Two-Thirds of Nonhuman Accounts Are Unseen and Unmanaged, According to Orchid Security’s Identity Gap Report

Orchid Security's Identity Gap:2026 Snapshot finds that a majority of enterprise identities now exist outside central IAM controls—what it calls “identity dark matter”—with high rates of unmanaged non-human accounts, orphaned accounts, hardcoded credentials, and applications bypassing identity providers; the report warns these gaps are amplified by the rapid adoption of agentic AI, which can discover and exploit unmanaged access paths, increasing cyber, compliance, and operational risk.