Reco raises $55M as AI agent security startups crowd the market
- ID
- 29760
- Status
- summarized
- Published
- 29 Sep 2026, 8:30 PM
- Fetched
- 29 Sep 2026, 8:45 PM
- Provider
- TechCrunch
- Category
- technology
- Original URL
- https://techcrunch.com/2026/09/29/reco-raises-55m-as-ai-agent-security-startups-crowd-the-market/
- Source URL
- https://techcrunch.com/feed/
Summary
- Score
- 6.0
- Created
- 29 Sep 2026, 8:46 PM
- Tags
- Audience
- developersai_agent_usersai_ml_learnersfounders
What happened
Reco raised $55M and repositioned from mapping/ securing SaaS and AI platforms to a broader 'context graph' product that links AI agents to apps, people, accounts and permissions so security teams can see what an agent can reach and revoke unnecessary access. TechCrunch notes at least two dozen companies now sell some form of AI agent security, with vendors converging on similar pitches (knowledge graphs, continuous monitoring, runtime security, MCP vetting), including CrowdStrike building detection and response on the devices agents run on. Reco's CEO Ofer Klein says its platform found 21,000 unknown agents at one Fortune 100 customer, and at a large financial services customer it found an agent created by an ex-employee that could access Salesforce and share data to an unseen domain.
Why it matters
The concrete number to act on is the 21,000 unknown agents found at a single Fortune 100 company: if you have been shipping agents with service accounts, OAuth scopes or MCP tool access, you probably cannot enumerate them today, and an ex-employee-owned agent with live Salesforce access is the failure mode. That also means agent-inventory and permission-graph tooling is now a crowded category with two dozen-plus vendors, so if you are a founder eyeing this space, differentiate on a specific surface (MCP tool vetting, runtime revocation, data egress) rather than a generic 'discover and govern agents' pitch. Note the numbers come from Reco itself, not independent measurement.
Discussion angle
If you ran a quick inventory of your own agents, service accounts and MCP tool grants today, how many could you actually name and revoke — and would you build that in-house or buy from one of the two dozen vendors already pitching it?