Splunk Enterprise Security

Orchid ships drift detection and a kill switch for agents that inherit unmanaged identity

The new controls compare an agent's runtime behaviour against its authorized scope and can revoke the credentials underneath it. The 57% unmanaged-identity figure behind the pitch is Orchid's own, and neither publisher gives the method.