Reco raises $55m to secure identity risk in agentic enterprises

What happened

Reco, a cybersecurity vendor focused on identity and access risk, has closed a $55 million funding round earmarked for securing what it describes as the "agentic enterprise" — organisations increasingly run with the help of autonomous AI agents. The raise, reported by FinTech Global, positions Reco to expand its platform for tracking and governing machine identities as businesses deploy more AI agents across daily operations.

The funding reflects a growing recognition that enterprises adopting agentic AI need new tooling to manage the risk that comes with software agents acting on behalf of employees, systems and customers — a distinct challenge from securing human user accounts alone.

Why it matters

As AI agents move from pilot projects into production — booking transactions, updating records, triggering workflows — they effectively become new "users" inside enterprise systems, often with broad permissions and little oversight. Reco's raise signals that investors see identity and access governance for these agents as a distinct, urgent category, separate from traditional endpoint or network security.

For digital transformation leaders, this points to a widening gap between how fast agentic AI is being adopted and how prepared security and identity architectures are to handle it. Funding rounds like this suggest the market for "agent governance" tooling is still forming, giving enterprises an early window to shape how they onboard, monitor and retire AI agents before incidents force reactive fixes.

By the numbers

• $55 million raised by Reco to build out its platform for securing AI agents and machine identities across enterprise environments.

The Renascence take

Most coverage of agentic AI focuses on what agents can do — the tasks automated, the hours saved. Far less attention goes to what happens when an agent behaves unpredictably, is compromised, or simply outlives its purpose inside a company's systems. Reco's raise is a useful marker that the industry is starting to treat AI agents as a governance problem, not just a productivity story.

The behavioural principle at stake is trust calibration: organisations are extending the same latitude to AI agents that they once reserved for vetted human employees, often without equivalent onboarding, monitoring or offboarding discipline. A customer-obsessed operator should treat every AI agent as a new "employee" with its own identity lifecycle — provisioned deliberately, permissioned narrowly, and audited continuously — because the moment an agent touches a customer record or transaction, any gap in that discipline becomes a service failure, not just a security one.