Reco AI is a security company that helps organisations find and control the AI agents running across their SaaS estate. Security teams use its platform, Reco, to see which agents exist, who owns them, what they can reach and where the risk sits.
The same platform still covers the SaaS security work Reco started with, so agents, people and service accounts are governed side by side.
At A Glance
| Vendor | Reco AI |
|---|---|
| Category | AI agent security, identity governance and SaaS threat detection |
| Identities covered | AI agents, human and non-human identities |
| Agentic AI | Agent discovery, runtime monitoring, agent governance and in-product AI agents |
| Customers | Belk, BigID, Wellstar Health, CSK Legal, Exela Pharma |
| Certifications | AICPA SOC, ISO 27001, ISO 42001, CSA STAR Level 1, EU AI Act |
| Funding | $85 million in total |
| Market classification | Identity Security Posture Management; also NHI Platforms & Machine Identity |
What Reco AI Does
AI agents now connect to apps, to permissions and to other agents, often without a clear owner, and many keep the broad rights they were given for a pilot long after it ends. Reco’s answer is a single inventory that ties every agent to its owner and its access, then layers policy, monitoring and response on top. Because agents and SaaS identities draw on the same discovery engine and risk map, a risky agent, an over-privileged user and an exposed file show up in one view.
Products
Agent Runtime
Agent Runtime watches what agents do while they run. It covers every prompt, action and event in real time, and suits security operations teams who need to spot an agent behaving badly and respond before the action completes.
Agent Security
Agent Security deals with the access agents hold. It scopes their permissions, revokes stale access and gives each agent an owner and a lifecycle.
Agent Governance
Agent Governance applies policy and compliance controls to AI agents, agentic AI and embedded AI features in SaaS tools. Teams can tag risky tools and assign owners. Remediation plans for configuration drift are ordered by compliance framework, with SOC 2, ISO 27001, NIST and HIPAA named.
SaaS And Identity Security
The original SaaS functions sit in the same platform. Application discovery finds the apps in use. Identity and access governance controls who can access what. Data exposure management looks at what is shared and with whom, and identity threat detection and response flags identity attacks across connected apps.
How It Works
Reco runs as a platform built on three proprietary technologies, and remediation is carried out through the tools a customer already runs.
| Component | What it does |
|---|---|
| Unified Discovery | Pulls agents and applications from SaaS, identity provider, API, network and browser sources into one agent inventory. Because it reads browser, network and identity provider signals as well as SaaS APIs, it also surfaces shadow agents nobody registered. |
| App Factory | Adds connectors for new apps and agent platforms without code, in a reported 3 to 5 days. |
| Knowledge Graph | Turns identities, permissions, connections and events into a single map of risk that the other functions use. |
Identities And Systems Covered
| AI agents | Inventory with owners, permissions and lifecycles across 18 agent platforms |
|---|---|
| Human and non-human identities | Governed through identity and access governance and monitored through threat detection |
| SaaS applications | Microsoft 365, Google Workspace, Salesforce, ServiceNow, Workday and Veeva |
| AI tools | ChatGPT, Claude, Microsoft Copilot and Cursor |
Agentic AI Capabilities
Reco AI Agents
Reco also uses AI agents inside the product, running on the Knowledge Graph. The Alerts Agent builds alert timelines, prioritises critical issues and gives detailed remediation steps The Identities Agent came in the same first wave. In Agent Governance, a Remediation Plan Agent builds prioritised response strategies and starts automated remediation workflows.
AI Activity And MCP Visibility
Monitoring covers apps with built-in AI, embedded AI features, SaaS to SaaS AI interactions and Model Context Protocol (MCP) usage, not only standalone agents.
Integrations
| Area | Integrations |
|---|---|
| Identity provider | Okta |
| Collaboration | Slack |
| Security | SentinelOne |
Company Background
| Founded | 2020 |
|---|---|
| Founders | Ofer Klein (Co-Founder and CEO), Gal Nakash (Co-Founder and CPO) and Dr. Tal Shapira (Co-Founder and CTO) |
| Leadership | Bob Horn, CRO |
| Offices | Altamonte Springs (United States), Tel Aviv (Israel) and Chișinău (Moldova) |
| Funding | A $30 million Series B led by Zeev Ventures, announced on 10 February 2026, after a $25 million round led by Insight Partners in April 2025 |
| Investors | Insight Partners, boldstart ventures, Workday Ventures, TIAA Ventures, S Ventures and Quadrille Capital |
Note: This overview is compiled from Reco AI’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.