SaaS security platform Recohas set out to address the challenge of “agent sprawl” resulting from the increased adoption of AI-powered tools by enterprises. It argues that enterprises face a security situation as many autonomous agents now traverse multiple systems, accessing sensitive data and performing actions without direct human supervision.
See also: Manus 'My Computer': Turns your Mac into an AI agent
To help mitigate this risk, the company has made a new feature, “Reco AI Agent Security,” available to its customers since March 18. The tool aims to provide enterprise security teams with full visibility and control over “all AI agents” operating in their SaaS ecosystem.
These include integrations and automation tools like Copilot, ChatGPT, and Salesforce Agentforce, as well as tools like n8n and Zapier. “Security teams have spent years gaining visibility into their SaaS applications, but AI agents work differently,” said Ofer Klein, CEO and Co-Founder of Reco.
The offer is designed to solve the dual challenge of «AI sprawl» and «Agent sprawl», incorporating AI agent discovery, risk analysis and governance into Recο’s existing SaaS security platform. The core of the release focuses on a change in how AI agents are identified.
See also: OpenClaw AI Agent: Critical vulnerabilities allow prompt injection
Rec said to the CSO that its approach goes beyond traditional discovery based on OAuth and a multi-layer detection model that examines how systems behave, not just how they connect.
Platforms like n8n, Make, and Zapier exhibit recognizable workflow signatures, which Reco uses to detect and map how these automations interact across systems. Additionally, for native agents like Microsoft Copilot or Salesforce Agentforce, Reco claims to track feature activations, data access patterns, and cross-app activity that traditional SSPM tools categorize as “normal user behavior.”
The Recο positions traffic as a deviation from traditional SSPM, arguing that these tools were never designed for autonomous systems. Visibility between systems is another gap noted by Recο. SSPM tools analyze each application individually, while Reco recognizes that agents span multiple systems and treats them as a single autonomous system with composite risk. These distinctions align with how SSPM tools are generally designed today.
See also: Perplexity Personal Computer: A cloud-based AI agent for Mac mini
Reco draws a line within the behavior framework, arguing that SSPM tools are less equipped to analyze how an integration behaves once approved, and that is where most of the risks caused by agents lie. Reco AI Agent Security is immediately available as part of the company's existing SaaS security platform, with support for the aforementioned SaaS tools, automation and AI during deployment and additional integrations expected to be released on an ongoing basis.
