Agentic AI in the Enterprise - By Task Type and Business Function
November 3, 2026
I’ve been exploring Agentic AI security.
I’d like to better understand:
- Who is adopting agentic systems (firmographics - business types, sizes, etc)
- What business functions the agentic systems are facilitating
- The specific tasks they are performing
There’s a fourth factor - pain - that I need to understand. I’ll get to that in a later post. The companies using agentic systems - what are the risks and challenges and who has them most acutely. People talk about a TAM - total addressable market for a product - a colleague recently mentioned the subset of the TAM that most interests sales people - the Pain Addressable Market.
What I learned from my research: These are difficult questions to pin down. Partly because everything is moving so quickly with agentic AI and partly because of a lack of great analysis.
My first swipe at this was survey data of business users of agentic systems and AI. What I learned: Executives like to talk about business function (like customer success, etc) using agentic AI, while technical stakeholders like to talk about the task (coding, debugging, etc). So the data are all over the map.
What’s even worse is that surveys and respondents are inconsistent on even the definition of Agentic AI. For instance - some surveys and responders assume a chatbot is AGENTIC because it is like a customer success AGENT. No. Agentic systems autonomously interact with other systems, like a CRM, etc. A chatbot agent just parses language.
So my next swipe at the research is to try to find sources of telemetry data: Anthropic for instance has information about what tasks its agents are asked to perform and also probably the business function.
Well, here too is a challenge - Anthropic for instance is heavily used for coding, which differs in use from, say ChatGPT. But the telemetry data is actual task - what agentic AI systems are doing.
I want to separate the tasks agentic AI is doing from the business function. Task is interesting because from a security context, different tasks involve different systems and have a different risk profile.
Business Function is also extremely important. Different business functions have different types of risk, and also the VALUE of a security solution to manage the inherent security challenges of agentic AI.
So my approach is to ask two different research questions.
- A top 10 list for Business Function adoption of agentic AI
- A top 10 list of tasks being performed by agentic AI
Slop alert: Huge caveat here of using Claude to do this level of research - the underlying sources are thin. There is much Claude is likely taking a guess at. That said - here’s what the output is:
</human>
<ai_output>
Table 1: Top 10 by business function
Ranked by Menlo Ventures’ 2025 departmental AI spend, the only behavioral dataset organized by business function. Anthropic and OpenRouter data are added where a task maps clearly to a function.
| Rank | Business function | Departmental AI spend (Menlo, 2025) | Supporting usage data | Source |
| 1 | Engineering / software development | $4.0B (55%) | Computer and mathematical tasks: 44% of business API traffic, 52% by Jan 2026 (Anthropic). Programming: over 50% of OpenRouter tokens | Menlo, Anthropic, OpenRouter |
| 2 | IT operations | ~$730M (10%) | Resolving technical issues: ~6% of business API traffic (Anthropic) | SaaStr/Menlo, Anthropic |
| 3 | Marketing | ~$660M (9%) | Creating marketing materials: 4.7% of business API traffic (Anthropic) | Same |
| 4 | Customer support & success | ~$630M (9%) | Used for ticket routing, sentiment analysis and proactive outreach | Menlo |
| 5 | Design | ~$510M (7%) | — | SaaStr/Menlo |
| 6 | HR / recruiting | ~$365M (5%) | Processing business and recruitment data: 1.9% of business API traffic (Anthropic) | Same; Anthropic |
| 7 | Office & administrative operations (shared back office) | Not a Menlo category | Office and administrative tasks: ~10% of business API traffic (Anthropic) | Anthropic |
| 8 | Finance operations | Part of “Other” (~$365M, 5% combined) | — | SaaStr/Menlo |
| 9 | Legal | Part of “Other” | — | Same |
| 10 | Procurement & facilities | Part of “Other” | — | Same |
Table 2: Top 10 by agentic AI task
Ranked by share of Anthropic’s business API traffic, the largest public dataset that classifies real agent and automation traffic by task. API use there is mostly automation rather than human-in-the-loop help: 77% of business API conversations show automation patterns. Overall, coding-related tasks make up 44–52% of business traffic, and the top 10 tasks together make up 32%. Shares are in the business API sample unless noted.
| Rank | Agentic AI task | Share of business API traffic | Typical owning functions | Main OWASP risk | Source |
| 1 | Fixing software errors | ~10% (single largest task) | Engineering, IT, security operations | Code execution (ASI05) | Summary of Anthropic Jan 2026 report |
| 2 | Debugging web applications | ~6% | Engineering | Code execution (ASI05), supply chain (ASI04) | Anthropic Sept 2025 |
| 3 | Resolving technical issues | ~6% | IT operations, tech support | Tool misuse (ASI02), cascading failures (ASI08) | Same |
| 4 | Developing & evaluating AI systems | ~5% | Engineering, data science | Supply chain (ASI04), memory poisoning (ASI06) | Same |
| 5 | Creating marketing materials | 4.7% | Marketing | Goal hijack (ASI01), data exposure | Same |
| 6 | Building business software | Large share, no exact figure | Engineering, IT | Code execution (ASI05), privilege abuse (ASI03) | Same |
| 7 | Back-office document workflows (email classification, invoice processing, calendar scheduling) | Within the ~10% office/admin category | Finance, HR, operations | Goal hijack via email or documents (ASI01), privilege abuse (ASI03) | Summary of Anthropic Jan 2026 report |
| 8 | Processing business & recruitment data | 1.9% | HR, business operations | Data exposure, privilege abuse (ASI03) | Anthropic Sept 2025 |
| 9 | Analysis & problem-solving | 49% of Copilot user goals* | All functions | Memory poisoning (ASI06), trust exploitation (ASI09) | Microsoft Work Trend Index |
| 10 | Finding information / research | 15% of Copilot user goals* | All functions | Goal hijack via retrieved content (ASI01), memory poisoning (ASI06) | Same |
</ai_output>
<human>
What I learned:
- People are confused about what an “agent” is versus “agentic AI”. Many people call a customer success chatbot an Agent. What we are interested in Agentic AI - systems that take autonomous actions and are connected with other systems
- Task use cases: Coding dominates. And there is a long tail of other task types.
- Business Functions - #1 adopter of Agentic AI is Engineering / software development followed by IT Operations.
- There are so many different business uses and task types, that focusing on a narrow category may not be as effective as just simply focusing on the governance and visibility into ALL of them across the enterprise
- The DATA of how agentic AI is being used in the Enterprise becomes a valuable product itself
Sources:
- Anthropic Economic Index – AI’s role in the US and global economy
- Anthropic Economic Index – Uneven adoption (Sept 2025)
- Anthropic Economic Index – Economic primitives (Jan 2026)
- OpenRouter / a16z – State of AI: 100T token study
- Xenospectrum – OpenRouter agent vs. human tokens
- Microsoft – 2026 Work Trend Index: Agents
- Menlo Ventures – 2025 State of Generative AI in the Enterprise
- No Jitter – Menlo spend breakdown and methodology
- SaaStr – 55% of departmental AI spend is coding