“AI 蔓延”等术语已成为科技社交媒体和思想领袖圈中的常见话题，因为企业开始大规模部署 AI 智能体。但对于担心如何保护网络中突然涌现的大量智能体的首席信息安全官（CISO）来说，他们很可能正面临一种新型的“蔓延”：提供帮助的供应商。
Terms like “AI sprawl” have become common fare on tech social media and in thought leadership as enterprises start deploying AI agents en masse. But CISOs worried about securing swarms of agents suddenly operating across networks are likely finding themselves dealing with a new kind of sprawl: vendors offering to help.
仅快速浏览公开的 Crunchbase 和 PitchBook 资料，就能发现至少有二十多家公司在销售某种形式的 AI 智能体安全产品。一些供应商审核智能体使用的工具，另一些则试图帮助企业控制智能体可访问的数据。还有一些像 CrowdStrike 这样的公司，正在智能体运行的设备上构建检测和响应控制，还有些则专注于发现和解决未经批准的 AI 使用。
Just a quick glance at public Crunchbase and PitchBook profiles turns up at least two dozen companies selling some form of AI agent security. Some vendors vet the tools agents use, while others try to help companies control what data their agents can reach. Some others, like CrowdStrike, are building detection and response controls on the devices agents run, and still others are focused on finding and resolving unapproved AI usage.
当然，这些产品各有不同，但它们关于发现和治理智能体的承诺听起来却非常相似，涉及知识图谱、持续监控、运行时安全、工具访问、MCP 审核等内容。
The products differ, of course, but their promises to discover and govern agents sound quite similar, involving knowledge graphs, continuous monitoring, runtime security, tool access, MCP vetting, and the like.
有些公司甚至在更新产品以加入这股热潮。直到去年，AI 安全初创公司 Reco 主要销售用于映射和保护 SaaS 及 AI 平台的软件。现在，它已重新定位，围绕一个更广泛的解决方案展开，该方案利用上下文图谱将智能体与应用、人员、账户和权限关联起来，让安全团队能够了解智能体能触及哪些资源，并切断其不需要的访问权限。
Some are even updating their products to join the bandwagon. Until last year, AI security startup Reco was mostly selling software to map and secure SaaS and AI platforms. Now, it’s repositioned around a broader solution that uses a context graph to connect agents to apps, people, accounts, and permissions, giving security teams a way to see what an agent can reach and cut off access it doesn’t need.
据 Reco 联合创始人兼首席执行官 Ofer Klein 介绍，促使这家初创公司扩大业务范围的过去一年最大变化是：企业构建和部署 AI 智能体的速度，快于其跟踪和管理的速度。他表示，在该初创公司的一家财富 100 强客户那里，Reco 的平台发现了该公司不知情的 21,000 个智能体。而在一家大型金融服务客户处，该初创公司声称发现了一个由前员工设置的智能体，它能够访问 Salesforce 并将数据共享给公司不可见的域名。
According to Reco’s co-founder and CEO Ofer Klein, the biggest change over the past year that spurred the startup to broaden its scope was that companies are building and deploying AI agents faster than they can keep track of. At one of the startup’s Fortune 100 customers, he said, Reco’s platform found 21,000 agents the company didn’t know about. And at a large financial services customer, the startup claims it identified an agent set up by an ex-employee that could access Salesforce and share that data with a domain the company couldn’t see.
“目前市场对智能体安全的需求不仅仅关乎智能体本身，而是关乎整个端到端的生态系统，”克莱恩（Klein）在接受TechCrunch独家采访时表示。
“The market demand right now for agent security is not only about the agent itself; it’s about the entire ecosystem end-to-end,” Klein told TechCrunch in an exclusive interview.
克莱恩并非唯一强调企业必须尽快保障这一扩张领域安全的人。安全初创公司HiddenLayer的联合创始人兼首席执行官克里斯·塞斯蒂托（Chris Sestito）本月早些时候告诉我，当智能体投入生产时，其成本和风险规模会迅速从理论层面转变为“全面爆发”，他有超过50家客户的AI智能体已投入生产，并触及关键系统和敏感资产。
Klein’s not alone in stressing the urgency for companies to secure this sprawl. Security startup HiddenLayer‘s co-founder and CEO, Chris Sestito, earlier this month told me that when agents reach production, the scale of their costs and risk goes from theoretical to “full scale really quickly,” and that over 50 of his customers have AI agents in production touching critical systems and sensitive assets.
另一家AI初创公司Cymphony表示，在一家美国上市公司中，他们发现约有8.5万个文件已可被AI工具和智能体访问。
Cymphony, another AI startup, said at one U.S. public company, it found about 85,000 files that had become accessible to AI tools and agents.
毫无疑问，大量投资者对那些能够通过帮助企业发现并保护所有这些智能体而获利的公司非常感兴趣，而Reco也抓住了这一需求：这家初创公司周二宣布融资5500万美元，在此前2月份3000万美元B轮融资的基础上进一步扩大了规模。其客户AT&T通过旗下的风险投资部门参与了此次追加投资，Forestay和Quadrille Capital也参与其中。
There’s no doubt a ton of investors are interested in companies that can make a mint out of helping companies find and secure all these agents, and Reco has capitalized on that demand: The startup on Tuesday said it raised $55 million, building on a $30 million Series B in February. AT&T, a customer, invested in the extension via its venture arm, as did Forestay and Quadrille Capital.
克莱恩表示，自2月份首次宣布B轮融资以来，该公司的估值已经“翻了一番多”，他模糊地估计估值在“数亿美元的高位”，但未透露具体细节。他表示，目前的年度经常性收入在“数千万美元”级别，并预计今年将增长两倍。该初创公司拥有超过100家客户，其中金融服务公司约占其业务的40%。
Klein said the company’s valuation has “more than doubled” since the Series B was first announced in February, and vaguely estimated it in the “high hundreds of millions” though he wouldn’t share specifics. Annual recurring revenue right now is in the “double-digit millions of dollars,” he said, and he expects it to triple this year. The startup has more than 100 customers, and financial services companies account for about 40% of the business.
看来，Reco押注的是，其对SaaS应用的广泛覆盖，以及这些应用日益提供的AI智能体，将帮助公司从众多竞争者中脱颖而出。该公司目前可与280多款应用集成，Klein表示，新集成最快可在数天内完成添加。Klein称，该平台利用浏览器和网络信号，发现企业内未直接连接至相关应用的智能体，并提供相关控制功能，用于检查提示词和工具调用。
Reco’s bet, it appears, is that its existing coverage of SaaS apps, and the AI agents they are increasingly offering, will help it stand out from the crowd. The company currently integrates with more than 280 apps, and Klein says new integrations can be added within days. Klein said the platform uses browser and network signals to find agents outside apps it connects to directly within companies, and it has controls to inspect prompts and tool calls.
这家初创公司将利用新获得的资金用于招聘、销售、合作伙伴拓展和客户支持。融资后，Reco的累计融资金额将达到1.4亿美元。
The startup will use the new funding for hiring, sales, partnerships, and customer support. The new funding brings Reco’s total capital raised to $140 million.