Orchid Security is an Identity-first Security Orchestration platform that continuously discovers self-hosted and SaaS applications (including those running in AWS), assesses their identity flows, and enables fast, centralized remediation of security weaknesses without recoding.
By unifying identity management under a single fabric, Orchid Security helps enterprises streamline compliance, reduce risk, and maintain a strong, consistent security and compliance posture.
Orchid Security addresses the inherent complexities of Identity and Access Management (IAM) by delivering continuous application discovery, assessment of identity controls, and gap analysis against identity-related requirements of cybersecurity frameworks and privacy regulations, all within a unified identity fabric. By enabling or even enabling modern authentication and authorization protocols, Orchid Security provides clarity into Self-Hosted and SaaS applications. Orchid customers benefit from:
Centralized visibility into identity controls and security posture
Insight into identity security gaps and exposures
A scalable and accountable way to implement, monitor, and remediate IAM functions
Streamlined authentication journeys across all applications
Orchid provides custom pricing for customers via Private Offer. Please contact aws@orchid.security for a better understanding of our pricing model and products.
Highlights
Seamless Identity Fabric: Establish an end-to-end solution for modern authentication and authorization across self-hosted and SaaS applications. This approach lets organizations modernize at their own pace while upholding consistent identity security practices.
Continuous Discovery & Analysis: Automatically discover and analyze application identity capabilities and map out their authentication flows, reducing manual effort and ensuring your organization understands its posture in relation to evolving security and regulatory requirements and best practices.
Gap Analysis & Compliance Controls: Benchmark your application posture against privacy regulations (like S-OX, PCI, GDPR, HIPAA) and cybersecurity frameworks (such as NIST CSF, ISO 27001) to generate an accurate risk assessment, pinpoint areas for improvement and assign / track remediation actions.
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing offers one contract option: Orchid Fundamental, priced by units. Each unit covers 30 applications for continuous IAM assurance, discovery, and readiness. Pricing scales with the number of applications you need to cover. To protect more than 30 applications, you add more units. The single dimension keeps billing simple, tying your cost to your application count rather than to separate tiers or feature levels.
Top-of-mind questions for buyers
What counts as one application for the 30-application unit?
An application is any system Orchid discovers and analyzes for identity behavior. This includes SaaS, on-premises, legacy, home-grown, and shadow applications. Each application is counted separately, whether managed by your existing identity tools or not. Every unit you buy covers 30 of these applications.
What happens if I need to cover more than 30 applications?
You add more units. Each unit covers another 30 applications for continuous IAM assurance, discovery, and readiness. Your cost scales with the number of units you buy, so it tracks the size of your application estate rather than separate feature tiers.
What capabilities does the Orchid Fundamental unit include?
Each unit provides continuous identity discovery, IAM assurance, and readiness for its 30 applications. Orchid inventories applications, surfaces authentication and authorization logic, rates initial risk, and maps posture against frameworks like SOX, PCI, and GDPR. It also feeds identity context into existing IAM, IGA, and ITSM systems.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Orchid provides custom pricing for customers via Private Offer. Please contact aws@orchid.security for a better understanding of our pricing model and products.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.