Orchid Security Unveils Identity Audit to Expose Enterprise Identity Blind Spots — ORCHID SECURITY, INC.

Event summary

Orchid Security launched Identity Audit on February 5, 2026, providing a unified view of identity activity across managed and unmanaged applications.
46% of enterprise identity activity occurs outside centralized IAM visibility, according to Orchid's analysis.
Early deployments revealed 85% of applications have accounts from legacy or external domains, with 20% using consumer email domains.
70% of applications exhibit excessive access privileges, with 60% granting broad admin or API access to external third parties.

The big picture

Orchid Security's Identity Audit addresses a critical gap in enterprise identity management, where 46% of activity remains invisible to traditional IAM tools. As modern enterprises operate thousands of applications with diverse authentication logic, the proliferation of non-human identities and agentic AI exacerbates this blind spot. Orchid's solution aims to provide a complete, end-to-end view of identity usage, enabling organizations to enforce least privilege and reduce risk across their application estates.

What we're watching

Governance Dynamics: How Orchid's Identity Audit will affect enterprise governance strategies by exposing previously invisible identity risks.
Regulatory Compliance: Whether organizations can leverage Identity Audit to streamline audit preparation and reduce compliance burdens.
Market Adoption: The pace at which enterprises will adopt Identity Audit to address the growing challenge of identity dark matter.