Capital One study finds legacy tools block data protection

Legacy Security Tools Are Failing Data Protection, Capital One Software Report Finds, a study released on 7 May 2026 shows that traditional network and perimeter security tools are hindering adequate data protection even as data security becomes more critical. According to Capital One Software, 72% of security professionals agree data security is more critical than ever, yet organisations rely on legacy, siloed solutions that lack speed, flexibility, scalability and AI readiness.

The February 2026 study involved 211 North American director-level and above IT and analytics decision-makers and noted that over half lack full visibility of vulnerabilities, with many organisations using multiple tools to chase their data security goals—network security technologies at 70%, IAM at 65% and vulnerability management tools at 60%.

The report states that, while many organisations believe their current tools protect data, legacy tools impede adequate protection, and without rethinking data protection AI adoption is “impossible” as AI agents can act autonomously and bypass human oversight. Capital One Software added that modern data security must move beyond static, perimeter-based approaches to protect data across cloud and AI environments and to drive business value.