Two-Thirds of Nonhuman Accounts Are Unseen and Unmanaged, According to Orchid Security’s Identity Gap Report

Orchid Security's "Identity Gap: 2026 Snapshot" reports that invisible or unmanaged enterprise identities now outnumber visible ones, presenting metrics such as 57% of identity being "dark matter", 67% of non-human accounts created within applications, 36% of credentials hardcoded in clear text, and widespread privilege and orphaned-account issues; the report warns AI agents will quickly discover and exploit these gaps and urges improved identity observability and governance.