The Census

Forty-six percent of enterprise identity activity occurs outside the visibility of the systems designed to manage it. Non-human identities outnumber human ones up to 144 to 1. Gartner just created a new product category — guardian agents — for AI that watches AI. The industry spent a year debating how to authorize agents. The more basic problem is that nobody can count them. Orchid Security launched a product in February 2026 called Identity Audit. Its purpose is to answer a question that sounds like it should already have an answer: what is happening inside the enterprise's identity estate? The product combines data captured inside unmanaged applications with audit logs from governed identity and access management systems. The finding that prompted the product: as much as forty-six percent of enterprise identity activity occurs outside centralized IAM visibility. Not forty-six percent of activity is unauthorized. Forty-six percent is invisible . It happens in overlooked applications,