--- title: The Hidden Risk of Service Accounts and Non-Human Identities description: Non-human identities such as service accounts, API keys, machine credentials, and AI agents now outnumber human users in many enterprises, forming a large and... canonical: https://daily.dev/posts/the-hidden-risk-of-service-accounts-and-non-human-identities-x6dsrxell twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The Hidden Risk of Service Accounts and Non-Human Identities | daily.dev og:description: Non-human identities such as service accounts, API keys, machine credentials, and AI agents now outnumber human users in many enterprises, forming a large and... og:url: https://daily.dev/posts/the-hidden-risk-of-service-accounts-and-non-human-identities-x6dsrxell og:image: https://api.daily.dev/og/posts/x6DsRXell.png og:image:alt: The Hidden Risk of Service Accounts and Non-Human Identities og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The Hidden Risk of Service Accounts and Non-Human Identities **[SpecterOps](https://daily.dev/sources/specterops)** · 1 min read · 0 upvotes · 0 comments ## Summary Non-human identities such as service accounts, API keys, machine credentials, and AI agents now outnumber human users in many enterprises, forming a large and often overlooked attack surface. SpecterOps' Mark Wilson discusses how attackers exploit identity relationships through Attack Paths and why traditional IAM visibility falls short. The piece advocates Attack Path Management as a way to identify and reduce structural identity risk. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Why non-human identities are your biggest security blind spot in 2026](https://daily.dev/posts/why-non-human-identities-are-your-biggest-security-blind-spot-in-2026-ivsgr78co) · CSO Online · 0 upvotes · 0 comments - [The Hidden Risk of Orphan Accounts](https://daily.dev/posts/the-hidden-risk-of-orphan-accounts-7fik1n3xa) · The Hacker News · 0 upvotes · 0 comments - [The Invisible Workforce: Why Your Household Apps Now Have Their Own Digital IDs](https://daily.dev/posts/the-invisible-workforce-why-your-household-apps-now-have-their-own-digital-ids-ivamsa19y) · IT Security Guru · 0 upvotes · 0 comments - [Gartner IAM Summit 2026: Identity Expanded Faster Than Most Programs Did](https://daily.dev/posts/gartner-iam-summit-2026-identity-expanded-faster-than-most-programs-did-enhu4kjeq) · GitGuardian · 0 upvotes · 0 comments --- Tags: [#authentication](https://daily.dev/tags/authentication), [#iam](https://daily.dev/tags/iam) [View this post on daily.dev](https://daily.dev/posts/the-hidden-risk-of-service-accounts-and-non-human-identities-x6dsrxell) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"The Hidden Risk of Service Accounts and Non-Human Identities","url":"https://daily.dev/posts/the-hidden-risk-of-service-accounts-and-non-human-identities-x6dsrxell","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/the-hidden-risk-of-service-accounts-and-non-human-identities-x6dsrxell"},"datePublished":"2026-08-23T12:16:31.754Z","dateModified":"2026-08-23T12:18:18.107Z","description":"Non-human identities such as service accounts, API keys, machine credentials, and AI agents now outnumber human users in many enterprises, forming a large and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7a92a04173cba6ce641c671e49de9680?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7a92a04173cba6ce641c671e49de9680?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"SpecterOps","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"SpecterOps","logo":"https://media.daily.dev/image/upload/s--lR36Z4gn--/f_auto,q_auto/v1787487384/logos/specterops?_a=BAMAMicg0","url":"https://daily.dev/sources/specterops"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/the-hidden-risk-of-service-accounts-and-non-human-identities-x6dsrxell","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"authentication,iam","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"SpecterOps","item":"https://daily.dev/sources/specterops"},{"@type":"ListItem","position":3,"name":"The Hidden Risk of Service Accounts and Non-Human Identities"}]} ```