Research: where organizations stand on AI agent readiness
1,400 organizations are scored so far, with an average of 42.4 out of 100. The numbers on this page are worked out from the saved reports and change when an organization is scanned again. The latest scan finished October 15, 2026.
Score spread
| Measure | Value |
|---|
| Average | 42.4 out of 100 |
|---|
| Middle score (median) | 39.0 out of 100 |
|---|
| Lower quarter ends at | 31 |
|---|
| Upper quarter starts at | 54 |
|---|
| Lowest score | 4 |
|---|
| Highest score | 98 |
|---|
| Score 60 or more | 218 (16 percent) |
|---|
| Score 80 or more | 35 (3 percent) |
|---|
| Score below 20 | 52 (4 percent) |
|---|
Readiness levels
| Level | What it means | Organizations | Share |
|---|
| Level 0, Closed | Declared agents are blocked from the public website. | 337 | 24 percent |
|---|
| Level 1, Tolerated | Pages load for an agent. Nothing is built for one. | 145 | 10 percent |
|---|
| Level 2, Legible | An agent can read and cite your content. | 821 | 59 percent |
|---|
| Level 3, Connectable | An agent can connect through an MCP server or a public API program. | 68 | 5 percent |
|---|
| Level 4, Trusted | A customer can authorize an agent with limited, revocable access. | 29 | 2 percent |
|---|
| Level 5, Native | Agents are a supported channel on web, API and voice. | 0 | 0 percent |
|---|
The six areas
| Area | Points | Average score | Organizations measured |
|---|
| Discoverability | 15 | 72.9 out of 100 | 1,400 |
|---|
| Protocol access | 20 | 10.1 out of 100 | 1,400 |
|---|
| Identity and delegation | 20 | 29.7 out of 100 | 1,400 |
|---|
| Web experience | 15 | 75 out of 100 | 1,400 |
|---|
| Voice and IVR | 20 | 39 out of 100 | 3 |
|---|
| Policy and governance | 10 | 40.1 out of 100 | 990 |
|---|
Checks most organizations miss
| Check | Fail | Partly pass | Pass |
|---|
| Poppy file for personal agents | 100 percent | 0 percent | 0 percent |
|---|
| Agent card for agent to agent calls | 100 percent | 0 percent | 0 percent |
|---|
| Browser tools exposed to agents | 99 percent | 0 percent | 1 percent |
|---|
| MCP server | 90 percent | 3 percent | 7 percent |
|---|
| Developer and data sharing program | 86 percent | 14 percent | 0 percent |
|---|
| Passkeys at sign in | 86 percent | 7 percent | 8 percent |
|---|
| Public API documentation | 85 percent | 14 percent | 1 percent |
|---|
| Documented delegate and data sharing controls | 82 percent | 17 percent | 2 percent |
|---|
| High assurance authorization profile | 81 percent | 10 percent | 9 percent |
|---|
| Third party access and data sharing rules | 78 percent | 17 percent | 5 percent |
|---|
Industries side by side
| Industry | Organizations | Average score | Highest score |
|---|
| Software | 124 | 61.4 out of 100 | Intercom, 91 |
|---|
| Payments and fintech | 39 | 56.8 out of 100 | Brex, 91 |
|---|
| Education | 5 | 56.6 out of 100 | Udemy, 73 |
|---|
| Logistics and shipping | 26 | 50.1 out of 100 | Flexport, 91 |
|---|
| Brokerages and investing | 23 | 48.6 out of 100 | Wealthfront, 72 |
|---|
| Lenders | 12 | 48.5 out of 100 | Freddie Mac, 72 |
|---|
| Lenders | 16 | 47.1 out of 100 | Zillow, 76 |
|---|
| Real estate | 12 | 46.3 out of 100 | Coldwell Banker, 64 |
|---|
| Telecom and internet | 34 | 45.2 out of 100 | Deutsche Telekom, 75 |
|---|
| Healthcare | 92 | 44.3 out of 100 | Headspace, 72 |
|---|
| Insurance | 56 | 43.8 out of 100 | Guardian Life, 76 |
|---|
| Media and entertainment | 80 | 42.5 out of 100 | Substack, 80 |
|---|
| Energy | 46 | 42.4 out of 100 | Schlumberger SLB, 78 |
|---|
| Pharma | 22 | 41.7 out of 100 | Moderna, 60 |
|---|
| Utilities | 48 | 40.9 out of 100 | Waste Management, 72 |
|---|
| Consumer brands | 112 | 40.8 out of 100 | Thumbtack, 77 |
|---|
| Industrial | 73 | 40.7 out of 100 | Siemens, 86 |
|---|
| Banks | 46 | 40.6 out of 100 | Paytm, 66 |
|---|
| Restaurants | 76 | 38.8 out of 100 | Peet's Coffee, 79 |
|---|
| Government | 4 | 38.5 out of 100 | Social Security, 51 |
|---|
| Retail | 103 | 36.1 out of 100 | Bonobos, 84 |
|---|
| Automotive | 55 | 35.9 out of 100 | Lucid Motors, 62 |
|---|
| Other | 213 | 35.3 out of 100 | Encr, 98 |
|---|
| Travel | 82 | 34.3 out of 100 | Booking.com, 73 |
|---|
What the leaders do that the rest do not
The top 350 organizations, those scoring 54 or more, are compared with the other 1050. These checks separate them most.
| Check | Leaders passing | Others passing |
|---|
| OAuth and OpenID metadata | 92 percent | 13 percent |
|---|
| PKCE and client registration | 69 percent | 7 percent |
|---|
| llms.txt guide for agents | 42 percent | 15 percent |
|---|
| High assurance authorization profile | 28 percent | 3 percent |
|---|
| MCP server | 25 percent | 1 percent |
|---|
| Home page for a declared agent | 92 percent | 69 percent |
|---|
| Sign in page loads for a declared agent in a browser | 61 percent | 39 percent |
|---|
| Same behavior for a declared agent and a standard browser | 91 percent | 72 percent |
|---|
The ten highest scores
- Encr, 98 out of 100, level 4
- Brex, 91 out of 100, level 4
- Flexport, 91 out of 100, level 4
- Intercom, 91 out of 100, level 4
- Plaid, 91 out of 100, level 4
- Heroku, 88 out of 100, level 3
- Netlify, 87 out of 100, level 4
- Olo, 86 out of 100, level 4
- Siemens, 86 out of 100, level 3
- Vercel, 86 out of 100, level 3