Demo Request
Take a personalized product tour with a member of our team to see how we can help make your existing security teams and tools more effective within minutes.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Home
Blog

How UiPath Leverages Reco for SaaS Data Exposure Management

Reco Security Experts
Updated
December 9, 2024
December 17, 2024
4 min read
Ready to Close the SaaS Security Gap?
Chat with us

UiPath, a global leader in robotic process automation, partnered with Reco to enhance its data exposure management across SaaS platforms like Microsoft OneDrive, SharePoint, and Google Drive. In the beginning, they were having difficulty understanding the level of data exposure resulting from numerous shared drives, and exposing critical data to unauthorized access in the process.

UiPath initially tried to manage the issue with native Microsoft security tools and their Microsoft Sentinel SIEM. However, gaining a full understanding of UiPath’s SaaS environment was proving impossible with this method, so the Security team decided to look for an alternative solution, which led them to Reco. 

Once Reco was deployed, UiPath was immediately able to gain visibility into over-privileged data access to exposed files across SharePoint, OneDrive, and Google Drive. Reco’s contextual alerts fed into UiPath’s SIEM, and then allowed their automations to appropriately triage and act to reduce their exposure.

Utilizing the posture management and threat detection capabilities provided by the Reco SaaS security platform, UiPath was able to:

  • Enhance security posture. They gained visibility into over-privileged access and risky configurations and strengthened identity and access management controls.
  • Save time. Automating data exposure remediation efforts saved the team thousands of hours of manual effort, allowing the security team to focus on strategic initiatives instead of tedious tasks.
  • Increase the value of existing tools. By integrating Reco with Microsoft Sentinel SIEM, UiPath was able to mitigate risks in real time.
  • Reduce data exposure. By implementing the principle of least privilege across multiple SaaS shared drives using automated workflows, UiPath reduced its data exposure.

“We knew the power and capabilities of our robots, and how they could make our Sentinel SIEM more powerful. By automating the access removal process by passing Reco’s contextual detections to our SIEM, we have saved thousands of hours of work, reduced the risk of data exposure across multiple SaaS shared drives, and now continue to reduce data exposure risks. By gaining the intelligence needed to secure our data, we continue toward our constant goal of making digital transformation a reality in this partnership,” said UiPath CIO, Mihai Faur. 

Read the full story here.

No items found.

Reco Security Experts

ABOUT THE AUTHOR

Technical Review by:
Gal Nakash
Technical Review by:
Reco Security Experts

Table of Contents
Let’s Talk About Your Non-Human Users
Chat with us
Get the Latest SaaS Security Insights
Subscribe to receive updates on the latest cyber security attacks and trends in SaaS Security.

Explore Related Posts

LWR Is the New Aura: A Pentester's Guide to Salesforce's WebRuntime API
Nitay Bachrach
Salesforce Experience Cloud sites - public-facing web apps that run natively on top of a Salesforce org - are one of the most consistently under-scrutinized parts of the Salesforce attack surface. They're reachable by anyone with a browser, they're driven by a guest user identity that inherits whatever sharing rules and object permissions an admin configured for it, and unlike the rest of the org, nothing about them requires a login to start probing.
Two Frontier Labs, Two Weeks, One Root Cause: What Anthropic's Eval Incident Tells Us About Agent Security
Tal Shapira
On July 30, Anthropic published a retrospective on three cybersecurity evaluation incidents involving its Claude models. It's a striking piece of transparency — and it lands just weeks after OpenAI disclosed something strikingly similar involving Hugging Face.
The “City-Forum” Campaign - An advanced attacker is targeting Salesforce and ServiceNow instances worldwide
Nitay Bachrach
Reco is tracking an ongoing campaign we've named the City-Forum Campaign, after a domain tied to the threat actor's IP (more on that below). A single server is pulling records out of Salesforce Experience Cloud sites and ServiceNow (SNOW) Service Portals, from infrastructure that has been standing since March 2025.
See more featured resources

Your agents are already running. Do you know what they're doing?

Request a demo