CISO Tribune

Vendor comparison · 2 companies

Enkrypt AI vs Reco

Enkrypt AI sells an AI security platform with products for red teaming agents, enforcing runtime guardrails, turning policy into controls, auditing AI data, and scanning and gating MCP tool traffic. Reco sells the Reco Platform, which gives security teams visibility into their entire third-party ecosystem so they can discover risks, prioritize what matters, and fix it. CISO Tribune files both under AI model and agent security and AI governance. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Enkrypt AI
  • Reco
Enkrypt AI vs Reco: Products, Customers and Funding Compared
Enkrypt AIEnkrypt AI sells an AI security platform with products for red teaming agents, enforcing runtime guardrails, turning policy into controls, auditing AI data, and scanning and gating MCP tool traffic.enkryptai.comRecoReco sells the Reco Platform, which gives security teams visibility into their entire third-party ecosystem so they can discover risks, prioritize what matters, and fix it.reco.ai
What it sells
  • AI Data Risk Audit[1][6]Produces a sign-off packet for Security and Legal on the data an AI system uses.
  • MCP Gateway[1][4][8]Open-source control plane that sits inline between agents and MCP servers.
  • Reco Platform[1][5]A connected platform that combines agent runtime, agent security and agent governance with shared app and identity context.
  • Agent Runtime[1]Monitors agent activity and responds to threats as prompts and actions occur.
  • Agent Security[1]Discovers, assigns ownership to, and secures connected AI agents.
  • Agent Governance[1]Provides a view of an organization's agent ecosystem and lets teams govern it.
  • Application Discovery[9]Discovers applications in use and maps their connections.
  • Identity & Access GovernanceControls which identities can access which applications and data.
Categories
Headquarters
Brighton, United StatesNot stated on its pages
Founded
2022[2]Not stated on its pages
Ownership and funding
Privately held[1][7]Privately held[4]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • September 29, 2026Reco said it raised $55 million, building on the $30 million Series B it announced in February.[16]
  • July 29, 2026Reco announced an expansion of AI Runtime in its platform, adding browser-based enforcement, real-time prompt analysis and blocking, and automated remediation.[3]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Enkrypt AI sells mainly to teams shipping customer-facing chat or voice agents in regulated industries such as Finance, Healthcare, Insurance, and Government. Its pricing describes plans for startups launching AI, small teams, growing companies with multiple agents, and large enterprises in regulated industries needing VPC or on-prem deployment. Enkrypt AI states that its release packet is meant to give Security, Legal, and Product what they need to approve an agent. Teams adopting MCP are named as a stated audience for its MCP products.From its own pages, Reco describes the Reco Platform as giving security teams visibility into their entire third-party ecosystem. Reco describes its security as built for the enterprise. On deployment, Reco supports enforcement through app-native hooks and endpoint controls, using either a customer's own gateway or the gateway from Reco.
Last verified
November 9, 2026October 7, 2026

Where they overlap

  • AI model and agent security is the primary category of both Enkrypt AI and Reco; both are also filed under AI governance.
  • Both are privately held.

Where they differ, field by field

  • Enkrypt AI is also filed under AI firewalls and guardrails. Reco is also filed under SaaS security posture and Non-human identity security.
  • Enkrypt AI lists AI Data Risk Audit and MCP Gateway. Reco lists Reco Platform, Agent Runtime, Agent Security, Agent Governance, Application Discovery and 1 more.
  • Enkrypt AI is headquartered in Brighton, United States.
  • Enkrypt AI was founded in 2022.

How they differ

CISO Tribune files both Enkrypt AI and Reco with AI model and agent security as the primary category. Enkrypt AI sells an AI security platform with products for red teaming agents, enforcing runtime guardrails, turning policy into controls, auditing AI data, and scanning and gating MCP tool traffic. The Enkrypt AI MCP Gateway is open source and sits inline between agents and MCP servers to approve, modify, or block tool calls. Reco sells the Reco Platform, which combines agent runtime, agent security and agent governance with shared app and identity context. Reco also sells Application Discovery and Identity & Access Governance, and CISO Tribune additionally files Reco under SaaS security posture and Non-human identity security.

Both sell runtime enforcement: Enkrypt AI Guardrails approves, modifies, or blocks risky behavior across agents, tools, RAG, and MCP, while Reco applies policies to block, warn, redact, allow, or log every agent, tool, and action. The Enkrypt AI Data Risk Audit evaluates the datasets a customer brings for intended uses such as TRAIN, RAG, and EVAL, whereas Reco discovers agents across Copilot, ChatGPT, Claude, Agentforce, Make, n8n, and custom integrations.

Enkrypt AI is headquartered in Brighton, United States, was founded in 2022, and is privately held. Reco is also privately held. Enkrypt AI says NetApp partnered with it on data readiness for Gen AI, and it describes work with an insurance services provider, a financial organization, and a medical device company. On July 29, 2026, Reco announced an expansion of AI Runtime in its platform, adding browser-based enforcement, real-time prompt analysis and blocking, and automated remediation. On September 29, 2026, Reco said it raised $55 million, building on the $30 million Series B it announced in February.

What it sells: Enkrypt AI

What AI Data Risk Audit does[1][6]
Enkrypt AI Data Risk Audit evaluates the datasets a customer brings for a specific AI system and intended use. Intended uses include TRAIN, RAG, and EVAL. Enkrypt AI Data Risk Audit works across text, audio and images, in multiple languages. It is re-run when datasets or connectors change.
What MCP Gateway does[1][4][8]
MCP Gateway approves, modifies, or blocks tool calls. MCP Gateway runs as a sidecar or gateway in the tool path. Enkrypt AI adds enterprise capabilities such as centralized policy management, tenant-aware enforcement, reporting, and support.

Questions about Enkrypt AI and Reco

What do Enkrypt AI and Reco sell?
Enkrypt AI sells AI Data Risk Audit and MCP Gateway. Reco sells Reco Platform, Agent Runtime, Agent Security, Agent Governance, Application Discovery and 1 more.
Are Enkrypt AI and Reco in the same category?
Yes. AI model and agent security is the primary category of both on CISO Tribune.
Where are Enkrypt AI and Reco headquartered?
Enkrypt AI is headquartered in Brighton, United States.
When were Enkrypt AI and Reco founded?
Enkrypt AI was founded in 2022.
Who owns Enkrypt AI and Reco?
Enkrypt AI is privately held. Reco is privately held.
Who are Enkrypt AI and Reco sold to?
From its own pages, Enkrypt AI sells mainly to teams shipping customer-facing chat or voice agents in regulated industries such as Finance, Healthcare, Insurance, and Government. From its own pages, Reco describes the Reco Platform as giving security teams visibility into their entire third-party ecosystem.
What have Enkrypt AI and Reco announced recently?
September 29, 2026: Reco said it raised $55 million, building on the $30 million Series B it announced in February.

About Enkrypt AI

Enkrypt AI sells an AI security platform with products for red teaming agents, enforcing runtime guardrails, turning policy into controls, auditing AI data, and scanning and gating MCP tool traffic. Enkrypt AI describes the platform as purpose-built to cover every threat, regulation, and modality.

Enkrypt AI Red Teaming finds failure modes across text, audio, and vision, including agents, tools, RAG, and MCP. Enkrypt AI Red Teaming turns findings into prioritized fixes and evidence-ready reports for security, risk, and compliance. Enkrypt AI Red Teaming adds closure evidence and regression tests to a CI gate. Findings can be promoted into Guardrails policies and monitored in production.[3]

Enkrypt AI Guardrails is the runtime layer that approves, modifies, or blocks risky behavior across agents, tools, RAG, and MCP. Every enforcement decision is logged, and Enkrypt AI says each decision includes a policy id, policy version, and reason code. Enkrypt AI Guardrails takes SSO and IAM claims for role-aware and tenant-aware policies, including Okta, Azure AD, and custom JWT claims. Enkrypt AI Guardrails can apply guardrails inline in the MCP Gateway, not just in the model prompt. Enkrypt AI Guardrails is API-first and works with an existing model stack.[4]

Enkrypt AI Policy Engine converts natural-language AI governance policy and regulatory text, including PDFs, into controls. Enkrypt AI Policy Engine enforces those controls across the platform with traceability that can be audited. Controls are reviewed and approved, then published to dev, stage, and prod environments. Policies are versioned, with diff review, staged rollouts, and rollback. Enkrypt AI Policy Engine combines internal governance requirements with external standards into a single control model. OWASP, NIST, and EU AI Act are included as defaults.[5]

Enkrypt AI Data Risk Audit produces a sign-off packet for Security and Legal covering what data an AI system uses, what risk it carries, and what is approved for AI. Enkrypt AI Data Risk Audit evaluates the datasets a customer brings for a specific AI system and intended use. Intended uses include TRAIN, RAG, and EVAL. Enkrypt AI Data Risk Audit can block a dataset for TRAIN and approve it for RAG with conditions. Enkrypt AI Data Risk Audit works across text, audio and images, in multiple languages. Enkrypt AI Data Risk Audit connects to Jira and ServiceNow for remediation and approvals, and is re-run when datasets or connectors change.[6]

Enkrypt AI MCP Scanner discovers tools, analyzes capabilities and permissions, and surfaces high-risk exposure. MCP Scanner covers configuration, permissions, tool schemas, endpoints, and common vulnerability patterns on MCP servers and tool surfaces. MCP Scanner scans internal MCP servers during development and before rollout, not just public MCPs. MCP Scanner scores severity on exploitability and impact, and on exposure. MCP Gateway is open source and sits inline between agents and MCP servers to approve, modify, or block tool calls. Enkrypt AI adds enterprise capabilities to MCP Gateway such as centralized policy management, tenant-aware enforcement, reporting, and support. MCP Gateway runs as a sidecar or gateway in the tool path, in Kubernetes, edge, or service mesh patterns. MCP Scanner findings inform an approved registry and policy defaults, and MCP Gateway enforces those decisions at runtime.[8]

Enkrypt AI says its customer-facing agents offering targets teams shipping customer-facing chat or voice agents in regulated industries such as Finance, Healthcare, Insurance, and Government. Enkrypt AI produces an Agent Release Packet, a single, forwardable document that gives every stakeholder the evidence they need to approve an agent. Enkrypt AI says teams that used to spend 4 to 6 months in review loops ship in 30 days. Enkrypt AI describes a large insurance services provider that used Enkrypt AI to secure its customer-facing AI-powered Chatbot app. Enkrypt AI describes a financial organization that scaled its tax preparation services through an AI-enabled tax chatbot. Enkrypt AI describes a medical device company that wanted to deploy an AI app for personalized medicine adherence. NetApp partnered with Enkrypt AI to ensure data readiness for Gen AI and to remove data risks on its platform.[9][10]

Enkrypt AI lists SOC 2 Type II and ISO 27001 among its security and compliance credentials. Its address is 1660 Soldiers Field Rd. Brighton, MA 02135.[11]

Enkrypt AI on the record

Sources

Enkrypt AI full record

  1. [1]Enkrypt AI | World's Most Comprehensive AI Security PlatformEnkrypt AI · undated page, accessed September 27, 2026 · Tier A
  2. [2]MultimodalaisecurityEnkrypt AI · enkryptai.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Enkrypt AI Agent Red TeamingEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
  4. [4]Enkrypt AI Agent Guardrails | Secure AI Agents EffortlesslyEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
  5. [5]Enkrypt AI Agent Policy Engine | Secure & Control AI Agents EffortlesslyEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
  6. [6]Enkrypt AI Data Risk Audit | Secure Your AI Data NowEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
  7. [7]Enkrypt AI MCP Scanner: Advanced AI Threat Detection & SecurityEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
  8. [8]Enkrypt AI MCP Gateway | Inline Policy Control for MCP Tool TrafficEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
  9. [9]Secure Customer-Facing Agents | Enkrypt AI Compliance & ReleaseEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
  10. [10]Industry | Enkrypt AIEnkrypt AI · undated page, accessed November 6, 2026 · Tier A
  11. [11]Pricing | Enkrypt AIEnkrypt AI · undated page, accessed November 6, 2026 · Tier A

Reco full record

  1. [1]reco.aiReco · reco.ai · undated page, accessed October 7, 2026 · Tier A
  2. [2]NewsroomReco · reco.ai · undated page, accessed October 7, 2026 · Tier A
  3. [3]Reco enhances AI Runtime with browser-based AI security and automated remediationHelp Net Security · published July 29, 2026 · Tier B
  4. [4]Reco Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 31, 2026 · Tier C
  5. [5]Reco Platform: Secure Every App, Identity, and AI AgentReco · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security Platform | RecoReco · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Agent Security: Discover & Control Every AI AgentReco · undated page, accessed November 10, 2026 · Tier A
  8. [8]Reco AI Agent Runtime: Control Every Agent ActionReco · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI-Powered Identity Access Governance | Secure SaaS at ScaleReco · undated page, accessed November 10, 2026 · Tier A
  10. [10]SaaS Security Posture Management – Continuous SSPM+ CoverageReco · undated page, accessed November 10, 2026 · Tier A
  11. [11]Continuous SaaS Compliance Monitoring & Coverage | RecoReco · undated page, accessed November 10, 2026 · Tier A
  12. [12]AI Governance & Security for SaaS ComplianceReco · undated page, accessed November 10, 2026 · Tier A
  13. [13]Generative AI Discovery for Shadow Tools, Agents & Data RisksReco · undated page, accessed November 10, 2026 · Tier A
  14. [14]SaaS App Factory™: Secure AI Agents & SaaS AppsReco · undated page, accessed November 10, 2026 · Tier A
  15. [15]SaaS Security Automation with AI AgentsReco · undated page, accessed November 10, 2026 · Tier A
  16. [16]Reco raises $55M as AI agent security startups crowd the market | TechCrunchTechCrunch · published September 29, 2026 · Tier B

Spot a factual error? Request a correction.