NHI & AI-Agent Estate Calculator
How big is your non-human identity estate?
Machine and AI-agent identities already outnumber your people by orders of magnitude — and they're growing ~44% a year. Size your estate in about 10 seconds and see how much of it is stale, holding standing access, or completely ungoverned.
Want the financial view too? Try the PlainID ROI Calculator to size the value of governing it all.
Fast estimate. Enter your numbers below — the projection updates live. Benchmarks come from public industry research; every input is yours to adjust.
Employees governed by your IAM program
Drives the non-human-to-human identity ratio
How far along you are deploying autonomous agents
Share of your NHI estate under active governance today
Your non-human identity estate
~400K
non-human identities across your environment — roughly 80× your 5,000-person workforce, at a 80:1 ratio.
~340K
ungoverned identities
85% outside active governance
NHI Governance Benchmark Report
Unlock the full benchmark report
Reveal the identity mix, stale-and-standing exposure, 12-month projection and a polished PDF for your team.
Non-human identities — frequently asked questions
A non-human identity is any credential or identity that isn't a person — service accounts, API keys, tokens, certificates, workload identities, bots and AI agents. In most enterprises NHIs already outnumber human users by tens to hundreds to one, and AI agents are accelerating that growth. They authenticate, hold access and act on systems just like humans do, but they are rarely governed with the same rigor.
It multiplies your human headcount by a non-human-to-human ratio that varies with your environment — roughly 45:1 for legacy/on-prem, 80:1 for hybrid and 144:1 for cloud-native estates (Rubrik, CyberArk and Entro benchmarks). It then projects AI-agent identities as a share of that total based on your adoption stage, applies a +44% twelve-month growth rate, and uses your governance-coverage slider to estimate how much of the estate is currently ungoverned.
Non-human identities are easy to create and hard to retire. Service accounts and keys are provisioned for a project and then forgotten; roughly 48% end up stale or orphaned. And because most are granted persistent, always-on privileges rather than just-in-time access, about 70% carry standing access — a large, mostly invisible attack surface. AI agents make this worse: they spin up fast, act autonomously and multiply quickly.
It means most security and IAM programs were built for humans and haven't caught up to autonomous, fast-moving agent identities. As agents move from pilots to production, ungoverned agents can request access, chain permissions and act at machine speed without a human in the loop. Run-time, policy-based authorization lets you govern every identity — human, machine and AI agent — with the same continuous controls.
This is a directional sizing estimate, not an audit. The ratios and fractions reflect public industry research and typical enterprise patterns, and every input is adjustable so the projection reflects your reality. For a precise picture, request the full NHI Governance Benchmark Report and a PlainID specialist can map it to your actual environment.