CISO Tribune

Vendor comparison · 2 companies

One Identity vs Orchid Security

One Identity sells identity security software, including identity governance and administration products and privileged access management products. Orchid Security sells an identity-first security platform that discovers, analyzes, governs, and proves identity controls across applications. CISO Tribune files both under Identity governance and administration and Privileged access management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • One Identity
  • Orchid Security
One Identity vs Orchid Security: Products, Customers and Funding Compared
One IdentityOne Identity sells identity security software, including identity governance and administration products and privileged access management products.oneidentity.comOrchid SecurityOrchid Security sells an identity-first security platform that discovers, analyzes, governs, and proves identity controls across applications.orchid.security
What it sells
  • Identity Manager[4][10][11]Governs and secures an organization's data and users.
  • Safeguard for Privileged Analytics[14]Detects anomalies in privileged user behavior and ranks them by risk.
  • NC-Access[15]A session manager for OS/390 or z/OS.
  • Orchid Security PlatformAn identity-first security platform that discovers, analyzes, governs, and proves identity controls across all applications.
  • Orchid Identity Audit[8]Continuous observability to identify Identity Dark Matter across all managed and unmanaged environments.
Categories
Headquarters
Cork, Ireland[2][3]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • September 15, 2026Orchid Security unveiled AI readiness controls for AI agents, covering ongoing identity drift detection and kill switches operating at the application level.[14]
  • September 9, 2026Orchid Security announced identity drift detection and application-level kill switches for AI agents.[12]
  • May 28, 2026Orchid Security extended its Identity Control Plane with capabilities aimed at governing AI agents.[13]
  • February 5, 2026Orchid Security unveiled Identity Audit, which combines audit data from unmanaged applications with audit logs from governed IAM systems into a unified view of identity activity.[11]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[5]
  • Gartner Peer Insights: listed, seen November 3, 2026[6]
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, Orchid Security sells mainly to teams in regulated industries under audit pressure and to identity programs with persistent blind spots. Orchid says it covers self-hosted and SaaS applications, along with cloud, on-prem, legacy, and custom-built applications. Orchid describes the risk of orphaned accounts left behind during an acquisition, so organisations that grow through acquisitions are among the buyers it addresses. Orchid integrates with existing IAM, PAM, and IGA tools rather than replacing them, so it speaks to organisations that already run those systems.
Last verified
September 27, 2026October 29, 2026

Where they overlap

  • Identity governance and administration is the primary category of both One Identity and Orchid Security; both are also filed under Privileged access management.

Where they differ, field by field

  • Orchid Security is also filed under Non-human identity security and AI model and agent security.
  • One Identity lists Identity Manager, Safeguard for Privileged Analytics and NC-Access. Orchid Security lists Orchid Security Platform and Orchid Identity Audit.
  • One Identity is headquartered in Cork, Ireland.

How they differ

CISO Tribune files One Identity under Identity governance and administration and Privileged access management, with Identity governance and administration as its primary category. One Identity sells Identity Manager for governing users and data, Safeguard for Privileged Analytics for detecting anomalies in privileged user behavior, and NC-Access, a session manager for OS/390 or z/OS. It is headquartered in Cork, Ireland. One Identity also says it addresses Cloud Infrastructure Entitlement Management at the intersection of IGA and PAM, and that it helps federal, state and local entities, plus military and intelligence agencies, address identity security.

CISO Tribune files Orchid Security under Identity governance and administration, Privileged access management, Non-human identity security, and AI model and agent security, with Identity governance and administration as its primary category. Orchid Security sells the Orchid Security Platform, an identity-first platform that discovers, analyzes, governs, and proves identity controls across applications, and Orchid Identity Audit, which targets Identity Dark Matter in managed and unmanaged environments. Orchid integrates with existing IAM, PAM, and IGA tools rather than replacing them. HUB International is named in connection with integrating 200+ new acquisitions.

Both companies touch identity governance and privileged access, but they differ in what they sell: One Identity offers products such as Identity Manager and Safeguard for Privileged Analytics, while Orchid Security describes a discovery and audit layer that works alongside existing IAM, PAM, and IGA systems. On recent activity, Orchid Security unveiled AI readiness controls for AI agents on September 15, 2026, and unveiled Identity Audit on February 5, 2026. One Identity says IAM must govern non-human identities, including AI agents.

What it sells: One Identity

What Identity Manager does[4][10][11]
Identity Manager gives users access to data and applications they need, whether on-premises, hybrid or in the cloud. Identity Manager lets users request entitlements and group access via a shopping-cart selection menu. Identity Manager supports compliance regulations with user and privileged access reporting.
What Safeguard for Privileged Analytics does[14]
Safeguard for Privileged Analytics detects anomalies and ranks them based on risk, using 13 different machine-learning algorithms. Safeguard for Privileged Analytics reduces alert noise generated by SIEMs by categorizing user events based on risk and deviation levels.
What NC-Access does[15]
NC-Access is a session manager for OS/390 or z/OS. NC-Access interfaces with NC-Syncom and NC-Pass.

What it sells: Orchid Security

What Orchid Security Platform does
Orchid discovers SaaS, cloud, on-prem, legacy, and custom-built applications automatically. Orchid analyzes authentication and authorization flows, detects risk, enforces policies, and automates remediation. Orchid integrates with existing IAM, PAM, and IGA tools to enhance visibility and governance.
What Orchid Identity Audit does[8]
Orchid Identity Audit maps identities across all applications, including those using legacy or retired domains. Orchid identifies high risk accounts that lack ownership or appear in dark web credential leaks. Orchid provides continuous evidence of decommissioned accounts.

Questions about One Identity and Orchid Security

What do One Identity and Orchid Security sell?
One Identity sells Identity Manager, Safeguard for Privileged Analytics and NC-Access. Orchid Security sells Orchid Security Platform and Orchid Identity Audit.
Are One Identity and Orchid Security in the same category?
Yes. Identity governance and administration is the primary category of both on CISO Tribune.
Where are One Identity and Orchid Security headquartered?
One Identity is headquartered in Cork, Ireland.
Who are One Identity and Orchid Security sold to?
From its own pages, Orchid Security sells mainly to teams in regulated industries under audit pressure and to identity programs with persistent blind spots.
What have One Identity and Orchid Security announced recently?
September 15, 2026: Orchid Security unveiled AI readiness controls for AI agents, covering ongoing identity drift detection and kill switches operating at the application level.

About One Identity

One Identity sells identity security software, including identity governance and administration products and privileged access management products. One Identity says it is evolving IAM to govern all AI assistants that initiate access requests, automate workflows and impersonate users. One Identity says IAM goes beyond managing people and must govern non-human identities, including AI agents. One Identity addresses Cloud Infrastructure Entitlement Management at the intersection of IGA and PAM. One Identity says its CIEM offering can extend governance to cloud-infrastructure objects and manage privileged access to cloud objects.[1][7][8]

One Identity says most organizations are left with a sprawling tangle of accounts, groups and privileged access that is difficult to manage and hard to audit. One Identity says Active Roles is purpose-built to streamline Microsoft environments. Active Roles manages Active Directory, Entra ID and Microsoft 365 from a single interface. Active Roles applies role-based access control for zero standing privileges. Active Roles can ensure immediate least privilege for all accounts using automation and scripting. Active Roles aims to eliminate permanent access rights that have not been turned off and to give visibility and control of all Microsoft environments on a single system and console. Active Roles enforces administrative and governance policies inside Microsoft directories to prepare them for an IGA solution. Active Roles eliminates standing privileges and deploys Zero Trust Least Privilege for AD, Entra ID and Microsoft 365.[9]

Identity Manager governs and secures an organization's data and users, meets uptime requirements, reduces risk and satisfies compliance. Identity Manager gives users access to data and applications they need, whether on-premises, hybrid or in the cloud. One Identity says Identity Manager scales governance across enterprise apps, including SAP, Oracle and ServiceNow. Identity Manager extends identity governance beyond on-premises applications to hybrid and SaaS applications. Identity Manager lets users request entitlements and group access via a shopping-cart selection menu. Identity Manager can automate remediation actions such as disabling accounts, flagging security incidents and launching targeted attestation. Identity Manager supports compliance regulations with user and privileged access reporting. Identity Manager lets line-of-business managers make application-access decisions without IT input. Identity Manager enhances existing SAP security models and connects accounts under governance. Identity Manager uses access insights in OneLogin to inform governance policy decisions.[10]

Identity Manager On Demand is a fully managed SaaS and cloud identity governance solution. Identity Manager On Demand unifies security policies and satisfies governance needs while implementing a least-privileged model. Identity Manager On Demand lets users make read-only natural language queries to support compliance and reporting needs using AI.[11]

One Identity says Safeguard fortifies privileged accounts and credentials. Safeguard On Demand is a SaaS-based PAM solution for managing privileged accounts. Safeguard On Demand combines a secure password safe, session management and a monitoring solution delivered from the cloud. Safeguard On Demand can automatically find privileged accounts on a network with host-, directory- and network-discovery capabilities. Safeguard On Demand records all session activity down to the keystroke, mouse movement and windows viewed.[12]

Safeguard for Privileged Passwords automates, secures and simplifies granting privileged credentials. Safeguard for Privileged Passwords manages and protects privileged credentials with password vaulting. Safeguard for Privileged Passwords supports workflows with time restrictions, multiple approvers and emergency access. Safeguard for Privileged Passwords offers password management for all employees, not just privileged administrators. Safeguard for Privileged Sessions records and monitors privileged sessions to stop security threats in real time. Safeguard for Privileged Analytics detects anomalies and ranks them based on risk, using 13 different machine-learning algorithms. Safeguard for Privileged Analytics reduces alert noise generated by SIEMs by categorizing user events based on risk and deviation levels. Safeguard for Privileged Analytics integrates with Safeguard for Privileged Sessions to enable automated session termination whenever a highly suspicious event occurs.[13][14]

NC-Access is a session manager for OS/390 or z/OS and interfaces with NC-Syncom and NC-Pass. One Identity says its SaaS solutions are developed, operated and supported within the scope of its Information Security Management System, which has achieved ISO/IEC 27001:2013 certification. One Identity's Information Security Management System is aligned to the additional control implementation guidance in ISO/IEC 27017:2015 and ISO/IEC 27018:2019. One Identity helps federal, state and local entities, plus military and intelligence agencies, address identity security.[1][12][15][16]

One Identity on the record

Sources

One Identity full record

  1. [1]oneidentity.comOne Identity · oneidentity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]CompanyOne Identity · oneidentity.com · published June 16, 2026 · Tier A
  3. [3]One identity to become an independent company with new global hq in cork irelandOne Identity · oneidentity.com · published June 24, 2026 · Tier A
  4. [4]One Identity | Unified Identity SecurityOne Identity · undated page, accessed October 27, 2026 · Tier A
  5. [5]One Identity Reviews & Product Details - G2G2 · undated page, accessed October 27, 2026 · Tier C
  6. [6]One Identity Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 27, 2026 · Tier C
  7. [7]CIEM - Cloud Infrastructure Entitlement ManagementOne Identity · undated page, accessed November 3, 2026 · Tier A
  8. [8]AI-driven identity security & predictive insights | One IdentityOne Identity · undated page, accessed November 3, 2026 · Tier A
  9. [9]Administration and Governance for Microsoft environments | Active RolesOne Identity · undated page, accessed November 3, 2026 · Tier A
  10. [10]Identity Management Software | Identity ManagerOne Identity · undated page, accessed November 3, 2026 · Tier A
  11. [11]Identity and access management | Identity Manager On DemandOne Identity · undated page, accessed November 3, 2026 · Tier A
  12. [12]Safeguard On DemandOne Identity · undated page, accessed November 3, 2026 · Tier A
  13. [13]Safeguard for Privileged Passwords: Privileged Password ManagemenOne Identity · undated page, accessed November 3, 2026 · Tier A
  14. [14]One Identity Safeguard for Privileged AnalyticsOne Identity · undated page, accessed November 3, 2026 · Tier A
  15. [15]mainframe session manager | NC-AccessOne Identity · undated page, accessed November 3, 2026 · Tier A
  16. [16]Identity Security for Public Sector | One IdentityOne Identity · undated page, accessed November 3, 2026 · Tier A

Orchid Security full record

  1. [1]orchid.securityOrchid Security · orchid.security · undated page, accessed October 29, 2026 · Tier A
  2. [2]Ai readinessOrchid Security · orchid.security · published September 9, 2026 · Tier A
  3. [3]Orchid - Identity Visibility and Intelligence for the Application LayerOrchid Security · undated page, accessed November 5, 2026 · Tier A
  4. [4]Bringing Clarity to the Complexity of IdentityOrchid Security · undated page, accessed November 5, 2026 · Tier A
  5. [5]Agentic AI Identity Security: Closing the Gaps Agents ExploitOrchid Security · undated page, accessed November 5, 2026 · Tier A
  6. [6]Identity Security Platform: Uncover Identity Dark MatterOrchid Security · undated page, accessed November 5, 2026 · Tier A
  7. [7]Beyond Shadow IT: The Identity Dark Matter Undermining ComplianceOrchid Security · undated page, accessed November 5, 2026 · Tier A
  8. [8]Security That Survives the Acquisition.Orchid Security · undated page, accessed November 5, 2026 · Tier A
  9. [9]Customer StoriesOrchid Security · undated page, accessed November 5, 2026 · Tier A
  10. [10]Why 50% of Identity Projects Fail (And How to Fix the "Blueprint")Orchid Security · undated page, accessed November 5, 2026 · Tier A
  11. [11]Orchid Launches Identity Audit to Illuminate the Dark Matter of Enterprise Identity ActivityOrchid Security · published February 5, 2026 · Tier A
  12. [12]Orchid Security Adds AI Readiness Controls: Identity Drift Detection and Application-Level Kill Switches for AI AgentsGlobeNewswire · published September 9, 2026 · Tier A
  13. [13]Orchid Security targets AI agent sprawl with new identity governance toolsSiliconANGLE · published May 28, 2026 · Tier B
  14. [14]Orchid Security Introduces AI Agent Readiness Controls Featuring Continuous Identity Monitoring and Kill-Switch CapabilitiesCSO Online · published September 15, 2026 · Tier B

Spot a factual error? Request a correction.