Reco has raised $55 million in additional strategic funding following its $30 million Series B funding round in February this year. The funding is provided by AT&T Ventures and supported by Quadrille Capital—and new investors Forestay. The amount brings the total raised to around $140 million.
Reco is an AI and SaaS security platform that secures autonomous AI agents and their operating environments across applications, identities, permissions, and workflows. With the Agentic AI Security market valued by MarketandMarkets at around $1.65 bn in 2026 and set to grow to around $13.52 bn by 2032 at a CAGR of 42%, it is a rapidly expanding market.
Reco has already experienced similar growth, and the funding will enable it to keep up the rapid growth expansion across sales, partnerships, channels and customer support. As the MarketandMarkets valuation indicates, demand from Fortune 500 companies to put security around their expanding Agentic AI deployments is increasing.
Agents are being deployed by enterprises across applications and collaboration tools, browsers, co-pilots and automated workflows.
Gartner predicts that the average global Fortune 500 company will use more than 150,000 agents by 2028, up from fewer than 15 in 2025, significantly increasing agent sprawl, IT complexity and management challenges. IDC predicts that the number of actively deployed AI agents will exceed 1 billion worldwide by 2029, which is 40 times more than in 2025.
Ofer Klein, CEO and Co-Founder of Reco, commented, “Agents are gaining access to business applications and data faster than many organizations can map or govern those connections.
“AT&T’s participation as both a customer and strategic investor reflects the need for security that follows agents across enterprise ecosystems. This funding will help Reco expand sales, partnerships and customer support as more large enterprises move agents into production.”
The Reco Approach
Agentic AI Security is important. AI agents increasingly access sensitive data and systems through OAuth grants, APIs, service accounts, browser sessions, MCP tools and embedded application features.
Although one agent may seem low risk, interconnected permissions can expose customer data, source code, financial workflows, tickets, documents and collaboration channels. Reco maps these relationships, enabling security teams to identify exposure and precisely reduce or revoke risky access.
The Reco platform helps security teams understand what agents are active with their organisation. It has five key capabilities:
- Ecosystem Mapping & Visibility: Maps autonomous agents, SaaS applications, integrations, and non-human identities to show what resources agents can access.
- Threat & Anomaly Detection: Uses predefined detection controls to identify policy violations and security risks before they impact the organization.
- Identity & Access Governance: Controls permissions, manages data exposure, and governs user and agent access across SaaS environments.
- Shadow App & AI Discovery: Detects unsanctioned SaaS applications and shadow AI usage across the enterprise.
- Integrations: Integrates with over 285 Enterprise applications, including OpenAI, Anthropic, Salesforce, Microsoft Copilot, Microsoft 365, Google Workspace, ServiceNow, Workday and Okta.
Built on the Reco Graph, Reco’s platform maps relationships among agents, identities, applications, permissions, data and workflows. This identity and security posture context helps teams discover agents and AI-enabled tools, prioritise risks by business impact and remediate them precisely.
Rather than choosing between blocking AI adoption and tolerating unmanaged exposure, organisations can use Reco to reduce excessive permissions, revoke outdated access, turn off risky integrations and enforce policies without disrupting legitimate workflows.
The holistic approach ensures that security teams understand what Agents are allowed to do, and what they are actually doing. If aberrant behaviour is detected, the platform enables security teams to revoke permissions and prevent agents from carrying out tasks that might damage the organisation.
Customer to Investor
AT&T is already using the Reco platform. AT&T was an early adopter of digital agents, with teams across the company building workflows. It is using agents to support customers as well as internal teams. Its first production tool, launched in 2025, Ask AT&T Workflows, was successful.
Its AI agents can take customer service update requests, synchronize data across systems, and auto-install information in real time. It improves the customer experience and reduces wait times, while allowing employees to focus on higher-priority actions.
The company turned to Reco to support the oversight of these agents. Rich Baich, Chief Information Security Officer, AT&T, commented, “Reco helps AT&T strengthen governance across our enterprise apps and AI ecosystem by providing greater visibility into agent security risk, access management, and third-party integrations.
“This insight enables better decision-making, improves audit readiness, and supports our commitment to securing innovation across the enterprise.”
The venture arm of AT&T subsequently noticed the solution and decided to invest in the scale-up. Vikram Taneja, Head of AT&T Ventures, commented, “As both an investor and customer, AT&T recognizes the growing importance of helping organizations understand and manage how AI agents interact with business applications and data.
“Reco’s approach to visibility and governance aligns with the needs we are seeing across enterprises as agent adoption continues to evolve.”
Enterprise Times: What does this mean?
For Reco, the funding provides capital to expand sales, partnerships, channels and customer support as enterprise demand for agent security grows. AT&T’s participation also validates Reco’s technology through endorsement from a major customer operating AI agents at scale.
For AT&T, the investment strengthens its relationship with a supplier that governs its expanding AI ecosystem. It may also offer earlier insight into Reco’s roadmap and influence capabilities addressing enterprise security, audit and access-management requirements.
Customers could benefit from faster development, broader integrations and stronger implementation support. AT&T’s role as customer and investor may reassure buyers that Reco has met complex, real-world requirements. Although Reco must still prove it can scale without weakening product focus or service quality.
For competitors, the round raises the stakes by giving Reco greater resources to expand and strengthen its position. Rivals will need to differentiate through discovery, governance, remediation, integrations or pricing as agentic security becomes a defined enterprise priority.
The investment follows a recent $16 million pre-seed round for Outerlimit, which focuses on runtime security, deterministic controls, identity-to-action binding and multi-hop execution. Startups including Zenity and Entro Security will also take notice.
Established providers such as eSentire and Darktrace are also investing in the sector. The funding may attract potential acquirers seeking high-growth technology. Whether investors support continued expansion or favour an earlier sale remains uncertain. Although AT&T’s backing may reduce acquisition pressure.
