ESN.net

Short posts on anything worth a second look.

Orchid Security Unveils Landmark IGA Capabilities at SailPoint Navigate 2025, Austin, September 29–October 2

By

Orchid Security has taken a bold step forward in solving one of the most persistent challenges in enterprise identity: fragmentation. With its newly SailPoint-certified release of the Identity-First Security Orchestration platform, Orchid is bringing long-overdue clarity and control to Identity Governance and Administration (IGA) adoption. The company frames the issue in stark terms—identity dark matter now accounts for nearly half of the typical enterprise application estate, creating sprawling blind spots that leave organizations struggling to manage exposures they cannot see. The solution, according to Orchid, begins not with the IAM stack but at the application itself, where identity truth originates. By anchoring governance to the source, Orchid promises to cut onboarding times, eliminate hidden risks, and transform identity operations from a fragmented pain point into a managed, auditable system.

The heart of the announcement is Orchid’s ability to automatically discover, analyze, and integrate applications into IGA platforms at unprecedented speed. Dynamic application discovery allows enterprises to continuously map their estates while assigning risk scores to prioritize governance. Deep analysis capabilities automatically capture authentication flows and authorization models, pre-populating the notoriously time-consuming IGA questionnaires that typically bottleneck onboarding. Perhaps most transformative is the one-click integration feature, which streams application data directly into IGA systems, slashing timelines from months to minutes. For enterprises juggling shadow IT, legacy systems, and the rise of AI agents with no lifecycle governance, this represents a significant leap forward.

Tal Herman, Orchid’s Chief Product Officer, did not understate the significance. He called the release a long-awaited “Control Plane for Identity”—something networks have had for decades but IAM has lacked. Customers already see the difference in real-world numbers: 90% faster application onboarding, 75% lower professional services costs, and 83% remediation of identity exposures without recoding. The operational shift is equally compelling, freeing application owners and IAM teams from repetitive administrative burdens and enabling them to focus on higher-value security outcomes.

By highlighting identity dark matter, Orchid is framing the next battle in enterprise security: exposing and governing the unseen. The company’s approach—starting at the application, leveraging automation, and integrating seamlessly with SailPoint—positions it not only as an innovator but also as a force pushing the IAM industry toward a more scalable, less fragmented future. The unveiling at SailPoint Navigate 2025 is not just a product launch but a signal of where enterprise identity governance is headed: from slow, manual processes toward a real-time, application-centric infrastructure capable of governing the growing sprawl of digital identities and agentic actors.

Cybersecurity events: