Reco joins Microsoft Pegasus programme for AI agent security

Reco has joined Microsoft's Pegasus startup programme, an invitation-only scheme that connects enterprise-focused startups with Microsoft's customer channels.

The move brings the cyber security company closer to Microsoft's ecosystem as businesses introduce more AI agents into workplace software, cloud services and internal workflows. Reco says its tools help organisations identify, monitor and govern those agents as they inherit access rights and interact with connected applications.

The announcement comes as security teams face growing challenges from software agents embedded across business systems. Unlike traditional applications, AI agents can act with delegated user permissions, move data between services and trigger actions across multiple environments, widening identity and access risks.

Reco focuses on what it calls agent security, a category aimed at tracking how AI agents connect to users, applications, permissions and activity across an organisation. It argues that as businesses roll out more agents inside widely used software environments, security teams need a clearer view of which agents exist, who owns them and what they can access.

That issue is especially relevant in Microsoft-heavy environments, where agents can sit across productivity tools, cloud infrastructure and line-of-business applications. Reco says its platform helps customers discover unmanaged agents, identify risky access paths and remove unnecessary permissions before they lead to data exposure or operational disruption.

"AI agents in Microsoft environments can inherit access across the identities, applications and workflows companies use every day," said Ofer Klein, founder and chief executive officer of Reco.

"Effective agent security connects each agent to its owner, permissions, connected applications and activity so security teams can reduce risk without interrupting legitimate work. Pegasus gives Reco a stronger path to bring that protection to more Microsoft customers and support it at production scale," Klein said.

Platform details

Reco says its platform is built on what it calls the Reco Graph, a data structure designed to map relationships between identities, applications, permissions, workflows and agents. It combines agent security, agent runtime and agent governance in a single system.

The company also says its Reco Factory can add support for third-party agents and applications in hours, while its Reco Library includes more than 280 pre-built integrations. It says the platform includes more than 1,000 detection controls and has identified more than 1 million agents.

Those figures reflect a market moving beyond broad warnings about AI risk towards more operational controls. Many organisations are now dealing with a mix of approved and unapproved agents connected to software-as-a-service applications, creating demand for basic inventory, policy and remediation tools alongside conventional identity and cloud security products.

Microsoft's Pegasus programme is aimed at startups considered ready for enterprise sales. Participation can give younger software companies access to Microsoft's distribution channels and technical resources, which can be significant for firms targeting large corporate customers already standardised on Azure and Microsoft business software.

For Reco, the relationship follows a separate financing announcement in which it said it had secured USD $55 million in additional funding, with participation from AT&T Ventures. That backing suggests investor interest in security products tied to AI adoption inside large organisations, particularly as governance and audit demands rise alongside experimentation.

AT&T is already a customer, according to Reco, and its chief information security officer described the role the platform plays in managing oversight across applications and AI systems. The telecoms group's comments underline the appeal of products that promise a more complete view of external integrations, access management and agent-related risks.

"Reco helps AT&T strengthen governance across our enterprise apps and AI ecosystem by providing greater visibility into agent security risk, access management, and third-party integrations," said Rich Baich, chief information security officer of AT&T.

"This insight enables better decision-making, improves audit readiness, and supports our commitment to securing innovation across the enterprise," Baich said.

Microsoft also framed the partnership as part of its broader effort to bring selected startup products into its commercial orbit.

"We're excited to welcome Reco to the Microsoft for Startups Pegasus Program. This initiative gives select startups access to Azure's cutting-edge AI models, enterprise-grade security and privacy, and unique go-to-market support to accelerate growth. Through Pegasus, startups can build fast, scale smart, and sell more by tapping into the full power of Azure and the Microsoft ecosystem," said Tom Davis, general manager of Microsoft for Startups.