Orchid Security extended its identity platform on May 28 with tools built specifically for AI agent governance, a narrower and arguably more urgent problem than the general enterprise AI security coverage most outlets give it. The company’s pitch: as agents inherit permissions from the humans and systems that spawn them, most identity and access tools have no way to see, let alone govern, what those agents can actually do.
The launch matters less for the product news than for the number behind it. Orchid’s own research, published as “The Identity Gap: 2026 Snapshot,” found that 67 percent of nonhuman accounts inside the organizations it studied are local or entirely unmanaged, invisible to the identity and access management stack meant to control them. That is the gap AI agents are now moving into at scale.
What is actually new
The centerpiece is a feature Orchid calls Agentic Enrichment, which maps each AI agent back to its originating identity, its owner, the applications it touches, and the permissions it has inherited along the way. That mapping is the missing layer in most enterprise AI deployments: an agent built to automate a finance workflow can end up holding access no single human in that workflow was ever granted directly, because it inherits from multiple systems at once.
Orchid, founded by Roy Katmor, raised a $36 million seed round in January 2025 co-led by Team8 and Intel Capital, with Capital One among the investors, a detail worth noting given Capital One’s own scale as an enterprise identity buyer. The company already counts Costco and Repsol as customers, and positions its Identity Control Plane as a layer that sits alongside existing IAM and IGA tools rather than replacing them.
What this means for security and IT budgets
This is the governance half of a problem we have covered from the adoption side before. In shadow AI is the new shadow IT, and blocking it will not work, the conclusion was that employees will keep bringing in ungoverned AI tools regardless of policy. Orchid’s data suggests the same is quietly true of the agents built on top of approved tools: the access sprawl happens even when the deployment itself is sanctioned, simply because nobody mapped what the agent inherited.
For security leaders, the practical takeaway is to treat agent identity mapping as a prerequisite for scaling agentic AI, not a follow-up project. That lines up with the procurement checks in our buyer’s guide to agentic AI lock-in: knowing where an agent’s access lives is as important as knowing where its data lives, and both should be answerable before a contract is signed, not after an incident.
Where to start if the 67 percent is you
The uncomfortable implication of Orchid’s number is that most organizations cannot currently answer the first question an auditor would ask: how many nonhuman identities exist, and who owns each one. That inventory is the starting point, and it costs process rather than product: enumerate service accounts, API keys and agent identities across the major platforms, assign a human owner to every one, and retire the orphans, which in most environments is a double-digit percentage on the first pass.
From there the discipline is the same one applied to employees. Agents get least-privilege grants rather than inherited superuser access, credentials that rotate, and an offboarding step when the workflow they served is retired. The machine-identity problem is not new, certificate and key sprawl predates the agent wave, and the capital flowing into it, including Keyfactor’s billion-dollar raise to secure the machines, reflects how much unmanaged surface area already existed. Agents simply multiply it faster, with more autonomy attached to each identity, which is why the security budget stays unkillable even in cost-cutting years.
What to watch
Watch whether the major identity platforms, Okta, Ping, and Microsoft Entra among them, move to build agent-mapping features natively rather than leaving the space to specialists like Orchid. Non-human identity has quietly become one of the most crowded categories in enterprise security funding, and agent-specific governance is the newest wedge inside it.
AI and business tech news, verified by a physician who reads the filings. One email a week, no noise.
