Orchid Security targets AI agent sprawl with new identity governance tools
Orchid Security Inc. today extended its Identity Control Plane with a set of capabilities aimed at governing artificial intelligence agents, saying existing identity and access management models cannot handle actors that inherit authority from humans and machines alike.
The identity security startup’s expansion adds three components. One is Agentic Enrichment, which maps AI agents to their originating identities, owners, applications and inherited permissions. There’s also Agentic Observability, which monitors agent access paths and the full chain of delegation behind each action. And Agentic Guardrails enforces least privilege and identity hygiene to keep agent behavior inside defined bounds. Orchid is also introducing a graph-native chatbot and chain-of-delegation auditing tied to the same control plane.
The company says traditional IAM was built for two categories of actors and AI agents fit neither. Human users get narrow permissions managed through change requests. Nonhuman accounts such as service principals and bots get broad standing access, kept in check by their code rather than their credentials. Agents combine human-style reasoning with machine speed and they act through chains of delegation that pass authority across systems in real time.
