Two-Thirds of Nonhuman Accounts Are Unseen and Unmanaged, According to Orchid Security’s Identity Gap Report

Orchid Security's "Identity Gap:2026 Snapshot" finds that invisible enterprise identities ("identity dark matter") now outnumber IAM-managed identities (57% vs 43%), with high prevalence of unmanaged non-human accounts, hardcoded credentials, orphaned accounts, and applications bypassing central identity providers — risks the report warns will be accelerated and exploited by AI agents unless enterprises shore up application-level identity controls.