Skip to main content

Reco

Download With Dependencies

Reco is the leader in Dynamic SaaS Security — the only approach that eliminates the SaaS Security Gap (the growing gap between what you can protect and what’s outpacing your security).

Reco

Reco is the leader in Dynamic SaaS Security — eliminating the SaaS Security Gap driven by app proliferation, AI infiltration, constant configuration changes, identity sprawl, and hidden threats.

The Reco and Palo Alto Networks Cortex XSOAR integration automates SaaS threat detection and remediation workflows, integrating with 985+ Cortex XSOAR content packs.

What does this pack do?

  • Assess 400+ configuration rules across your SaaS landscape
  • Access data risk alerts and AI-powered summaries
  • Trigger automatic remediation for misconfigurations
  • Tag risky employees and leverage prebuilt playbooks

Benefits

  • Gain visibility into SaaS misconfigurations
  • Streamline detection and automate remediation
  • Respond faster to critical alerts
  • Reduce manual effort while meeting compliance requirements

Key Commands

  • update-reco-incident-timeline
  • resolve-visibility-event
  • reco-get-risky-users
  • reco-add-risky-user-label
  • reco-get-assets-user-has-access-to
  • reco-add-leaving-org-user-label
  • reco-get-sensitive-assets-by-name
  • reco-get-sensitive-assets-by-id
  • reco-get-files-shared-with-3rd-parties
  • reco-get-3rd-parties-accessible-to-data-list
  • reco-get-sensitive-assets-with-public-link
  • reco-get-user-context-by-email-address
  • reco-get-private-email-list-with-access
  • reco-get-alert-ai-summary

For more information: www.reco.ai

Reco Overview

Reco

Reco is the leader in Dynamic SaaS Security — eliminating the SaaS Security Gap driven by app proliferation, AI infiltration, constant configuration changes, identity sprawl, and hidden threats.

The Reco and Palo Alto Networks Cortex integration automates SaaS threat detection and remediation workflows, integrating with 985+ Cortex content packs.

What does this pack do?

  • Assess 400+ configuration rules across your SaaS landscape
  • Access data risk alerts and AI-powered summaries
  • Trigger automatic remediation for misconfigurations
  • Tag risky employees and leverage prebuilt playbooks

Benefits

  • Gain visibility into SaaS misconfigurations
  • Streamline detection and automate remediation
  • Respond faster to critical alerts
  • Reduce manual effort while meeting compliance requirements

Key Commands

  • update-reco-incident-timeline
  • resolve-visibility-event
  • reco-get-risky-users
  • reco-add-risky-user-label
  • reco-get-assets-user-has-access-to
  • reco-add-leaving-org-user-label
  • reco-get-sensitive-assets-by-name
  • reco-get-sensitive-assets-by-id
  • reco-get-files-shared-with-3rd-parties
  • reco-get-3rd-parties-accessible-to-data-list
  • reco-get-sensitive-assets-with-public-link
  • reco-get-user-context-by-email-address
  • reco-get-private-email-list-with-access
  • reco-get-alert-ai-summary

For more information: www.reco.ai

Reco Overview

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByPartner
CreatedFebruary 14, 2023
Last ReleaseApril 14, 2025
Asset Management
Identity And Access Management
Breach Notification
WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.