Mercury Security, known for its innovative approach in open architecture access control hardware under the HID brand, has unveiled its 2026 Trends in Access Controllers Report. This report highlights the increasing emphasis on controllers in the long-term strategies for physical access control, driven by evolving cybersecurity needs, interoperability requirements, cloud adoption, and emerging technologies.
Based on a global survey involving 561 professionals in physical security and cybersecurity, the report shows a rise in the strategic importance of controllers, with 78% of respondents acknowledging them as crucial to their physical access control system (PACS) strategy, up from 72% in the previous year. This trend underscores the expanding role of controllers as they facilitate connections between various devices, systems, and applications within the security infrastructure, necessitating platforms that can meet current demands and adapt to future capabilities.
Data Protection Standards
Cybersecurity remains a critical area where current infrastructure often falls short. According to the report, 32% of participants note a lack of cybersecurity features in their controller systems, up from 21% last year. Despite 86% of organizations actively keeping up with evolving cybersecurity and data protection standards, 74% highlight the growing complexity of managing cybersecurity and IT coordination.
Cybersecurity remains a critical area where current infrastructure often falls short
Steve Lucas, Vice President of Sales at Mercury Security, stated, “Organizations recognize the cybersecurity risks facing connected access control systems, but the infrastructure in place isn’t always keeping pace. As they look to modernize, users also want to protect existing investments. That makes interoperability increasingly important and puts more weight on choosing controller platforms that can address current security requirements while providing the flexibility to support what comes next.”
Driving Controller Purchases
Interoperability is a significant factor in controller procurement, with 69% of respondents emphasizing its importance. Additionally, 82% believe compatibility—both backward and forward—is essential for future infrastructure planning. This preference indicates a gradual modernization approach that maintains current investments while paving the way for new functionalities.
The report also reveals a growing interest in mobile credentials, as 50% of respondents are either using or planning to incorporate mobile solutions. Additionally, 46% pinpoint mobile credential integration as a trend influencing controller purchase decisions.
Cloud and AI Influences
Further, 39% of respondents are exploring or have adopted edge computing
Cloud connectivity is gaining attention, cited by 56% of respondents as a primary factor in controller purchases, compared to 50% in the previous year. However, only 41% of controllers are currently cloud-enabled, and 26% lack cloud support in existing systems. This indicates a growing interest in cloud capabilities surpassing the readiness of current infrastructure.
Advanced applications like behavioral analysis and anomaly detection are also impacting infrastructure needs, increasing from 44% in 2025 to 56% in 2026. Facial recognition and predictive security rank high as well, requiring enhanced processing power, storage, connectivity, and cybersecurity considerations in controller selection.
Further, 39% of respondents are exploring or have adopted edge computing, and 41% have integrated controller data with building programs, which illustrates how access control infrastructure is expanding beyond traditional door control into comprehensive security strategies. These findings reflect an evolution in controller selection from a simple hardware acquisition to a comprehensive infrastructure strategy, balancing immediate needs like reliability and cybersecurity with the future integration of advanced technologies.
Mercury Security, a pioneer in open architecture access control hardware and an HID brand, releases its 2026 Trends in Access Controllers Report, revealing how changing cybersecurity requirements, interoperability needs, cloud adoption and emerging technologies are putting greater emphasis on the role controllers play in long-term physical access control strategy.
Based on a global survey of 561 physical security and cybersecurity professionals, including administrators responsible for access control management, systems integrators, installers and end users, the report found that 78% of respondents consider the controller important or critical to their physical access control system (PACS) strategy, up from 72% in 2025. This growth reflects the controller's expanding role in the security environment. As it connects more devices, systems and applications across the security environment, organizations are placing greater importance on infrastructure that can address current requirements while supporting new capabilities over time.
Data protection standards
Cybersecurity represents one of the clearest gaps between respondents’ requirements and their existing infrastructure. 32% say cybersecurity features are missing from their current controller systems, up from 21% in 2025. The gap comes as 74% reported cybersecurity and IT coordination have become more complex to manage, even as 86% say their organizations actively work to stay current with changing cybersecurity and data protection standards.
“Organizations recognize the cybersecurity risks facing connected access control systems, but the infrastructure in place isn’t always keeping pace,” said Steve Lucas, Vice President, Sales, Mercury Security. “As they look to modernise, users also want to protect existing investments. That makes interoperability increasingly important and puts more weight on choosing controller platforms that can address current security requirements while providing the flexibility to support what comes next.”
Driving controller purchases
Additional findings from the report include:
Interoperability influences purchasing
69% of respondents identified interoperability as a critical factor in controller procurement, while 82% said backward and forward compatibility is important to future infrastructure planning. The findings point to a preference for gradual modernisation that protects existing investments while giving organizations the flexibility to adopt new capabilities over time.
Mobile credentials are influencing those decisions as well, with half of respondents already using or planning to adopt mobile solutions and 46% ranking mobile credential integration among the trends driving controller purchases.
Cloud demand is growing faster than deployment
Cloud connectivity ranked among the leading factors influencing controller purchases, cited by 56% of respondents, up from 50% in 2025. However, only 41% reported that their controllers are currently cloud-enabled, and 26% said cloud enablement is missing from their existing systems. The findings suggest interest in cloud capabilities is growing faster than current infrastructure can support them.
AI and advanced capabilities add new infrastructure demands
Behavioural analysis and anomaly detection rose from 44% in 2025 to 56% in 2026, while facial recognition was cited by 60%, and predictive security and threat prevention by 50%. As these applications advance, processing power, storage, connectivity, cybersecurity and integration architecture are becoming greater considerations in controller selection.
More than 39% of respondents are also exploring or have adopted edge computing within their security ecosystems, while 41% have integrated controller data with building occupancy and utilization programs, demonstrating how access control infrastructure can increasingly support applications beyond traditional door control.
Taken together, the findings show how controller selection is evolving from a hardware purchase into a longer-term infrastructure strategy. Organizations are balancing immediate priorities such as reliability and cybersecurity with the need to support future technologies, integrate with surrounding systems and modernise without replacing infrastructure all at once.
