Jeff Pflueger

Agentic AI in the Enterprise - By Task Type and Business Function

I’ve been exploring Agentic AI security.

I’d like to better understand:

  1. Who is adopting agentic systems (firmographics - business types, sizes, etc)
  2. What business functions the agentic systems are facilitating
  3. The specific tasks they are performing

There’s a fourth factor - pain - that I need to understand. I’ll get to that in a later post. The companies using agentic systems - what are the risks and challenges and who has them most acutely. People talk about a TAM - total addressable market for a product - a colleague recently mentioned the subset of the TAM that most interests sales people - the Pain Addressable Market.

What I learned from my research: These are difficult questions to pin down. Partly because everything is moving so quickly with agentic AI and partly because of a lack of great analysis.

My first swipe at this was survey data of business users of agentic systems and AI. What I learned: Executives like to talk about business function (like customer success, etc) using agentic AI, while technical stakeholders like to talk about the task (coding, debugging, etc). So the data are all over the map.

What’s even worse is that surveys and respondents are inconsistent on even the definition of Agentic AI. For instance - some surveys and responders assume a chatbot is AGENTIC because it is like a customer success AGENT. No. Agentic systems autonomously interact with other systems, like a CRM, etc. A chatbot agent just parses language.

So my next swipe at the research is to try to find sources of telemetry data: Anthropic for instance has information about what tasks its agents are asked to perform and also probably the business function.

Well, here too is a challenge - Anthropic for instance is heavily used for coding, which differs in use from, say ChatGPT. But the telemetry data is actual task - what agentic AI systems are doing.

I want to separate the tasks agentic AI is doing from the business function. Task is interesting because from a security context, different tasks involve different systems and have a different risk profile.

Business Function is also extremely important. Different business functions have different types of risk, and also the VALUE of a security solution to manage the inherent security challenges of agentic AI.

So my approach is to ask two different research questions.

  1. A top 10 list for Business Function adoption of agentic AI
  2. A top 10 list of tasks being performed by agentic AI

Slop alert: Huge caveat here of using Claude to do this level of research - the underlying sources are thin. There is much Claude is likely taking a guess at. That said - here’s what the output is:

</human>

<ai_output>

Table 1: Top 10 by business function

Ranked by Menlo Ventures’ 2025 departmental AI spend, the only behavioral dataset organized by business function. Anthropic and OpenRouter data are added where a task maps clearly to a function.

RankBusiness functionDepartmental AI spend (Menlo, 2025)Supporting usage dataSource
1Engineering / software development$4.0B (55%)Computer and mathematical tasks: 44% of business API traffic, 52% by Jan 2026 (Anthropic). Programming: over 50% of OpenRouter tokensMenlo, Anthropic, OpenRouter
2IT operations~$730M (10%)Resolving technical issues: ~6% of business API traffic (Anthropic)SaaStr/Menlo, Anthropic
3Marketing~$660M (9%)Creating marketing materials: 4.7% of business API traffic (Anthropic)Same
4Customer support & success~$630M (9%)Used for ticket routing, sentiment analysis and proactive outreachMenlo
5Design~$510M (7%)—SaaStr/Menlo
6HR / recruiting~$365M (5%)Processing business and recruitment data: 1.9% of business API traffic (Anthropic)Same; Anthropic
7Office & administrative operations (shared back office)Not a Menlo categoryOffice and administrative tasks: ~10% of business API traffic (Anthropic)Anthropic
8Finance operationsPart of “Other” (~$365M, 5% combined)—SaaStr/Menlo
9LegalPart of “Other”—Same
10Procurement & facilitiesPart of “Other”—Same

Table 2: Top 10 by agentic AI task

Ranked by share of Anthropic’s business API traffic, the largest public dataset that classifies real agent and automation traffic by task. API use there is mostly automation rather than human-in-the-loop help: 77% of business API conversations show automation patterns. Overall, coding-related tasks make up 44–52% of business traffic, and the top 10 tasks together make up 32%. Shares are in the business API sample unless noted.

RankAgentic AI taskShare of business API trafficTypical owning functionsMain OWASP riskSource
1Fixing software errors~10% (single largest task)Engineering, IT, security operationsCode execution (ASI05)Summary of Anthropic Jan 2026 report
2Debugging web applications~6%EngineeringCode execution (ASI05), supply chain (ASI04)Anthropic Sept 2025
3Resolving technical issues~6%IT operations, tech supportTool misuse (ASI02), cascading failures (ASI08)Same
4Developing & evaluating AI systems~5%Engineering, data scienceSupply chain (ASI04), memory poisoning (ASI06)Same
5Creating marketing materials4.7%MarketingGoal hijack (ASI01), data exposureSame
6Building business softwareLarge share, no exact figureEngineering, ITCode execution (ASI05), privilege abuse (ASI03)Same
7Back-office document workflows (email classification, invoice processing, calendar scheduling)Within the ~10% office/admin categoryFinance, HR, operationsGoal hijack via email or documents (ASI01), privilege abuse (ASI03)Summary of Anthropic Jan 2026 report
8Processing business & recruitment data1.9%HR, business operationsData exposure, privilege abuse (ASI03)Anthropic Sept 2025
9Analysis & problem-solving49% of Copilot user goals*All functionsMemory poisoning (ASI06), trust exploitation (ASI09)Microsoft Work Trend Index
10Finding information / research15% of Copilot user goals*All functionsGoal hijack via retrieved content (ASI01), memory poisoning (ASI06)Same

</ai_output>

<human>

What I learned:

Sources: