AI Agent Security Startup Reco Nabs $55M as Enterprise Sprawl Fuels a Crowded Vendor Landscape

The Rise of AI Sprawl and Vendor Saturation

Terms like "AI sprawl" have quickly become common fare across tech social media and corporate thought leadership as modern enterprises start deploying artificial intelligence agents en masse. However, Chief Information Security Officers (CISOs) who are actively worried about securing swarms of agents suddenly operating across complex networks are likely finding themselves dealing with an entirely new kind of sprawl: vendors offering to help solve the problem. A quick glance at public Crunchbase and PitchBook profiles currently turns up at least two dozen emerging companies selling some form of specialized AI agent security.

These competing vendors approach the problem from diverse angles. Some security platforms vet the individual tools that agents utilize, while others attempt to help companies rigorously control what sensitive data their autonomous agents can reach. Meanwhile, established security giants like CrowdStrike are actively building detection and response controls directly on the endpoint devices where agents run, and others still remain tightly focused on finding and resolving unapproved, shadow AI usage across the enterprise environment.

While the underlying technical products differ in their specific mechanics, their foundational promises to discover, map, and govern autonomous agents sound remarkably similar. Most pitches prominently feature buzzwords involving knowledge graphs, continuous monitoring, runtime security, specialized tool access, Model Context Protocol (MCP) vetting, and the like. This high degree of market overlap has turned AI agent security into one of the most fiercely contested and crowded sectors in enterprise technology today.

Reco Pivots to Capitalize on the Autonomous Agent Boom

Many cybersecurity startups are rapidly updating their product architectures and marketing narratives to join the lucrative bandwagon. Until last year, AI security startup Reco was primarily selling software designed to map and secure traditional SaaS applications and foundational AI platforms. Today, the company has strategically repositioned itself around a much broader, comprehensive solution that leverages a sophisticated context graph to connect autonomous agents to corporate applications, human personnel, user accounts, and granular permissions.

This architectural evolution gives security teams a powerful way to visualize precisely what an active AI agent can reach across the enterprise and instantly cut off unnecessary or dangerous access privileges. According to Reco's co-founder and CEO, Ofer Klein, the single biggest operational change over the past year that spurred the startup to significantly broaden its scope was the alarming velocity at which modern companies are building and deploying AI agents faster than their IT departments can keep track of them.

During a recent enterprise deployment at one of the startup's Fortune 100 customers, Klein revealed that Reco's discovery platform successfully unearthed a staggering 21,000 autonomous agents that the corporate leadership team previously did not even know existed. At another massive financial services customer, the startup claims its deep discovery engine identified an unauthorized agent set up by an ex-employee that maintained the dangerous capability to access Salesforce and share proprietary customer data with an external domain entirely hidden from internal security visibility.

Industry Leaders Sound the Alarm on Production Scale Risks

Ofer Klein emphasizes that the modern enterprise security challenge extends far beyond the basic code of the agent itself. "The market demand right now for agent security is not only about the agent itself; it's about the entire ecosystem end-to-end," Klein told TechCrunch in an exclusive interview, highlighting the holistic approach required to maintain enterprise-grade digital hygiene in the age of generative automation.

Klein is certainly not alone in stressing the urgent necessity for corporations to secure this hidden digital sprawl before a catastrophic data breach occurs. Security startup HiddenLayer's co-founder and CEO, Chris Sestito, noted that when autonomous agents finally reach production environments, the sheer scale of their operational costs and inherent risks transitions from theoretical to full-scale reality extremely quickly. Sestito reported that over 50 of his enterprise customers currently have active AI agents operating live in production and directly touching critical business systems and sensitive corporate assets.

Amplifying these sobering industry metrics, another emerging AI security player, Cymphony, revealed that during an audit at a major U.S. public company, its platform discovered approximately 85,000 internal files that had inadvertently become accessible to various third-party AI tools and autonomous agents without proper administrative oversight.

Massive Funding and Financial Momentum for Reco

There is little doubt among venture capitalists that immense market opportunity exists for technology providers capable of helping enterprises find, monitor, and secure these sprawling agent ecosystems. Reco has aggressively capitalized on this surging investor demand, announcing on Tuesday that it successfully raised $55 million in new capital, building directly upon a substantial $30 million Series B funding round closed earlier in February.

Strategic corporate backing accompanied the latest financing round, with major enterprise customer AT&T investing via its venture capital arm alongside institutional backers Forestay and Quadrille Capital. CEO Ofer Klein stated that the startup's corporate valuation has "more than doubled" since the initial Series B announcement in February, vaguely estimating the current enterprise valuation in the "high hundreds of millions" of dollars, though he declined to disclose precise figures. Reco's annual recurring revenue (ARR) currently sits firmly in the "double-digit millions of dollars," and Klein confidently expects that key financial metric to triple over the course of the year.

The startup currently boasts a robust roster of more than 100 enterprise customers, with traditional financial services institutions accounting for approximately 40% of its total commercial business. Reco's core strategic bet relies heavily on its extensive existing coverage of traditional SaaS applications and the emerging AI agents tied to them, allowing the company to stand out from a crowded competitive field. The platform currently integrates natively with more than 280 distinct business applications, and Klein emphasized that engineering teams can rapidly deploy new integrations within a matter of days.