Mercury Security report identifies widening cybersecurity gap in access controllers

A report from Mercury Security reveals a widening cybersecurity gap in physical access control infrastructure. According to the 2026 Trends in Access Controllers Report, which surveyed 561 professionals globally, 32% of respondents noted that cybersecurity features are missing from their current controller systems, an increase from 21% in 2025.

As controllers increasingly connect various devices, systems, and applications, 78% of professionals now consider them critical to physical access control strategies. This growing complexity has led 74% of respondents to report that managing cybersecurity and IT coordination has become more difficult.

The report also highlights a disconnect regarding cloud readiness. While 56% of respondents cited cloud connectivity as a factor in purchasing decisions, only 41% reported that their current controllers are cloud-enabled. Additionally, interoperability remains a primary driver for procurement, with 69% of respondents identifying it as a critical factor and 82% emphasizing the importance of backward and forward compatibility.