Non-Human Identity (NHI)
A non-human identity is a digital identity held by a system, service, application, or AI agent, including service accounts, API keys, certificates, and bot accounts. Estimates indicate that NHIs in enterprise environments typically outnumber human identities by 10 to 50 times, and most lack centralized management. Traditional service accounts follow fixed behavioral patterns, whereas AI agents possess autonomous decision-making capabilities and their permission requirements emerge dynamically.
Timeline (last 90 days)
According to estimates by security vendors such as CyberArk, the number of NHIs in enterprise environments is typically 10 to 50 times that of human identities, and most lack centralized management.
Most enterprises have not yet established complete lifecycle management for non-human identities, including the full process of creation approval, least privilege, behavior monitoring, and lifecycle termination.
All Facts (2)
According to estimates by security vendors such as CyberArk, the number of NHIs in enterprise environments is typically 10 to 50 times that of human identities, and most lack centralized management.
50%UnverifiedMost enterprises have not yet established complete lifecycle management for non-human identities, including the full process of creation approval, least privilege, behavior monitoring, and lifecycle termination.
50%