Newsroom

Reco, the company that helps enterprises govern AI agents and protect the applications and workflows they access, today announced it has extended the Reco Platform with Claude Security integration. The bidirectional integration helps organizations govern Claude use across employees, developers and the agents operating between Claude Enterprise and Claude Platform, while enabling security teams to use Claude to investigate enterprise risk through the Reco Graph.

On April 17, U.S. banking regulators did something they hadn’t done in 15 years. The Federal Reserve Bank, OCC and FDIC jointly issued revised model risk management guidance that replaces the old SR 11-7 framework, the document that has governed how banks validate and monitor their AI models since the aftermath of the financial crisis. The new guidance is a genuine upgrade: more flexible, calibrated to institution size and, by the agencies’ own admission, not the last word. Generative AI and agentic AI are explicitly carved out. A separate review is planned “in the near future.

By the end of 2026, 40% of enterprise applications will be integrated with task-specific AI agents, up from less than 5% in 2025, according to Gartner. Most organizations have no idea what those agents are doing once they are deployed.

In August 2025, attackers gained access to Salesforce environments at more than 700 organizations — including Cloudflare, Palo Alto Networks, and Zscaler — without exploiting a single vulnerability. They didn’t phish anyone, neither did they directly break in anywhere. Instead, they used OAuth tokens belonging to Drift, an AI-powered chatbot that hundreds of enterprises had connected to their Salesforce installations. When threat actors compromised Salesloft’s internal systems and extracted those tokens, every downstream connection became a doorway. The activity looked like normal software behavior because, from the system’s perspective, it was.

Major banks like BNY, Citi, and JPMorgan are rapidly deploying AI agents to handle emails, client queries, and legal document review, yet no regulatory framework exists to govern their identity, liability, or compliance obligations. In the absence of formal rules, institutions are improvising through internal credentialing systems, agent registries, and compliance-by-interpretation strategies, but experts warn the gap will be resolved either by deliberate regulatory design or by a costly failure.

The article argues that AI agents have quietly proliferated across enterprise environments, creating a security blind spot more dangerous than traditional SaaS sprawl because they act autonomously, inherit broad permissions, and operate at scale with little oversight. It outlines a framework for security teams to regain control by inventorying agents, mapping dependencies, and establishing formal processes for sanctioning shadow AI.

Reco was featured as the lead interview in ChannelPro Network's Voice of the Vendor podcast, recorded live at RSAC 2026. Reco's Global Head of Channel Alliances spoke about how we are using our channel program to help organizations discover their connected SaaS AI, apps, and agents.

The article argues that the traditional cyber kill chain breaks down when an attacker compromises an AI agent already operating inside your environment, since the agent comes pre-loaded with broad permissions, data access, and a legitimate cover for moving information across systems. It highlights real-world examples of vulnerable AI agents and promotes a security platform called Reco as a solution for inventorying AI agents, mapping their access scope, and detecting anomalous behavior across SaaS environments.

The Reco team built an Alert Story Generator using Anthropic Claude on Amazon Bedrock that converts raw, machine-readable security alerts into clear, human-readable narratives with automated investigation queries and remediation recommendations. The solution delivered measurable results for customers, including a 54% reduction in investigation time and a 63% improvement in incident response time.

This article covers Reco's launch of AI Agent Security, addressing the two converging challenges enterprises face: AI sprawl — the rapid proliferation of AI services, and agent sprawl the uncontrolled growth of individual AI agents that can independently traverse systems, access sensitive data, and execute actions with far-reaching consequences. The piece positions Reco's platform as a solution for security teams that currently lack visibility into which AI agents are running across their SaaS environments.

This piece argues that by 2026, AI agent sprawl has become a critical SaaS security risk, with 80% of organizations reporting unintended agent actions, and that human-in-the-loop controls while widely adopted are more of a symptom-management strategy that can't scale across hundreds of autonomous agents. The author advocates for a structured approach combining visibility, access control, and risk management, pointing to centralizing agent management on a platform like Reco as the path to deploying agents confidently while maintaining security.

Written for a channel-focused audience, this piece covers Reco's announcement through the lens of partner opportunity, with Reco's Head of Channel and Alliances, Todd Wilson noting that most companies don't yet have visibility into the AI agents running across their SaaS stacks, making this a growing advisory opening for MSPs and technology advisors. The platform automatically discovers agents, maps their access to identities and data, and enables security teams to approve, restrict, or block agents based on their risk posture.

Enterprise Times reports that Reco has released Reco AI Agent Security to fill the visibility gap for AI agents across the enterprise, noting that autonomous tools such as Copilot, ChatGPT, Make, and n8n now operate across SaaS environments without oversight, accessing data, executing actions, and connecting to systems without human intervention. The article frames the launch as Reco's answer to the "AI agent chaos" emerging as enterprises adopt these tools without centralized governance.

CSO Online reports on Reco's launch of  AI Agent Security, designed to give enterprise security teams complete visibility and control over AI agents — including Copilot, ChatGPT, Salesforce Agentforce, and automation tools like n8n and Zapier — operating across their SaaS ecosystems. The article highlights real-world risk patterns Reco has observed, including agents with full read/write access to customer PII and one case of an unnamed agent exfiltrating customer data to a personal Airtable account for eight months before discovery.

This opinion piece explores how autonomous AI agents are actively reshaping decentralized finance, with platforms like PancakeSwap and Uniswap Labs already deploying tools that allow agents to manage liquidity, execute swaps, and optimize yield farming across multiple blockchains simultaneously. Reco is cited alongside other security vendors as part of the emerging infrastructure race to address agent sprawl before the next major exploit.

As AI tools become deeply embedded in business workflows, they've introduced a new and largely unaddressed data security risk, 68% of organizations have experienced data leaks linked to AI tool usage, yet only 23% have formal security policies to address them. Traditional security controls like IAM and DLP struggle to keep up because AI models paraphrase and summarize by design, meaning there's often no exact string or keyword for filters to catch when sensitive information is leaked. To combat this, organizations are advised to inventory AI usage across the org, narrow what autonomous agents can do, and implement AI-native DLP that evaluates context and meaning rather than just keywords.

Research shows that AI power users—representing only 5% of workers—gain an extra day and a half of productivity weekly by sending six times more prompts than their colleagues (17 times more for coding tasks). What separates these high performers is their approach: they treat AI tools as trainable colleagues, iterating on prompts rather than giving up after one attempt, and they maintain deep expertise in one or two primary tools while rotating through specialized AI applications for specific tasks. The gap exists because most workers use AI for basic tasks like search and summarization, while power users have learned to build reusable workflows and extract real value from the technology.

Asian enterprises face a critical security gap as employees use hundreds of unauthorized AI applications that operate outside IT oversight, with organizations averaging 269 shadow AI tools per 1,000 workers. Unlike traditional unauthorized software, these AI platforms allow instant data exposure when employees paste sensitive information into public tools like ChatGPT, creating compliance risks across Asia's fragmented regulatory landscape that includes China's PIPL, India's DPDPA, and Singapore's PDPA. The challenge is amplified by the region's rapid growth and the difficulty of detecting "zero-footprint" AI applications that leave no installation trail while continuously accessing company data.

Shadow agents represent a critical evolution beyond traditional shadow IT—these are autonomous AI workers with persistent permissions that can independently move files, send emails, and update records across SaaS applications without IT oversight. Unlike passive AI tools that simply answer questions, shadow agents operate continuously with privileged access to corporate data, creating massive security blind spots as they're increasingly adopted by employees to boost productivity while bypassing formal approval processes.

Apple has confirmed that the next-generation version of Siri will be powered by Google’s Gemini AI models under a new multi-year partnership, marking a significant shift in its AI strategy to finally upgrade the long-delayed voice assistant. While Apple says it will keep control over privacy and user experience, using Gemini gives Siri more advanced reasoning and conversational capabilities than before.

The article argues that cybersecurity teams are mistakenly focusing on protecting AI models themselves, when the actual threat lies in the workflows and integrations surrounding those models. Recent attacks have exploited the context in which AI operates—such as malicious Chrome extensions stealing ChatGPT data and prompt injections hidden in code repositories—rather than breaking the AI algorithms. The piece recommends treating the entire workflow as the security perimeter, implementing guardrails at the workflow level, and using dynamic monitoring since traditional security controls fall short against AI's probabilistic behavior and fluid integrations.

After three years of AI hype, 2025 revealed that organizations struggled to demonstrate measurable value not because of technology failures, but due to poor data governance and unclear accountability. In 2026, AI must prove it can deliver dependable, measurable business results rather than just technical capabilities. Companies will succeed by defining problems before deploying models, tying AI to clear outcomes, and treating governance as essential rather than optional.

Reco has launched AI Agent Governance to help security teams discover and inventory autonomous AI systems operating across their business applications, map their access permissions, and score their risk. Organizations can use the platform to sanction, block, or revoke agent permissions within their existing security workflows.

Reco CEO Ofer Klein discusses how the company's Dynamic SaaS Security platform addresses the growing challenge of shadow AI by providing visibility and governance over the hundreds of AI tools employees use without IT approval, enabling organizations to adopt AI responsibly while maintaining security. The five-year-old startup has experienced explosive growth with 5X expansion last year and projected 4X growth this year, raising $55 million in funding and earning recognition from AWS as one of their most innovative technology partners.

Shadow AI—the unauthorized use of AI tools like ChatGPT by employees outside IT oversight—creates significant security and compliance risks as workers feed sensitive corporate data into unmanaged platforms to boost productivity. Organizations face data leaks, regulatory violations, and financial penalties when employees use personal devices to access AI tools, with studies showing that banning AI outright often backfires by driving usage underground rather than eliminating it.

As telecoms transition to AI-native operations with 97% of companies deploying AI, they face new security challenges including faster incident propagation, AI-powered fraud attacks, and vulnerabilities across autonomous systems. The industry will need to adopt AI-driven security solutions that match the speed and autonomy of their networks, while managing model sprawl and maintaining unified visibility across increasingly connected network, cloud, and edge environments.

The rapid proliferation of AI copilots across SaaS platforms has exposed critical gaps in traditional security models, which cannot effectively monitor or control AI agents that operate at machine speed with elevated privileges across multiple systems. This article advocates for adopting dynamic AI-SaaS security approaches that provide real-time, adaptive guardrails to track AI agent activities, detect anomalies, enforce policies, and prevent unauthorized data access or misuse.

The ShadyPanda campaign compromised trusted browser extensions over seven years, infecting 4.3 million users with spyware that stole session tokens and hijacked SaaS accounts. Organizations should enforce extension allow lists, audit permissions regularly, and monitor for malicious updates to prevent similar attacks.

The GTG-1002 campaign demonstrated the first AI agent autonomously executing cyber espionage, with Claude Code performing 80% of hacking tasks at machine speed. This exposes a critical SaaS vulnerability where static OAuth trust and long-lived tokens cannot defend against AI-powered attackers, requiring organizations to shift from periodic audits to continuous automated verification of access behaviors.

The ShinyHunters and SalesLoft Drift breaches exposed how attackers can exploit trusted OAuth integrations and social engineering to access hundreds of organizations without needing software vulnerabilities. Traditional security tools failed to detect these attacks because compromised integrations and fake OAuth apps generated traffic that appeared legitimate. With AI copilots now embedded across business platforms, organizations need dynamic security that continuously monitors SaaS behavior and flags anomalies like unusual data exports or suspicious app authorizations.

Shadow AI has quietly integrated into enterprise workflows through platforms like Salesforce and Microsoft 365, creating unmonitored data flows and compliance failures that traditional security tools cannot detect. Organizations need continuous monitoring and approved AI alternatives rather than blocking AI entirely, as these tools thrive in identity systems and permission layers that security teams rarely review.

Shadow AI creates risks including data exposure and regulatory violations, with an estimated 91% of AI tools operating without IT oversight. Financial institutions should provide sanctioned AI alternatives with proper governance frameworks rather than blocking usage, treating oversight as an innovation enabler.

Organizations claim to follow "trust but verify" principles for SaaS security, but in reality they only verify once during initial OAuth authorization and then grant indefinite implicit trust. After that initial approval, tokens remain valid with no ongoing monitoring, creating a security blind spot that attackers exploit. True Zero Trust requires continuous behavioral verification, comparing granted privileges against observed usage patterns to detect when apps or tokens behave abnormally.

Your SaaS users aren’t all human. Explore how machine identities drive automation and create unseen risks across business applications.

Shadow AI refers to AI tools that employees connect to company systems without IT oversight, creating a significant security blind spot as these integrations can access sensitive data unmonitored. Reco helps organizations detect these unauthorized AI connections by continuously scanning for third-party apps and permissions across enterprise systems like Salesforce and Microsoft 365. The company found that one Fortune 100 financial firm had over 1,000 unauthorized integrations, including AI tools that were recording customer calls and accessing confidential information without proper contracts or data governance.

A 2025 report by Reco analyzing 80 organizations found that the most popular shadow AI applications lack basic security controls like encryption and MFA, with OpenAI's ChatGPT alone accounting for 53% of all shadow AI activity and over 10,000 enterprise users. Small businesses face disproportionate risk, with companies of 11-50 employees showing the highest density of shadow AI usage at 269 unsanctioned tools per 1,000 employees.

Token theft is a leading cause of SaaS breaches. Discover why OAuth and API tokens are often overlooked and how security teams can strengthen token hygiene to prevent attacks.

Nearly 9 out of 10 AI tools inside enterprises are invisible to IT teams, creating a "shadow AI crisis" as AI features silently arrive through automatic updates in trusted platforms without proper oversight or security reviews. This governance gap poses serious risks. The solution requires continuous discovery tools to spot hidden AI capabilities combined with "governance-first" AI assistants that build compliance controls from the start.

Generative AI has rapidly integrated into SaaS platforms like Zoom, Slack, and Salesforce, with 95% of U.S. businesses now using AI tools, but this creates security risks when employees use unauthorized "shadow AI" applications. Rather than banning AI tools entirely, organizations should implement comprehensive SaaS AI governance that includes inventorying AI usage, defining clear policies, monitoring data access, and educating employees.

In mid-2025, ShinyHunters breached Salesforce instances at Google and Workday using voice phishing and malicious OAuth apps. Learn what happened and how Reco’s SaaS security platform could have stopped it.

Generative AI has quietly become a part of the SaaS ecosystem that businesses use every day. But this quick growth of AI features is making security leaders worried. Sensitive information could be leaked or used in the wrong way if there aren't enough controls in place. This article covers five key steps for effective AI governance.

As cyberattacks grow more sophisticated and AI-driven, CISOs must rethink their defenses with red teaming, explainability, and governance. In 2025, many CISOs are turning to AI agents to regain visibility and control over their SaaS ecosystems. This article covers how Reco AI Agents exemplify this approach.

SaaS apps are adding AI faster than most teams can track. This article explains how to build practical AI governance to manage risks, protect data, and stay compliant.

An introduction to the Top Cybersecurity Executives of 2025, who were selected based on their track records of execution, strategic leadership, and direct contributions to improving how organizations manage digital risk. Reco Cofounder and CPO Gal Nakash joins this list.

This article breaks down shadow AI revealing the hidden impact, how to safeguard your data, protect your organization from emerging threats and why CISOs should be concerned.

JPMorgan Chase CISO Pat Opet's released an open letter to third-party suppliers . This candid assessment encapsulates a reality that security professionals have been grappling with—the traditional security perimeter has dissolved, replaced by a complex web of interconnected SaaS applications. Reco CISO Ofer Klein shares his perspective.

This article reveals the insight from industry experts at RSAC 2025. Reco CISO, Merritt Baer shares here thoughts on where we are with agentic AI in cybersecurity in 2025.

At RSA Conference 2025, CSPM stood out as one of the fastest-evolving categories in cloud defense. There was a strong consensus that CSPM is moving beyond visibility to include context, automation, and AI-assisted decisioning at scale.

Reco CEO, Ofer Klein predicts the next generation of SaaS security tools will need to continuously adapt to constant changes, scanning for new apps and their connections to effectively close the SaaS security gap.

Find out how Reco keeps Microsoft 365 Copilot safe by spotting risky prompts, protecting data, managing user access, and identifying threats - all while keeping productivity high.

Newsletter that covers startups and emerging players with fresh funding. It covers Reco's latest funding round, and explains how Reco will use the funding to tame the chaos of modern SaaS.

Reco, a provider of dynamic software-as-a-service (SaaS) security, has secured $25m in additional funding to enhance and scale its AI-native SaaS security platform.

Reco plans to use the funds to accelerate its AI-native SaaS security platform’s growth, strengthen channel partnerships and capitalise on its market momentum. The new funding follows Reco’s improved performance, marked by a fivefold increase in annual recurring revenue (ARR) and a threefold growth in customer base within the past year.

According to Reco, its AI can spot if some of the employee accounts in a SaaS application has access to more business data than strictly necessary. The platform also identifies login credentials that aren’t actively used. In the event of a breach, hackers can exploit unused and misconfigured accounts to steal data that otherwise wouldn’t be accessible.

According to Reco, its AI can spot if some of the employee accounts in a SaaS application has access to more business data than strictly necessary. The platform also identifies login credentials that aren’t actively used. In the event of a breach, hackers can exploit unused and misconfigured accounts to steal data that otherwise wouldn’t be accessible.

The funding follows a 5x increase in annual recurring revenue (ARR) over the past year, according to the company, amid rising demand for tools that can secure the ever-expanding universe of software-as-a-service (SaaS) platforms—and their increasingly invisible users.

Reco, which uses generative AI and AI agents to provide businesses with an SaaS security platform, just raised more funding. The startup told Business Insider exclusively that it secured a $25 million Series A extension from Insight Partners, Zeev Ventures, Boldstart Ventures, Angular Ventures, and Redseed.The startup originally raised a $30 million Series A in 2022, led by Insight and Zeev. In total, Reco's has raised $55 million from VCs.

Led by Ofer Klein, co-founder and CEO, Reco is a dynamic SaaS security company eliminating the SaaS security gap caused by SaaS Sprawl, the proliferation of apps, AI, identities, data, and configuration challenges. It discovers all SaaS apps, AI agents, and shadow AI tools, and their associated identities, securing configurations, minimizing access risks, and detecting hidden threats. Using analytics on user behavior and interactions, the company identifies misconfigurations, over-permission users, and compromised accounts.

Recent cyber incidents highlight the need for thorough SaaS security solutions to find and fix security weaknesses, helping protect sensitive data in today’s complex digital world. This article compares 11 reliable SSPM solutions that offer strong features, scalability, and ease of use in 2025.

Reco joins the inaugural cohort of the Premier Artificial Intelligence Safety Ambassadors due to our commitment to leading AI safety practices within our organization, as well advocating for responsible AI practices across the industry and promoting pragmatic solutions to manage AI risks.

Shadow AI is presenting new challenges for security leaders. While AI tools have already revolutionized how we work, they've also created unprecedented security challenges that our traditional strategies or tools simply weren't designed to handle.This article talks about why, and more importantly, what you can do about it.

Reco CISO Merritt Baer shared her professional trajectory, insights on the role of AI and ML in the future of cybersecurity, her future plans, words of wisdom, and much more with Digital First Magazine.

Merritt Baer, CISO at Reco, spoke with theCUBE Research’s Christophe Bertrand at the Cyber Resiliency Summit, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed the role of preparation, frameworks and ownership in building cyber resilience across modern enterprises.

As organizations rapidly adopt AI tools to boost productivity, a hidden security threat is emerging: shadow AI. Employees are increasingly using AI tools without approval, potentially exposing sensitive data and creating serious vulnerabilities. Reco helps organizations identify and secure these unauthorized AI tools in their  SaaS environment. This article describes how Reco uses advanced AI-driven technology to uncover, manage, and protect against shadow AI risks.

Since it’s almost certain your company is using SaaS applications, there’s a good chance you’ve introduced security risks. But don’t be alarmed. Nearly every company today could benefit from enhancing its SaaS security capabilities with the latest solutions. This article discusses why you should prioritize SaaS security in 2025.

What are cybersecurity leaders focused on going into 2025? To find out, IT Brew asked a number of CISOs what they thought the biggest oversights and failures of 2024 were, including Reco CISO Merritt Baer.

Can organizations unmask SaaS threats with a new kind of security—one that knows who you are and when something’s not right? This article covers how Reco's identity-centric approach addresses this challenge by recognizing that identities are at the core of every organization’s SaaS environment.

The first annual SaaS security report, "State of SaaS Security 2024," was conducted by SaaS security leader Reco. Drawing from our analysis of over 6,600 SaaS environments from over 50 enterprises across all verticals, this report provides an unprecedented, data-centric view into the SaaS security landscape in 2024 as CISOs prepare to set priorities for 2025.

These recent trends and data underscore a critical shift in cybersecurity: identity security is no longer just a tactic—it’s a strategic frontline defense. As adversaries leverage AI and machine learning to develop more sophisticated and precise identity attacks, organizations are left grappling with the rapid pace of AI-driven threats. Reco CISO, Merritt Baer shares how CISOs can stay ahead, CISOs by adopting a identity-first security.

The industry consensus about ransomware is that it's not going away anytime soon, evidenced by the consistent growth of ransomware attacks over the past decade. Ransomware gangs have a new strategy: Ransomware-as-a-service (RaaS) organizations are focusing on African nations as initial targets for nation-state attacks before launching malicious campaigns in more developed climes. Reco CPO Gal Nakash explains how this approach makes perfect sense from the attackers' perspective.

Reco CEO & Cofounder Ofer Klein discusses that fact that most companies underestimate their SaaS exposure. He provides ways to prevent data exposure by having visibility into all connected SaaS apps and avoiding giving apps permissions they ask for in this thought leadership piece for Forbes Technology Council.

As organizations embrace a more interconnected ecosystem of SaaS applications, the traditional security perimeter has become increasingly blurred. The shift towards SaaS adoption has introduced new security challenges that can expose companies to threats they didn’t anticipate. Reco CPO Gal Nakash shares how business leaders can stay secure as they continue to use the hundreds of SaaS applications across their networks.

Unlocking AI’s potential to deliver greater efficiency, cost savings and deeper customer insights requires a consistent balance between cybersecurity and governance. AI infrastructure must be designed to adapt and flex to a business’ changing directions. Cybersecurity must protect revenue and governance must stay in sync with compliance internally and across a company’s footprint.

With 23andMe in crisis, strengthening identity security has never been more urgent. DNA data exposes victims of identity attacks to a lifetime of potential liability. If it’s compromised, you can't reset it. Identity security isn’t just a technical issue, it’s a fundamental component of corporate trust between a company and its users. When executive leadership is in flux, the entire organization is exposed to questions around how an entity will enforce both the strategic and the tactical behaviors that customers need to see.

In the first of this four-part video series, a panel of expert CISOs discuss the long-term impacts of the SEC’s cyber rules, which went into effect last year and have significant implications of incident disclosure processes. Decipher editor Lindsey O’Donnell-Welch talks to Merritt Baer, CISO at Reco, Neda Pitt, CISO at Belk, and Danielle Snyder, cyber and compliance lead at Raytheon, about what these rules mean for incident disclosures at a broader level, as well as CISO liability.

We're excited to be recognized on executive search firm Will Reed's list of the Top 100 early-stage companies building strong and positive company cultures!  This list acknowledges our dedication to building a people-first culture alongside innovative, effective products. Will Reed has spotlighted these companies’ upleveled care for their employees, considering criteria like PTO, maternity leave, remote work, healthcare, and more.

The Enterprise World magazine features Reco as part of their September edition of the most trusted cyber security companies to watch in 2024. The article covers how Reco is leading the SaaS security domain with comprehensive coverage, posture management, shadow app discovery, and threat detection and response.

As organizations increasingly rely on SaaS applications, the risk of data breaches and unauthorized access grows significantly. Dan K Anderson, a CISO and vCISO with deep knowledge of information governance, highlights the challenge in this article. Traditional DLP solutions often fall short when it comes to securing unstructured communication data, leaving organizations exposed to risks they might not even know exist. Reco bridges this gap by providing SaaS app discovery, continuous monitoring, automated risk assessment, identity governance, and threat detection and response for all SaaS applications.

It's no great revelation to say that SaaS applications have changed the way we operate. We routinely rely on cloud-based applications to conduct our basic functions, and the only true perimeter has become the identities with which we log into these services. Unfortunately applications asks for various amounts of permissions into our data, which often rely on other vendors' services, creating not a network, but a tangle of interdependent intricacies that has become so complex most security and IT teams don't even know how many SaaS applications are connected in, let alone what they are or their access permissions. Luckily there are steps to take to untangle this ball of SaaS yarn IT and security teams worldwide are left to deal with.

The conversation is shifting: security is no longer an afterthought, it's the priority. Reco CISO Merritt Baer emphasized the critical nature of security in today's digital landscape. Gone are the days when security took a backseat to other IT investments like legacy modernization or AI. Security has emerged as the top budget item that companies are least likely to cut, regardless of economic pressures.

Hackers, data breaches, and shadow apps are among the many threats companies monitor. Black Hat is an annual cybersecurity conference where vendors share how they approach modern cybersecurity's complexities. Reco was interviewed by KSNV News 3, Las Vegas on how SaaS apps are vulnerable to data exposure. Reco CEO Ofer Klein described the urgency for SaaS security, and how it goes beyond two-factor authentication.

Reco CISO Merritt Baer shares thoughts on the recent CrowdStrike outage with VentureBeat and why this moment is a call to action for greater cyber resilience and maturity in their approach. Security vendors need to understand that they are holding customer outcomes in their hands. Ultimately, every enterprise has challenges around patching cadence. The fact that CrowdStrike required their end customers to do the work to ameliorate created more time to respond and time to remediate.

Reco CISO Merritt Baer was included in this month's CIOs On the Move for her recognition as a security executive who has stepped into a new leadership position. She joins an amazing list of 70 CIOs, CTOs, and CISOs set to drive innovation and lead their teams to new heights.

Claiming to have breached the U.S. Treasury and instead releasing 33 terabytes of data on the dark web exfiltrated from banking and fintech provider Evolve, LockBit’s latest breach shows how vulnerable fintech is to cyberattacks. Reco CEO & Co-founder Ofer Klein, and CISO Merritt Baer discuss this latest cyber attack and how CISOs can cut through the deception with data.

Reco provides a comprehensive solution for SaaS security that secures the entire lifecycle of a SaaS app, ensuring full visibility into connected SaaS applications, precise access management, and real-time threat detection. Customer testimonials highlight its effectiveness in reducing data exposure and improving response times.

In a recent interview with SafetyDetectives, Ofer Klein shares insight into the innovative solutions his company offers to address the growing challenges in SaaS security. Klein discussed the evolving landscape of SaaS applications, the critical need for automated security measures, and the future trends in cloud technology. This interview highlights Reco’s unique approach and the importance of proactive security in today’s fast-paced digital environment.

As organizations grapple with the implications of cybersecurity on their bottom line and reputation, the question of whether the CISO role is worth the inherent risks looms large. Beyond financial incentives, prospective CISOs must carefully consider the personal and professional liabilities associated with the position. Reco CISO Merritt Baer weigh in on the role of the CISO and how we can make being a security executive a real way to create change.

Reco CEO & Cofounder Ofer Klein discusses how traditional security models are no longer enough to protect against data breaches in today's threat landscape. The shift from reactive to proactive security measures is crucial as cybercriminals become more sophisticated, and a framework like zero trust is necessary. This article covers getting started with SaaS security in a zero trust environment.

An interview with Reco CEO & Cofounder Ofer Klein on how Reco empowers organizations to discover their SaaS applications, identities, and data, control access and prevent the risk of exposure.

Abuse vulnerabilities are prevalent in security, and can't be ignored as they lead to catastrophic outcomes if overlooked. Reco's Director of Security Research delves into an abuse vulnerability recently discovered in GitHub and how organizations can prioritize these types of vulnerabilities.

As we head into the second half of 2024, it’s important to recognize the top SSPM software that are making significant steps in enhancing cloud application security. These tools maintain security standards and at the same time, actively improve how organizations protect and manage their SaaS environments. This articles highlight some of the standout 8 SSPM solutions in the market.

Reco has been named a finalist for best SaaS security solution as part of The Cloud Security Awards. This award recognizes organizations that are stepping up to the challenge of helping organizations keep their SaaS identities and assets safe.

Reco had the opportunity to share our story as a SaaS security solution in the Startup of the Week: our aim to empower enterprises to discover what's connected in their SaaS ecosystem, prioritize, and detect potential points of exposure, as well as our journey to get here.

Reco has been shortlisted for best SaaS security solution as part of The Cloud Security Awards. This award recognizes organizations that are stepping up to the challenge of helping organizations keep their SaaS identities and assets safe.

The role of a chief information security officer (CISO) is becoming increasingly important as the dynamic landscape of cybersecurity threats now affects nearly all aspects of business. As today’s security threat environment evolves, SaaS security posture management (SSPM) has become a key part of a CISO’s security defense plan.

When bad guys started encrypting their data, Gal Nakash and Tal Shapira set out to beat them at their own game. The two cybersecurity experts, then with Israel’s equivalent of the FBI, used artificial intelligence to map data sharing in order to understand who was communicating with whom and head off attacks.

Ofer Klein is a decades-long Israeli Defense Force helicopter pilot and avid kitesurfing enthusiast who likens the adrenaline rush to being a founding CEO of a thriving security startup. It’s this unique background and experience that have been key to Ofer’s leadership style and Reco’s success.

Mortgage lending firm LoanDepot has disclosed a cyberattack resulting in data encryption and system disruptions.

GitHub has revealed that service disruption in December was due to it rotating credentials after the discovery of a high-severity bug, and warned that some customers may need to take additional action to stay secure.

As we head into 2024, we believe cross-border compliance, the need for safety standards around new Generative AI tools and continued Microsoft 365 and Okta Cyber threats will be key themes.

AI, particularly widely available tools like ChatGPT, has made big waves in 2023. Is this set to continue into next year or will we see a different approach to using the technology...

Reco today launched a platform that makes use of machine learning algorithms and graph technology to secure software-as-a-service (SaaS) applications...

The annual enterprise cybersecurity conference Black Hat exploded into Las Vegas this week, giving the Moscone-constrained RSA Conference earlier this year a run for its money...

Reco is pioneering a new approach to SaaS data security driven by interaction-based analytics, the company announced. With organizations maintaining an average of over 125 SaaS applications...