Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)
Summary: Orchid Security's analysis finds that 46% of enterprise identity activity occurs outside centralized IAM visibility, a hidden layer it calls Identity Dark Matter that includes unmanaged applications, local accounts, opaque authentication flows, and over-permissioned non-human identities. Gartner has introduced the Identity Visibility and Intelligence Platform (IVIP) as a Layer 5 visibility and observability system within its Identity Fabric framework, and Orchid describes building visibility from the application estate itself through binary analysis and dynamic instrumentation, without APIs, source-code changes, or lengthy integrations.
Key Takeaway: Nearly half of the identity surface may be operating unseen, and that gap between what security teams think they have and the access that actually exists is where the article says modern identity risk now lives. The author, Orchid Security's CEO, argues that attackers hide in this dark matter, so visibility into it is the control plane rather than a secondary feature.
Read the original at The Hacker News ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026