Skip to main content

Reco

Download With Dependencies

Reco is the leader in Dynamic SaaS Security — the only approach that eliminates the SaaS Security Gap (the growing gap between what you can protect and what’s outpacing your security).

Reco

Reco is the leader in Dynamic SaaS Security — eliminating the SaaS Security Gap driven by app proliferation, AI infiltration, constant configuration changes, identity sprawl, and hidden threats.

The Reco and Palo Alto Networks Cortex XSOAR integration automates SaaS threat detection and remediation workflows, integrating with 985+ Cortex XSOAR content packs.

What does this pack do?

  • Assess 400+ configuration rules across your SaaS landscape
  • Access data risk alerts and AI-powered summaries
  • Trigger automatic remediation for misconfigurations
  • Tag risky employees and leverage prebuilt playbooks

Benefits

  • Gain visibility into SaaS misconfigurations
  • Streamline detection and automate remediation
  • Respond faster to critical alerts
  • Reduce manual effort while meeting compliance requirements

Key Commands

  • reco-add-comment-to-alert
  • reco-update-incident-timeline
  • resolve-visibility-event
  • reco-get-risky-users
  • reco-add-risky-user-label
  • reco-get-assets-user-has-access-to
  • reco-add-leaving-org-user-label
  • reco-get-sensitive-assets-by-name
  • reco-get-sensitive-assets-by-id
  • reco-get-files-shared-with-3rd-parties
  • reco-get-3rd-parties-accessible-to-data-list
  • reco-get-sensitive-assets-with-public-link
  • reco-get-user-context-by-email-address
  • reco-get-private-email-list-with-access
  • reco-get-alert-ai-summary

For more information: www.reco.ai

Reco Overview

Reco

Reco is the leader in Dynamic SaaS Security — eliminating the SaaS Security Gap driven by app proliferation, AI infiltration, constant configuration changes, identity sprawl, and hidden threats.

The Reco and Palo Alto Networks Cortex integration automates SaaS threat detection and remediation workflows, integrating with 985+ Cortex content packs.

What does this pack do?

  • Assess 400+ configuration rules across your SaaS landscape
  • Access data risk alerts and AI-powered summaries
  • Trigger automatic remediation for misconfigurations
  • Tag risky employees and leverage prebuilt playbooks

Benefits

  • Gain visibility into SaaS misconfigurations
  • Streamline detection and automate remediation
  • Respond faster to critical alerts
  • Reduce manual effort while meeting compliance requirements

Key Commands

  • reco-add-comment-to-alert
  • reco-update-incident-timeline
  • resolve-visibility-event
  • reco-get-risky-users
  • reco-add-risky-user-label
  • reco-get-assets-user-has-access-to
  • reco-add-leaving-org-user-label
  • reco-get-sensitive-assets-by-name
  • reco-get-sensitive-assets-by-id
  • reco-get-files-shared-with-3rd-parties
  • reco-get-3rd-parties-accessible-to-data-list
  • reco-get-sensitive-assets-with-public-link
  • reco-get-user-context-by-email-address
  • reco-get-private-email-list-with-access
  • reco-get-alert-ai-summary

For more information: www.reco.ai

Reco Overview

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByPartner
CreatedFebruary 14, 2023
Last ReleaseMarch 22, 2026
Asset Management
Identity And Access Management
Breach Notification
WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER
By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.