A global survey highlights growing cybersecurity gaps in access controllers as cloud connectivity, interoperability, mobile credentials, edge computing, and AI reshape physical security infrastructure.
Cybersecurity is emerging as a major weakness in physical access control infrastructure, with 32% of surveyed organizations reporting missing cybersecurity features in their existing controllers, up from 21% in 2025. The finding comes from the 2026 Trends in Access Controllers Report from Mercury Security, an HID brand, based on responses from 561 physical security and cybersecurity professionals.
The report highlights how access controllers are evolving from dedicated door-control hardware into connected infrastructure supporting security, building management, cloud services, and emerging artificial intelligence (AI) applications.
Cybersecurity becomes a controller priority
Controllers are increasingly positioned at the intersection of physical security and information technology (IT), making their cybersecurity capabilities more important. About 74% of respondents said coordinating cybersecurity and IT requirements has become more complex. At the same time, 86% said their organizations are actively working to keep pace with changing cybersecurity and data-protection standards.Overall, 78% consider controllers important or critical to their physical access control system strategy, compared with 72% in 2025. This reflects the growing number of devices, applications, and systems connected through access-control infrastructure.
Interoperability supports gradual upgrades
Interoperability is another major consideration for controller selection. 69% of respondents identified it as critical during procurement, while 82% considered backward and forward compatibility important for future infrastructure planning. This enables organizations to modernize access systems incrementally instead of replacing entire installations. Mobile credentials are also influencing controller architecture, with half of respondents already using or planning to adopt mobile solutions. About 46% identified mobile credential integration as a purchasing driver.
Cloud adoption outpaces infrastructure
Cloud connectivity was cited by 56% of respondents as a factor influencing controller purchases, up from 50% in 2025. However, only 41% currently have cloud-enabled controllers, while 26% said cloud capabilities are missing from their existing infrastructure.This gap indicates growing demand for controllers capable of supporting remote management, connected applications, and cloud-based security architectures.
AI pushes processing requirements
AI-enabled capabilities are also increasing infrastructure requirements. Behavioral analysis and anomaly detection rose to 56%, compared with 44% in 2025. Facial recognition reached 60%, while predictive security and threat prevention stood at 50%.
Meanwhile, more than 39% of respondents are exploring or have adopted edge computing, while 41% have integrated controller data with building occupancy and utilisation systems. These developments are increasing the importance of processing capability, storage, connectivity, security, and integration when selecting access-control hardware.
