Demo Request
Take a personalized product tour with a member of our team to see how we can help make your existing security teams and tools more effective within minutes.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Home
Blog

Reco Secures $25M to Close the ‘SaaS Security Gap’ with AI-Native Dynamic SaaS Security

Andrea Bailiff-Gush
Updated
April 22, 2025
February 10, 2026
5 minutes
Ready to Close the SaaS Security Gap?
Chat with us

Investment fuels development of Reco’s AI-native dynamic SaaS security solution, and scaling go-to-market amid surging market demand 

 

[Miami, FL – April 22, 2025] – Reco, a leader in Dynamic SaaS Security, today announced $25 million in additional funding from Insight Partners, Zeev Ventures, boldstart ventures, Angular Ventures, and funding from new investor Redseed following 5x growth in 2024. This latest round brings Reco's total funding to $55 million. The company intends to leverage the new funding towards scaling its AI-native SaaS security platform, while accelerating channel partnerships and capitalizing on its ongoing market momentum.


The SaaS security landscape has undergone a major shift, with organizations realizing that legacy security solutions can no longer keep pace with modern business needs. Enterprises now run an average of 1,061 SaaS applications—a 26% increase over the past two years. At the same time, 80% of employees admit to using unauthorized SaaS and AI apps, commonly known as ‘shadow tools,’ which contribute to 35% of data breaches. The financial toll is often substantial, with the average cost of a data breach reaching a staggering $4.88 million in 2024, according to IBM. 

The investment comes amid Reco’s rapid growth, with the company achieving a fivefold increase in ARR over the past year and a threefold rise in customer numbers. Reco has experienced huge market adoption and has a NPS of 82 across all of their customers. As the company continues to scale, Reco is expanding its capabilities - adding new integrations weekly and earning the trust of leading enterprises in various industries including high-regulated financial services, insurance, healthcare, pharma, and tech. With its workforce doubling across multiple regions, Reco recently appointed Bob Horn as its new CRO. Bringing over two decades of sales leadership experience in cybersecurity startups, Horn will lead the company’s global sales strategy as it accelerates its trajectory of hypergrowth.

“The adoption of AI apps and agents has made SaaS security more complex and dynamic than ever. Combine this with the proliferation of SaaS apps including shadow apps, and we’re seeing a growing gap between the reality of the ecosystem and what legacy SSPM tools can provide. Businesses need security solutions to be proactive vs. just reactive – simplifying security without slowing down the business,” said Ofer Klein, co-founder and CEO of Reco. “The strong interest in this oversubscribed round reflects the confidence of our customers, strategic partners, and new investors who share our vision. We are enabling enterprises to contain SaaS sprawl, and this demand-driven growth is proof of how Dynamic SaaS Security is the future.”

Reco addresses these critical challenges with a comprehensive application discovery engine capable of identifying and classifying over 50,000 applications, providing visibility into an organization’s SaaS ecosystem. Its proprietary SaaS App Factory™ currently secures over 175 applications and integrates new apps within 3-5 days – far faster than the months-long timelines of legacy providers. Operating at 10x the speed of competitors with 80% less implementation and maintenance effort, Reco delivers continuous security and compliance, even as new apps and AI agents are introduced or updated – offering businesses the protection they need at the pace they require.

"We've witnessed firsthand how Reco transforms SaaS security from a constant struggle to a strategic advantage," said Mihau Faur, CIO, UiPath. "Their technology reduces our team's workload significantly while providing substantially better visibility and protection across our rapidly evolving SaaS environment.” 

With this funding round, Reco will continue expanding the AI-driven SaaS App Factory™ on top of over 175 apps supported today to maintain industry-leading integration speeds while also introducing Reco AI Agents for alerts and identities – becoming the industry’s first to offer agents designed to help security teams streamline operations and deliver actionable insights from SaaS. Leveraging secure AI-driven analytics, automation, and contextual intelligence, the agents prioritize alerts, identify threats, and reduce workloads – all while maintaining strict data privacy. 

“Reco has identified a critical security gap that legacy vendors typically cannot address,” said Praveen Akkiraju, Managing Director, Insight Partners. “Reco is transforming SaaS security – delivering seamless execution that scales with enterprise needs and is fueled by deep customer trust. Their innovative approach to Dynamic SaaS Security and exceptional team position them to lead this rapidly expanding market. We’re excited to partner with the Reco team as they accelerate their growth and go big on the market.”

 
Reco will be exhibiting at the RSAC Conference 2025 at booth #1361. 

Media Contact

Tamar Harel
tamar@tellny.com

No items found.

Andrea Bailiff-Gush

ABOUT THE AUTHOR

Andrea is the Head of Marketing of Reco, responsible for driving demand and growth in SaaS security. Andrea is a cyber security veteran, having supported various security companies across various growth milestones, from Seed round to acquisition. She is passionate about growing businesses and teams to drive profitable outcomes and better well being for CISOs and security practitioners.

Technical Review by:
Gal Nakash
Technical Review by:
Andrea Bailiff-Gush

Andrea is the Head of Marketing of Reco, responsible for driving demand and growth in SaaS security. Andrea is a cyber security veteran, having supported various security companies across various growth milestones, from Seed round to acquisition. She is passionate about growing businesses and teams to drive profitable outcomes and better well being for CISOs and security practitioners.

Ready to Close the SaaS Security Gap?
Chat with us
Table of Contents
Get the Latest SaaS Security Insights
Subscribe to receive updates on the latest cyber security attacks and trends in SaaS Security.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Explore Related Posts

When AI Becomes the Insider Threat: Understanding Risks in Modern SaaS Environments
Tal Shapira
As AI becomes deeply embedded across SaaS platforms, it is increasingly operating with trusted internal access once reserved for employees and service accounts. This article examines how AI can function as an insider threat, why these risks are harder to detect than traditional insider activity, and what signals security teams should watch for. It also explores common governance gaps, real-world scenarios, and practical approaches organizations can take to reduce AI-driven insider risk without limiting legitimate AI use.
The SaaS Attack Surface Just Expanded to Clawdbot
Gal Nakash
Clawdbot, the viral AI assistant that went mainstream in January 2026, exposes a new class of shadow AI risk: autonomous agents with shell access, plaintext credential storage, and over 1,200 misconfigured instances leaking API keys and chat logs. Unlike traditional shadow AI tools, Clawdbot represents a qualitative shift in attack surface—if your employees installed it and connected it to work systems, you now have an unmanaged endpoint with persistent access to sensitive data and zero visibility.
Google AuraInspector: What the New Salesforce Security Tool Means for Your Organization
Nitay Bachrach
Google's Mandiant released AuraInspector, a tool that exploits misconfigured guest user sharing rules in Salesforce Experience Cloud sites through GraphQL endpoints. While the first public tool to use this specific technique, the underlying vulnerabilities have been exploitable since at least 2022 through other tools. Organizations should audit their Salesforce permissions, disable unnecessary guest user API access, and implement continuous monitoring to prevent data exposure.
See more featured resources

Ready for SaaS Security that can keep up?

Request a demo