Reco's $55 million Series C funding round reflects a market reality that should concern every CX leader deploying AI agents: enterprises are building and deploying agents at a pace that outstrips their ability to govern them. The startup's discovery of 21,000 unknown agents at a Fortune 100 customer and an unsecured agent with Salesforce access at a financial services firm illustrates the governance vacuum now opening across contact centres and customer platforms. This isn't theoretical risk—HiddenLayer reports over 50 customers with agents already in production touching critical systems, whilst Cymphony identified 85,000 files suddenly accessible to AI tools at a single public company. The vendor landscape has responded predictably: at least two dozen startups now compete on agent security, each promising similar capabilities around discovery, monitoring, and access control. For teams already running Agentforce, Zendesk's AI agents, or Salesforce's broader agentic suite, the question isn't whether you need visibility into what your agents can access—it's whether your current platform's native controls are sufficient, or whether you need a dedicated security layer.
Reco's repositioning from SaaS security to end-to-end agent ecosystem governance signals where the market is heading. The company's existing integrations with 280+ applications and its ability to add new ones within days give it structural advantages over point solutions, but this also reveals the core problem: agent security requires visibility across your entire tech stack, not just within your CX platform. For CX teams, this means the agents you've deployed in Zendesk, Freshdesk, or Salesforce are only part of the picture—rogue agents built by other departments, legacy automation tools, and third-party integrations all represent blind spots. Klein's emphasis on "the entire ecosystem end-to-end" rather than agent-level controls alone suggests that traditional role-based access controls and permission models are insufficient; you need continuous visibility into what agents can actually reach and do. The funding round—which brings Reco's total to $140 million and values the company in the "high hundreds of millions"—validates investor conviction that this market will grow substantially, but it also signals that the CX platform vendors themselves may be losing control of the security narrative around their own agent offerings.
The crowding of the agent security market creates both opportunity and risk for CX teams. Opportunity lies in having multiple vendors compete on capability and price, potentially driving down costs and improving feature parity. Risk emerges from the fragmentation itself: each vendor uses different discovery methods, integrations, and governance models, meaning your security posture depends partly on which tools you choose and how well they integrate with your existing stack. For smaller CX operations without dedicated security teams, the proliferation of vendors may actually increase complexity rather than reduce it. The real question for CX leaders is whether to wait for platform vendors like Salesforce and Zendesk to embed agent governance more deeply into their core offerings, or to adopt specialist tools now and accept the integration overhead. Given that Reco's customers are already seeing triple-digit agent counts they didn't know existed, waiting may no longer be a viable option.
The round builds on a $30 million fundraise in February, taking the company's total funding to $140 million.