Orchid Security Finds 57% of Enterprise Identity Is Unmanaged
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Orchid Security released its 'Identity Gap: Snapshot 2026' on May 19, 2026, finding that 'identity dark matter' — unseen, unmanaged identity elements — now outweighs visible identity 57% to 43%.
- Orchid co-founder Robert Wiseman warned that AI agents are 'shortcut-seekers' by design, using hard-coded plaintext credentials, borrowing higher-privilege credentials, and grabbing broadly accepted tokens to bypass access controls.
- Two-thirds of nonhuman accounts are configured locally within applications themselves, invisible to central IAM programs — a pattern the report calls reasonable for service accounts but dangerous for autonomous AI agents.
- 70% of all applications carry an excessive number of privileged accounts, undermining least-privilege principles and creating broad attack surface.
- 40% of all enterprise accounts are 'orphan' accounts that have outlived their authorized users, unmanaged and exposed to exploitation by both threat actors and AI agents.
- The findings draw on the identity exposures most common across North American and European enterprises, and Orchid simultaneously published an Identity Security Readiness Checklist alongside the report.
Why it matters: With 57% of identity unmanaged and 40% of accounts orphaned, enterprises face a widening attack surface exactly as AI agents gain the autonomy to discover and exploit hard-coded credentials and excessive privileges at machine speed. Security teams that haven't inventoried their nonhuman accounts and tightened privileged access are the ones most exposed as Agent AI adoption accelerates.
Ask SkimNews
![[Webinar] Eliminate Ghost Identities Before They Expose Your Enterprise Data](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6vJpO9kksCQDpSksNkqDFNUCbXD70dMGYqI6P9S_XPMY5d8BR8PVdrsVQP1ZJO_-nzL6eQShM3Cap9heQ5kAglsPjfxwIcXPSsf_cfgUVnGQ2XzIWVOuo7JhxMjnHYDN6r9KlQ6LqZJisRZkjatnWChuzUkSlXRa1hFseUPq28PZ5gjGR7L2WzTFdZ3fM/s1600/ghost.jpg)
