Aiming where traditional SSPM falls short: Reco positions the launch as a break from traditional SSPM, arguing that those tools were never designed for autonomous systems.”SSPM sees connections. We see behavior,” Klein said. While a typical SSPM might flag a Zapier-Salesforce link as a third-party integration, “We identify that this specific Zapier workflow is an AI agent that runs every 15 minutes, accesses customer payment data, enriches it with external APIs, and writes results to a shared spreadsheet, all without human interventions,” he explained, emphasizing the difference in risk profiles.Cross-system visibility is another gap cited by Reco. SSPM tools analyze each application in isolation, whereas Reco recognizes that agents span multiple systems and treats them as one autonomous system with compound risk.These distinctions align with how SSPM tools are generally designed today. Industry definitions describe SSPM as focusing on continuously monitoring SaaS applications for misconfigurations, managing permissions, and identifying risky integrations or compliance gaps.In practice, that means SSPM is effective at answering what is connected and who has access by inventorying applications, tracking OAuth integrations, and flagging overly permissive settings. Reco draws a line in the behavioral context, arguing SSPM tools are less equipped to analyze how an integration behaves once it is approved, and that is where most of the agent-induced risks lie. Reco AI Agent Security is available immediately as part of the company’s existing SaaS security platform, with support for previously noted SaaS, automation, and AI tools at launch and additional integrations expected to roll out on a continuous delivery basis.
First seen on csoonline.com
Jump to article: www.csoonline.com/article/4146915/reco-targets-ai-agent-blind-spots-with-new-security-capability.html
