Reco raises $55 million as AI-agent security vendors multiply

The agent is only part of the risk

At least two dozen companies now sell products aimed at AI-agent security, based on public Crunchbase and PitchBook profiles. Their approaches vary, from checking the tools agents use and controlling data access to detecting threats on devices running agents and finding unauthorized AI use. But many make similar promises: discover agents, monitor them continuously, control tool access and check MCP.

Reco began by finding and protecting SaaS platforms and AI services. It has since broadened its product into a context graph that links agents to applications, people, accounts and permissions. Security teams can see what an agent can access and revoke permissions it does not need.

Image Credits: Reco /

Source: techcrunch.com

CEO and co-founder Ofer Klein said companies have been building and deploying agents faster than they can monitor them. On one Fortune 100 customer’s platform, Reco found 21,000 agents the company did not know about. At a large financial-services customer, Klein said, Reco found an agent configured by a former employee that could access Salesforce and send data to a domain the company could not see.

The examples are striking, but they are also vendor-reported findings. Other companies cite similar exposure: HiddenLayer says more than 50 of its customers use agents in production, interacting with critical systems and sensitive data. Cymphony says it found about 85,000 files at one publicly traded U.S. company that AI tools and agents had accessed.

A crowded market, a large round

Investors are backing companies that promise to find and secure agents. Reco’s $55 million extension included existing investors Forestay and Quadrille Capital, as well as AT&T, a customer investing through its venture arm. The round brings Reco’s total funding to $140 million.

Klein said Reco’s valuation has more than doubled since February and is now in the “hundreds of millions of dollars”; he declined to give an exact figure. The company says its annual recurring revenue is in the tens of millions of dollars and that it expects to triple it this year. It has more than 100 customers, with financial-services companies accounting for about 40% of its business.

Reco’s differentiation pitch rests partly on reach. It integrates with more than 280 applications, Klein said, and can add integrations in a few days. Browser and network signals are also used to find agents beyond the applications Reco connects to directly. The platform includes tools to inspect prompts and tool calls.

I think the more important test is not how many agents a vendor can find, but whether its view is complete enough to help a security team act. Reco’s integration count and reported discoveries make a case for breadth; they do not establish how reliably the platform catches agents operating outside its direct connections, or how much work teams must do after discovery.

The new funding will go toward hiring, sales, partnerships and customer support. That is a sensible use of capital in a market where vendors are multiplying, but it also points to the unresolved question: whether companies will pay for another security layer once they have mapped the agents they already have.