Reco AI and Agent Security logo

    Reco AI and Agent Security

    Sold by
    Reco secures the ecosystem so enterprises can enable agents with confidence. The Reco Platform discovers every agent, app, and identity across your environment, prioritizes real risk over raw alert volume, and remediates before exposure becomes a breach.

    Ratings and reviews

    4.6
    14 ratings
    3 star
    2 star
    1 star
    86%
    14%
    0%
    0%
    0%
    0 AWS reviews
    |
    14 external reviews
    External reviews are from G2  and PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (14)
    Krishan Y.

    Streamlined Security Monitoring with Reco

    Reviewed on Aug 20, 2026
    Review provided by G2
    What do you like best about the product?
    I use Reco to monitor and manage security with better visibility into user activity, potential risks, and security events, which helps our team identify suspicious behavior and investigate issues faster. I like most about Reco is its visibility and ease of use, which brings useful security insights together in one place. The straightforward interface and actionable alerts help us reduce the time we spend investigating security issues. The visibility Reco provides into user activity helps us spot unusual behavior or potential risks earlier, and the alerts help prioritize what needs our attention. These features make Reco valuable, allowing us to get a clear picture of what's happening across our environment without digging through multiple sources.
    What do you dislike about the product?
    One area that could be improved is the level of customization. We would benefit from more flexibility around alerts, dashboards, and reporting to better tailor Reco to our specific team requirements. It would also be helpful to have more detailed documentation and guidance for advanced configurations and integrations. These are relatively minor areas, but improving them would make the overall experience even better.
    What problems is the product solving and how is that benefiting you?
    Reco improves security management by providing better visibility into user activity and potential risks. It reduces manual investigation and streamlines identifying and prioritizing security risks, saving time. The straightforward interface and actionable alerts help us understand and respond to suspicious behavior quickly.
    Nirmal K.

    Reco Excels at Discovering Hidden SaaS Integrations and AI Agents

    Reviewed on Aug 18, 2026
    Review provided by G2
    What do you like best about the product?
    Shadow SaaS & AI Agent Discovery: Reco excels at uncovering hidden integrations. It continuously discovers unsanctioned SaaS apps, embedded GenAI tools, third-party OAuth connections, and autonomous AI agents that often bypass traditional security perimeters.
    What do you dislike about the product?
    Varying Connector Depth: While Reco connects to an impressive number of applications, the depth of visibility and remediation capabilities can vary significantly depending on the target app. SaaS tools with limited or poorly documented APIs will naturally offer less granular security coverage.
    What problems is the product solving and how is that benefiting you?
    Identity-First Threat Detection (ITDR): Instead of just looking at static configurations, it monitors behavioral signals. It links posture data with user roles to detect privilege abuse, compromised accounts, or excessive access across both human users and "non-human identities" (like service accounts or API keys).
    Shivansh V.

    Excellent Visibility Into Identities, Permissions, and Integrations

    Reviewed on Aug 03, 2026
    Review provided by G2
    What do you like best about the product?
    Reco maps all user identities, permissions, and integrations, helping teams detect security risks and reduce attack surfaces efficiently.
    What do you dislike about the product?
    Reco is highly effective for visibility and automation, but it can struggle with highly customized or niche SaaS applications that use non-standard APIs. It also requires careful fine-tuning to prevent excessive alerts or inaccurate notifications. In addition, it mainly operates as a detection-only tool and lacks built-in remediation features, which can create extra work for users who need automated fixes.
    What problems is the product solving and how is that benefiting you?
    Organizations gain a unified, real-time view across all applications, identities, and AI agents, which makes it easier to spot, assess, and prioritize risks.
    Sharon Lawrence

    Improved security monitoring has prioritized critical alerts but still generates many false positives

    Reviewed on Jul 23, 2026
    Review provided by PeerSpot

    What is our primary use case?

    I used Reco when I worked at the company as a software security tool that monitored all the software the company was using. Reco functioned as a detection tool that identified any type of malicious event occurring within the software environment for users.

    What is most valuable?

    What I appreciated most about Reco was its strong detection capability. It detected when we received a large volume of critical alerts and displayed those at the top, alerting us that it was urgent to investigate them.

    What needs improvement?

    What I disliked about Reco was, I remember the system didn't have tickets #'s and it was hard to keep up with sometimes. I would have to save the incident as web link to keep up. Its sometimes produced a lot of false positives. There were things that were not really alerts but triggered anyway, and we had to go through many of them even though nothing was actually wrong. But, then they found a way fine-tune it more later.

    For how long have I used the solution?

    I have been using Reco for about a year overall in my career.

    What do I think about the stability of the solution?

    I have seen some lagging and downtime with Reco. There were times when there were glitches, when dealing with logs pages, but they fixed them, even though it took a while to address them. They would either fix them or tell you how to work around them.

    What do I think about the scalability of the solution?

    Regarding Reco's scalability, I think they can add more to it, but I'm not entirely sure how to phrase this.

    How are customer service and support?

    I did not have to contact Reco's customer support because the client took care of that issue, but we did have team meetings with Reco sometimes. Sometimes we discussed any problems and concerns we had during live Reco tech support calls.

    Which solution did I use previously and why did I switch?

    We used alternatives such as Gurucul, which allows you to see malicious things triggering on a network basis instead of just the software, and we also had CrowdStrike. Those are a few alternatives we used.

    How was the initial setup?

    The initial deployment of Reco was not difficult.

    What about the implementation team?

    Maintenance for Reco was being taken care of by them.

    Which other solutions did I evaluate?

    Of all the alternatives, I preferred Reco more because it was easier.

    What other advice do I have?

    Reco is spelled R E C O. If Reco had a system for setting up agents to automate tasks in our business processes, that would be beneficial and would make things go much faster. Regarding Reco's use of eight different sensors for SaaS application discovery in our environment, I do not understand what they mean by that. I would rate this review a 7.

    reviewer2817672

    Security posture management has provided clear SaaS and AI agent risk visibility and alerts

    Reviewed on Jul 17, 2026
    Review provided by PeerSpot

    What is our primary use case?

    I implemented Reco for cybersecurity posture management for SaaS applications, and also for AI agents posture, so SaaS security posture management and agent posture management. I am using Reco for detecting attacks and generating alerts on bad behavior in SaaS applications, not only posture.

    I am using the eight different sensors for SaaS application discovery in my environment, and it works well. To be honest, I am not using that in depth, the discovery module; I know the SaaS applications that I have and I integrate them directly. I see that it's discovering applications through these sensors, and I am using the email one, which works well; it checks on the emails and sees if someone is using a SaaS application. But besides that one, I am not using the other sensors. That sensor is working well, but I am not, let's say, taking advantage of that module yet, the discovery module.

    My impression of Reco's AI Agent Security features ability to discover and govern connected AI agents is that it works well; I am using that for my agents on Copilot Studio. I integrate Reco with Copilot Studio, and it's showing me the agents, the inventory of agents, and the posture of those agents. It's working well, but the only problem was with the integration with Copilot Studio because there was a centralized integration; I have to integrate with each environment in Copilot Studio, so it's not easy to integrate because I have to go one by one, one agent per agent. But once I am integrated, it's very good; it shows good information and posture risks on those agents, so it's working well.

    I am aware of the pricing aspect of Reco.

    I am not using Reco's agents for automating tasks in my business processes.

    I do not use the device management feature in Reco.

    What is most valuable?

    What I like about Reco is that it's pretty easy to integrate with the applications; it's almost plug and play. The interface and the user experience of the interface are very good, and it's very easy to find the detections, alerts, to filter, and to navigate the interface. The support is also very good; I have been implementing the solution with them, and they have been helping me a lot. The support works well, and it's also very good at prioritizing the detections, so I don't see many false positives.

    The key benefits that I have seen from using Reco are that it helps me to mitigate risks in SaaS applications; I have a lot of SaaS applications with many configurations inside. Without Reco, I am losing critical information to understand if I have risks in the cloud, so with Reco, I now have visibility. I am maybe not 100% sure, but in a high percentage, I can assure that I don't have high or critical risks in my SaaS applications, which are growing every day and becoming more important. It helped me to mitigate those risks, basically.

    The coverage of SaaS applications is very good; they cover almost all of my SaaS applications, and they have a big list of SaaS applications supported.

    What needs improvement?

    I am not using the inclusion of LLMs in the knowledge graph yet; to be honest, I see that it's showing things, but until now, I don't see big value on that.

    Apart from the integration with Copilot Studio that I mentioned, I would like to see more posture security controls added in some SaaS applications; I see a few of them, but it could have more.

    I would like to see real-time detection in prompts included to Reco in the next releases, maybe in Copilot Studio to see if I have any attack or prompt injection or whatever in Copilot Studio and all the agent platforms to inspect those prompts.

    For how long have I used the solution?

    I have been working with Reco for one year.

    What do I think about the stability of the solution?

    I haven't had any performance or stability issues with Reco; it is stable.

    What do I think about the scalability of the solution?

    Regarding scalability, what I mean by scalable is that it scales in and out automatically, and I don't see that; it's transparent for me.

    How are customer service and support?

    The support is very good; I have been implementing the solution with them, and they have been helping me a lot. The support works well, and it's also very good at prioritizing the detections, so I don't see many false positives.

    I would evaluate customer service and technical support from Reco as very good.

    Which solution did I use previously and why did I switch?

    Prior to adopting Reco, I had a feature that Netskope has for posture, SaaS posture management, which wasn't good; it was very immature.

    How was the initial setup?

    The deployment process was pretty smooth; they were with me, the support helped me to deploy the solution, and they sent me all the step-by-step procedures for integrating with the SaaS applications. It was pretty smooth, and I didn't have any challenges there; the only challenge was the Copilot Studio integration that I had to do for each Copilot Studio environment.

    What about the implementation team?

    I purchased Reco directly through the vendor.

    What was our ROI?

    It's difficult to find return on investment with Reco because it's more related to risk, to risk mitigation. I could say that maybe I have mitigated a couple of risks that could lead to money loss, but to be honest, I can't calculate that. Before Reco, I didn't have visibility on the posture of SaaS applications; it wasn't that I saved time with Reco; it was having more visibility and mitigating more risk, which is difficult to show as a return on investment.

    What's my experience with pricing, setup cost, and licensing?

    My experience with the pricing was reasonable; it was okay for the features and what the product provides. The contract, the negotiation, and everything were okay.

    Which other solutions did I evaluate?

    I evaluated a couple of other options; I decided to go with Reco mostly because of the integrations, the supported integrations, and the user experience. How it shows the detections is pretty clear and organized, while the others either didn't integrate with some of my SaaS applications or they showed the posture detections very confusingly or were missing detections.

    What other advice do I have?

    I am using Reco as a full SaaS.

    The only disadvantage at that moment was that Reco wasn't so popular; it wasn't implemented in companies in my region, so that was the only risk; it was a new tool without experience in at least companies that I could ask for recommendations.

    Based on my experience with Reco, I would say to test it, try it out, and see if it solves your problems. I have no advice to give except that it's a good product that has improved a lot over time. I would rate this review as a 9.

    Facilities Services

    Revolutionized Tenant Communication with Ease and Professionalism

    Reviewed on Jul 09, 2026
    Review provided by G2
    What do you like best about the product?
    I appreciate Reco's sharp focus on streamlining property and facility management communication documents, perfectly tailored to the German tenant relations workflows I oversee alongside Zoho CRM Plus. Unlike generic text editing tools, Reco restructures messy, technician-submitted shorthand into logically organized, tenant-friendly content with minimal manual input from me. Its built-in industry tone alignment is invaluable, automatically balancing polite, approachable language for residential tenants and formal, business-appropriate wording for commercial building clients, matching local German facility service communication standards. I love how quickly it standardizes facility industry terminology, swapping informal shorthand for uniform professional terms, making all archived service logs easy to review during audits. The lightweight, straightforward interface boosts my daily efficiency, allowing even junior team members to generate polished, shareable content swiftly. For our team managing dozens of active tenant tickets each day, Reco turns disjointed field updates into complete, clear, audit-ready documentation, enhancing tenant satisfaction and streamlining work orders in Zoho CRM Plus. Reco's ability to structure unorganized field notes into logical documents, its adaptability for different tenant groups, and the way it eliminates hours of repetitive rewriting make it an irreplaceable daily tool for me.
    What do you dislike about the product?
    Reco lacks native German facility management compliance term libraries tailored to local building regulations. It can standardize generic property wording, but it does not automatically insert legally required German industry phrases for heating inspections, structural moisture audits, or rental contract notifications. I still manually add regulated terms like Heizungswartung nach §14 HeizKV or Widerrufsrecht für Gewerbeimmobilien, which adds extra editing steps before saving records to Zoho CRM Plus. A preloaded glossary of German facility legal terminology would eliminate this repetitive manual adjustment. Customized audience tone presets split by tenant category are missing. Our portfolio covers three distinct groups: private residential tenants, small retail shop operators, and large commercial office clients. Each needs a unique communication style—warm and reassuring for residents, highly contractual for commercial clients bound by formal service agreements. Reco only offers generic formal/informal sliders, so I manually rework paragraphs to fit each tenant type every time. Dedicated one-click presets for residential, retail, and office facility contacts would remove redundant rewriting entirely.
    What problems is the product solving and how is that benefiting you?
    Reco transforms messy technician notes into polished, professional documents, saving me time and improving tenant trust. It ensures consistent communication by standardizing tone and terminology, critical for audit-ready records. This reduces manual rewriting and supports smooth workflow with Zoho CRM Plus.
    Information Technology and Services

    Context-Rich, Cross-App Alerting That Cuts Through the Noise

    Reviewed on Jun 17, 2026
    Review provided by G2
    What do you like best about the product?
    It correlates events across applications to deliver context-rich alerts, instead of firing isolated, per-app alerts.
    What do you dislike about the product?
    Reco is detection-only; it doesn’t provide prevention.
    What problems is the product solving and how is that benefiting you?
    Reco is helping us get a better handle on AI and shadow AI governance across our SaaS estate.
    Nick N.

    Reco should be a part of your security stack

    Reviewed on Jul 14, 2025
    Review provided by G2
    What do you like best about the product?
    The insight it has on all cloud environment.
    What do you dislike about the product?
    Nothing so far. Reco's Dev team thinks outside the box and listens to customers.
    What problems is the product solving and how is that benefiting you?
    Insight on all things cloud and where gaps may be identified by learning user behavior.
    Computer & Network Security

    Reco saves my time to home develop detections on saas we use for our operation

    Reviewed on Jul 10, 2025
    Review provided by G2
    What do you like best about the product?
    Except SSPM visibility, reco also provides dynamic saas anomaly detection, which is vital for a mutli-saas environment and usage.
    What do you dislike about the product?
    Nothing at the moment. we understand reco is en route to grow and building its offering.
    What problems is the product solving and how is that benefiting you?
    Rather just an SSPM, reco also shedding light on compliance issues.
    Pedro B.

    Reco the monster!

    Reviewed on Jun 30, 2025
    Review provided by G2
    What do you like best about the product?
    Reco is growing and growing. Started as a normal SSPM, but early adapted to the new AI world, by leveraging comprehensive analysis that helps an analyst to really understand what is happening. We can even trust on Reco to be a source of truth, for alerts that we ship to our SIEM!
    What do you dislike about the product?
    Nothing at the moment. Since the beginning of our partnership, everything is being perfect.
    What problems is the product solving and how is that benefiting you?
    Reco is helping us to speed up threat analysis, as well as posture management!