity automation platform, which is designed to extend controls such as credential management, multi-factor authentication, provisioning, and governance to applications that lack support for standard protocols like SAML, OIDC, or SCIM. The report highlights that on average 30% of enterprise applications operate outside the identity control plane and that 40% of those are business-critical, meaning a typical environment of 284 apps leaves more than 80 systems unmanaged while the disconnected layer is still expanding faster than identity programs can catch up. Cerby’s chief strategy officer Matt Chiodi warned that this “growth without governance” is already leading to real-world breaches, audit failures, and higher compliance costs, underscoring a strategic shift for customers to treat disconnected apps as a core part of identity strategy rather than exceptions, and positioning Cerby’s platform as a key tool for reducing operational risk and improving audit readiness as organizations seek scalable coverage of their full application portfolio.