# Around 1.000 AI products don't appear in corporate access systems > Source: > Published: 2026-10-10 11:54:27+00:00 # Around 1.000 AI products don't appear in corporate access systems A Reco analysis based on the 2026 State of Agent Security Report examines how AI assistants enter company environments through third-party products. In the environments studied, about 1,280 products included AI, while only 282 were behind company single sign-on. Reco argues that an assistant's acces A Reco analysis based on the 2026 State of Agent Security Report examines how AI assistants enter company environments through third-party products. In the environments studied, about 1,280 products included AI, while only 282 were behind company single sign-on. Reco argues that an assistant's access to other systems may not be visible in its own settings—a useful distinction when assessing product integrations and identity visibility. The data comes from the 2026 State of Agent Security Report. The analysis by Reco was published as a contributor to The Hacker News. According to the analysis, many digital assistants appear within programs that employees already use, without the company having first decided to adopt them. As a result, they are not visible by default in digital identity management systems. The analysis distinguishes three categories: assistants that are added to existing products, assistants that the company builds into third-party services, and assistants that are built entirely with the company's own systems. According to Reco, the first two categories make up the vast majority and are growing, while assistants that companies build themselves are fewer and growing more slowly. An example of the first category is Salesforce’s Slack Code, which was introduced in August 2026. A user can add the assistant to a conversation. The assistant reads what’s been shared there, writes code, and opens a code change request. Slack’s announcement says the assistant follows the security rules, permissions, and admin controls that already exist in Slack, without any additional work from IT. However, according to Reco, an assistant's settings don't always indicate what other systems and data it can access. That's why the analysis suggests companies look not only at what an assistant can do within the program itself, but also where it can reach through other systems and what it does in practice. For each assistant, Reco suggests that companies know which identity the assistant uses, who is responsible for it, what permissions it has, which systems it can reach directly or through other connections, and how it behaves in practice. In 2025, Patrick Opet, global head of security at JPMorgan Chase, called the external supply chain a systemic risk to the business. He also cited incidents that led the bank to isolate suppliers that had been compromised. According to the analysis, Opet argues that assistants should ideally be authenticated, not have access rights by default, and be clear on whose behalf they are acting before gaining access beyond their boundaries. The analysis also states that the obligations of the European Regulation on Artificial Intelligence, which will be implemented gradually through 2026, require that AI systems be registered, responsible persons appointed and their oversight documented. Reco argues that spreadsheets and quarterly checks are not enough when the number of assistants can increase from 50 to 500 and, after product updates, potentially to 5.000. Reco presents Reco Graph as a tool that brings together people, digital identities, applications, permissions and assistant actions in one image. Read the original English article on Hacks.gr ## Key Takeaways - •A Reco analysis based on the 2026 State of Agent Security Report examines how AI assistants enter company environments through third-party products. In the environments studied, about 1,280 products included AI, while only 282 were behind company single sign-on. Reco argues that an assistant's acces - •This story was reported by **Dev.to** , covering developments in the**dev** space. - •AI advancements continue to reshape industries — read the full article on Dev.to for complete coverage. 📖 Continue reading the full article: [Read Full Article on Dev.to →](https://dev.to/hacksgr/around-1000-ai-products-dont-appear-in-corporate-access-systems-51ph)