Reco has integrated its agent security platform with Cyera to help organisations rank AI agent risks linked to sensitive data.
The integration combines Cyera's data classification labels with Reco's mapping of agent identities, permissions, application connections and activity. Together, these are intended to show which AI agents can reach sensitive information, how that access was granted and which related systems could also be exposed.
Security teams have been grappling with the spread of AI agents across business software, as the same tools used by employees are increasingly being accessed by automated systems. That has created a need to understand not only which agents exist inside an organisation, but also what data and workflows they can touch.
Under the arrangement, Reco ingests Cyera's labels for data categories including business intellectual property, financial information, health records and regulated data into what it calls the Reco Graph. It then uses that context to flag access routes where an agent's reach into sensitive systems may present higher risk.
This is intended to help security teams distinguish between routine access and activity that may require faster remediation. An over-permissioned agent with access to low-sensitivity material may not raise the same level of concern as one that can connect to customer records, regulated information or intellectual property.
Access focus
The move reflects a broader shift in cybersecurity towards identity and access management for machine actors as well as human users. As companies deploy more AI-driven assistants, bots and agents in everyday operations, security leaders face growing pressure to track permissions across applications, repositories and workflows.
That challenge is compounded by the way many AI agents interact with multiple systems at once. A single agent may be authorised to read files, update records, trigger workflow actions and move between business applications, creating chains of access that are difficult to monitor without a consolidated view.
Reco says its platform is designed to discover third-party applications, agents and permissions across organisations. It says it has more than 280 app integrations, more than 1,000 detection controls and more than 1 million agents detected.
Cyera positions itself as a security platform focused on visibility and control over data used by AI systems. In this partnership, its role is to identify where sensitive data resides so that agent access can be assessed against the importance of the underlying information.
Risk ranking
The practical issue for security teams is prioritisation. Large organisations often face extensive lists of permissions issues, but not every case has the same business impact. Linking access rights to the sensitivity of the data involved gives teams a way to rank which exposures to handle first.
That is the central premise of the integration. Reco provides the view of identities, permissions, connections and activity around AI agents, while Cyera contributes the data sensitivity context that can show why a specific access path matters.
"As agents gain access to more business systems, security teams need to know what those agents can reach and which access represents the greatest risk," said Zoe Hillenmeyer, chief operating officer at Reco.
She said the combination is intended to give customers a more precise way to address exposures tied to sensitive data.
"By combining Cyera's data sensitivity context with Reco's view of agent identities, permissions, connections and activity, customers can identify the access paths that matter most and remediate them with much greater precision," Hillenmeyer said.
The integration is available now.