Reco Raises USD 55M as Embedded Agents Spread
Chapters
AT&T Ventures joins Reco's latest round
Itbrief reported on October 14, 2026, that security software company Reco raised an additional USD $55 million, with participation from AT&T Ventures, bringing total funding to USD $140 million. The round also included new backers Forestay and Quadrille Capital, Itbrief said.
Itbrief wrote that the fundraising reflects rising investor interest in tools that monitor and govern AI agents. Itbrief Co reported on October 13, 2026, that Reco plans to use the capital on sales, partnerships, channels and customer support.
AT&T is both a Reco customer and, through AT&T Ventures, a strategic investor, Itbrief reported. Rich Baich, Chief Information Security Officer at AT&T, described how the software is used inside the company, Itbrief said. Itbrief Co said the dual role featured prominently in Reco's account of the investment.
The short version
Itbrief reported that security company Reco added USD $55 million in funding, with AT&T Ventures participating, lifting total funding to USD $140 million. Reco said the demand behind the round comes from Fortune 500 companies, Itbrief Co reported, so the news is mainly a market signal for smaller firms to weigh.
- Gartner forecast more than 150,000 agents per average global Fortune 500 enterprise by 2028, a figure Reco cited, Itbrief Co reported.
- Palo Alto Networks CEO Nikesh Arora said about 40 companies are funded in agentic security, Calcalistech reported.
- Fintech reported that AI security was the leading investment sub-sector in RegTech deals for the third quarter.
- Reco's software connects to OpenAI, Anthropic, Microsoft Copilot, Salesforce, ServiceNow and Workday, Itbrief Co reported.
Reco ties demand to Fortune 500 agent growth
Demand has grown among Fortune 500 businesses seeking oversight of how AI agents connect to data, identities and business systems, Reco said, according to Itbrief Co. Reco cited a Gartner forecast that the average global Fortune 500 enterprise will have more than 150,000 agents in use by 2028, up from fewer than 15 in 2025, Itbrief Co reported on October 13, 2026.
Agents are gaining access to sensitive data and core systems through OAuth grants, API connections, service accounts, browser sessions, MCP tools and AI features already embedded in workplace software, Reco said. A single agent may look low risk on its own while still creating broader exposure through links to other tools and permissions, the company added.
Reco said its system maps relationships between agents, identities, applications, permissions, data and workflows, Itbrief Co reported. The platform is built around what the company calls the Reco Graph. Its software integrates with hundreds of AI providers and enterprise applications, including OpenAI, Anthropic, Microsoft Copilot, Salesforce, ServiceNow and Workday, Itbrief Co said.
Palo Alto Networks watches the startup field
Calcalistech reported on October 7, 2026, that at least 20 Israeli-founded cybersecurity startups are competing to secure AI agents, and that 17 of them have disclosed combined funding of roughly $900 million.
Nikesh Arora, CEO of Palo Alto Networks, said during an ICONIQ Frontier fireside chat that "about 40 companies get funded in the space of agentic security," Calcalistech reported. Calcalistech reported that Arora described the crowded market as an advantage, since Palo Alto Networks can wait to see which teams deliver.
"You guys just afford us a very large resource lab," Arora said, according to Calcalistech. He added that Palo Alto Networks has internal efforts but that "I'm one of 41 efforts." Arora also said the company can acquire the leaders: "I have cash. I have market cap."
Investors back AI security across several rounds
Fintech reported on October 9, 2026, that AI security was the most dominant investment sub-sector in the biggest third-quarter RegTech deals. Fintech said the watchword across those deals was security, with endpoint and data security also figuring considerably.
ThreatLocker, a Zero Trust cybersecurity company, raised $190m in a Series F round in July led by Elephant, Fintech reported. Fintech said the capital will go toward deepening controls for AI-related security risks, enhancing the Zero Trust Platform and opening a new office in Reading in the UK.
Thecyberwire reported on October 8, 2026, that Armadin raised $255.5 million in a Series B round led by Andreessen Horowitz and Accel. Bain Capital Ventures and Redpoint participated, along with existing investors 8VC, Ballistic Ventures, Google Ventures, In-Q-Tel, Kleiner Perkins and Menlo Ventures, Thecyberwire said.
Shadow agents sit outside standard inventories
Technology.org reported on October 8, 2026, that a shadow agent can stay active, inherit credentials and connect to enterprise applications unseen by security. Technology.org listed places such agents appear, including employee-built workflows inside approved SaaS platforms, coding agents on developer workstations, and automations using an OAuth token or service account.
Thehackernews reported on October 10, 2026, that roughly 1,280 third-party products now embed AI, and that about 282 of them sit behind single sign-on. Thehackernews said the rest are invisible to identity infrastructure by default, because an identity stack can only govern what authenticates through it.
Thehackernews wrote that agents "arrive inside software the enterprise already runs, and they arrive without a decision." The article said first-party AI security controls assume a model was selected, a gateway was deployed or an adoption occurred.
Tron's take
That is my reading of the news, not a reported result. The demand claims in the Reco coverage come from Reco itself, and the Gartner forecast covers Fortune 500 enterprises. Neither describes a company with a few dozen to a few hundred staff, and the story is still developing.
I would treat the round as a signal to watch, not a purchase prompt. Technology.org and Thehackernews both describe agents arriving inside software a company already runs, which is why the news is not irrelevant to a smaller firm. I would spend the next quarter on a plain inventory: which AI features are switched on in Microsoft 365, Salesforce or similar tools, which OAuth grants and service accounts exist, and who owns each one.
That approach applies proven capabilities well instead of chasing every release, and it leaves time to see which of the roughly 40 funded agent security vendors Arora cited hold up. XL.net sells managed IT and security assessments, and an access review of this kind falls within that work. XL.net's earlier coverage of NeuralTrust's agent security raise shows the category was drawing funding before this round.
Questions I'd expect
Who invested in Reco's latest round?
Itbrief reported that AT&T Ventures participated, with new backers Forestay and Quadrille Capital also joining. AT&T is also a Reco customer.
What does Reco's software do?
Reco said its system maps relationships between agents, identities, applications, permissions, data and workflows, Itbrief Co reported. Security teams can use that map to find and remove unnecessary access.
How many agents does Gartner expect large companies to run?
Reco cited a Gartner forecast of more than 150,000 agents in use at the average global Fortune 500 enterprise by 2028, up from fewer than 15 in 2025, Itbrief Co reported.