Reco takes $55 million into an agent security market where two dozen vendors sound alike

Reco says that at a large financial services customer it found an agent a former employee had set up. The agent could still reach Salesforce and share that data with a domain the company could not see ^[21]. The example is Reco's own, and the customer is unnamed. For the security team, finding that agent is the first task. Removing its access is the second.

TechCrunch based its count of vendors on public Crunchbase and PitchBook profiles ^[7]. The products do different jobs. Some vet the tools agents use, some control which data agents can reach, some look for unapproved AI use, and CrowdStrike is among those building detection and response on the devices agents run on ^[8]. The products differ, but the promises share a word list: knowledge graphs, continuous monitoring, runtime security, tool access, MCP vetting ^[9].

Here's what teams tell themselves users do: ask before they build an agent. Here's what users actually do, going by the vendors' own counts. Klein said companies are building and deploying agents faster than they can keep track of ^[10]. He also said Reco's platform found 21,000 agents at one Fortune 100 customer that the company did not know about ^[22]. Cymphony said it found about 85,000 files open to AI tools and agents at one U.S. public company ^[16]. HiddenLayer CEO Chris Sestito said more than 50 of his customers have agents in production touching critical systems and sensitive assets ^[15]. All of these figures come from companies that sell the remedy.

Reco's graph ties each agent to the apps, people, accounts and permissions around it ^[2]. It builds that picture from direct integrations with more than 280 apps, and Klein says new ones can be added within days ^[13]. For agents outside those apps it uses browser and network signals, and it has controls to inspect prompts and tool calls ^[14]. "The market demand right now for agent security is not only about the agent itself; it's about the entire ecosystem end-to-end," Klein told TechCrunch ^[11].

Reco's buyers so far skew toward banks and insurers. It has more than 100 customers, and financial services accounts for about 40% of the business ^[17]. Investors have moved fast too. Of the $140 million Reco has raised in total ^[5], $85 million came from the February Series B and this extension ^[3][18], about 61% ^[19].

A shortlist can be sorted on two axes. The first is where a tool sees agents: inside apps through integrations, or from signals on the device, browser and network. The second is what the tool does after a find: report the agent, or cut its access. Reco says it uses both integrations and outside signals, and that it can cut access ^[2][14]. The forcing test is the ex-employee case, run in the buyer's own environment, counting the agents that lost access and the hours from discovery to cutoff. A discovery total only measures the scan. In my view the better pick is the tool that can cut access in the apps a company already runs. The tradeoff is that an integration-first product's direct view ends at its integration list, and anything beyond that depends on browser and network signals ^[13][14].