TOOL PROFILE · IDENTITY ORCHESTRATION AND APP COVERAGE
Orchid Security: IAM jobs covered, pricing and limits
Short answer
Discovers unmanaged applications, maps how identity works inside them, and brings them under the IAM, IGA, PAM and audit tools you already run. Its own pages document app coverage and cover part of lifecycle and IGA, privileged access and threat detection. No price on its own site; AWS Marketplace lists $250,000.00 per 12 months for 30 applications.
Which IAM jobs does Orchid Security cover?
Read the stack as a list
- J5 Identity threat detection and response: 5 documented, 1 partial
- J4 Privileged access: 2 documented, 7 partial
- J3 Application coverage and identity orchestration: 2 documented, 6 partial
- J2 Lifecycle and governance: 7 documented, 4 partial
- J1 Directory and single sign-on: 5 documented, 1 partial
| Job | Status | What its pages say |
|---|---|---|
| J1Directory and SSO | Not in our sources | Orchid is not an identity provider; it works with the IAM tools already in place. Source: Orchid Security homepage · Read 27 Sep 2026 |
| J2Lifecycle and IGA | Partial | Feeds identity context into IAM, IGA and ITSM tools; joiner, mover and leaver execution and certification campaigns stay in those tools. Source: Orchid Security: IAM programs · Read 27 Sep 2026 · Source: Orchid Security blog: SailPoint partnership · Read 27 Sep 2026 |
| J3App coverage | Documented | Discovers SaaS, cloud, on-premises, legacy and custom-built applications, maps local accounts, hardcoded credentials, shadow authentication paths and privilege drift inside them, and brings them under IAM, IGA, PAM and audit control. Source: Orchid Security homepage · Read 27 Sep 2026 · Source: Orchid Security platform · Read 27 Sep 2026 |
| J4Privileged access | Partial | Brings discovered applications under PAM control and reports privileged accounts it finds to Idira Privilege Cloud's Discovered Accounts queue, without sending credentials; it is not a credential vault. Source: Orchid Security homepage · Read 27 Sep 2026 · Source: Orchid Security blog: Orchid and Idira · Read 11 Oct 2026 |
| J5Threat detection | Partial | Lists incident response teams as a use case; it is not described as an identity threat detection product. Source: Orchid Security homepage · Read 27 Sep 2026 |
How does Orchid Security fit in an IAM stack?
Orchid Security takes the application coverage job: it finds applications outside your identity provider and governance tools, maps the accounts and authentication paths inside them, and hands that to the IAM, IGA, PAM and ITSM tools you run. Orchid calls identity activity that sits inside applications outside central visibility Identity Dark Matter, a trademark of Orchid Security. It does not sign people in, provision access or run certification campaigns itself.
Suits: Organizations with many legacy, custom-built or on-premises applications that already run an IGA and need it to reach further.
What does it cost and how is it deployed?
- Pricing
- No price on its own site (its /pricing page returns 404). AWS Marketplace lists "Orchid Fundamental" (Continuous IAM Assurance, Discovery and Readiness, 30 applications) at $250,000.00 per 12 months on a 12-month contract, with 24- and 36-month options, and custom pricing by private offer.
Source: AWS Marketplace: Orchid Security · Read 11 Oct 2026
- Deployment
- SaaS, per its AWS Marketplace listing (deployed on AWS). Its own site does not say whether the platform itself can run on premises; it discovers SaaS, cloud, on-premises, legacy and custom-built applications.
Source: AWS Marketplace: Orchid Security · Read 11 Oct 2026 · Source: Orchid Security homepage · Read 27 Sep 2026
- Integrations
- Microsoft, Saviynt, SentinelOne, CyberArk and SailPoint named on the home page; ServiceNow and Jira ticketing in a customer story. It reports privileged accounts it finds to the Discovered Accounts queue in Idira Privilege Cloud, and says it does not send credential values, secrets or session data.
Source: Orchid Security homepage · Read 27 Sep 2026 · Source: Orchid Security: Costco story · Read 27 Sep 2026 · Source: Orchid Security blog: Orchid and Idira · Read 11 Oct 2026
- Certifications
- HIPAA, SOC 2, GDPR, ISO 27001 and ISO 27701 listed.
Source: Orchid Security homepage · Read 27 Sep 2026
- Company
- Founded by Roy Katmor, Robert Wiseman and Ido Kelson; incubated at Team8. Announced a $36 million seed round co-led by Team8 and Intel Capital in January 2025; names Costco and Repsol as customers.
Source: Orchid Security company page · Read 27 Sep 2026 · Source: Orchid Security press release: introducing Orchid Security · Read 11 Oct 2026
Where is Orchid Security strong?
- Application discovery across SaaS, cloud, on-premises, legacy and custom-built apps.
Source: Orchid Security homepage · Read 27 Sep 2026
- Identity evidence mapped to SOX, PCI, HIPAA, GDPR and NIS2, with every discovery, policy and action recorded.
Source: Orchid Security platform · Read 27 Sep 2026 · Source: Orchid Security: GRC and audit · Read 27 Sep 2026
- Built to sit beside an existing IGA: a SailPoint Technology Alliance Partner since August 2026.
Source: Orchid Security blog: SailPoint partnership · Read 27 Sep 2026
What are its limits?
- No price on its own site; the public list price is on AWS Marketplace, $250,000.00 per 12 months for 30 applications, with custom pricing by private offer.
Source: AWS Marketplace: Orchid Security · Read 11 Oct 2026
- Not a provisioning engine or certification tool: joiner, mover and leaver actions and access reviews run in your IGA or IdP.
Source: Orchid Security: IAM programs · Read 27 Sep 2026
- Delivered as SaaS; an on-premises option for the platform itself is not stated.
Source: AWS Marketplace: Orchid Security · Read 11 Oct 2026 · Source: Orchid Security homepage · Read 27 Sep 2026
- Not an identity provider, so it does not replace directory or SSO.
Source: Orchid Security homepage · Read 27 Sep 2026
What has Orchid Security announced recently?
2026-08-23
Orchid joined SailPoint's Technology Alliance Partner program, describing Orchid as discovering applications and analyzing identity inside them, with SailPoint providing governance.
Source: Orchid Security blog: SailPoint partnership · Read 27 Sep 2026
2026-08-02
Orchid described an integration that reports privileged accounts it discovers to the Discovered Accounts queue in Idira Privilege Cloud, without sending credentials or session data.
Source: Orchid Security blog: Orchid and Idira · Read 11 Oct 2026
2026-05-19
Orchid published the Identity Gap: 2026 Snapshot, based on anonymized telemetry from enterprise applications in North America and Europe collected from April 2025 to March 2026.
Source: Orchid Security: Identity Gap 2026 Snapshot · Read 27 Sep 2026
2026-02-05
Orchid launched Identity Audit, which combines audit data captured inside unmanaged applications with logs from governed IAM systems in one view.
Source: Orchid Security blog: Identity Audit launch · Read 27 Sep 2026
Which head-to-heads include Orchid Security?
Frequently asked questions
What does Orchid Security do in an IAM stack?
Discovers unmanaged applications, maps how identity works inside them, and brings them under the IAM, IGA, PAM and audit tools you already run. Its pages document app coverage.
Does Orchid Security publish pricing?
No price on its own site (its /pricing page returns 404). AWS Marketplace lists "Orchid Fundamental" (Continuous IAM Assurance, Discovery and Readiness, 30 applications) at $250,000.00 per 12 months on a 12-month contract, with 24- and 36-month options, and custom pricing by private offer.
What does Orchid Security not cover?
On the pages we read, Orchid Security does not describe directory and SSO. No price on its own site; the public list price is on AWS Marketplace, $250,000.00 per 12 months for 30 applications, with custom pricing by private offer.
Read next