Bloom Security raises $20 million to tackle a new cybersecurity challenge: the proliferation of AI tools on endpoints, which is turning the workstation into a more dynamic and harder-to-control attack surface. The Tel Aviv startup closed the seed round led by Glilot Capital Partners and Ten Eleven Ventures (1011vc), with participation from Okta Ventures and Runtime Ventures.
Why the endpoint is becoming “AI-native”
For years endpoint security focused on managed devices and detecting malware, suspicious processes or malicious executables. The mass adoption of AI agents, browser extensions, MCP servers and code libraries upends that model: unvetted components, extensions with broad permissions or misconfigured agents can expose sensitive data without appearing as traditional “malware.” Bloom Security says these new risks often fall outside the scope of conventional controls.
Bloom Security’s approach and the risks it targets
Bloom’s platform aims to give security teams fine-grained visibility into software present on endpoints—tools, extensions and code packages—and into how those components interact with data and systems. Its analysis covers supply-chain risks, configurations and permissions, and evaluates components in context rather than in isolation.
The founders stress that the same tool can be harmless on one machine and critical on another depending on the user’s role, access to sensitive data and the mix of other installed tools. Beyond visibility, Bloom’s solution can block risky installations before they reach endpoints, enforce secure configurations and remediate incidents without relying on manual approval processes.
A team rooted in enterprise security
Bloom was founded by Itay Keren (CEO), Ofir Balassiano (Chief Product Officer) and Itay Frishman (CTO), whose backgrounds include roles at Palo Alto Networks, Dig Security and Demisto. The company today has roughly 30 employees, many of whom previously worked together at Dig Security. The founders say that real-world enterprise security experience shaped Bloom’s design for complex environments.
Deployments, funding and outlook
Bloom Security says it’s already deployed with dozens of large customers across the U.S. and Europe. The $20 million will be used to accelerate product development and commercial adoption as software complexity on endpoints—and AI adoption—continues to grow.
By placing governance of AI tools and extensions at the center of endpoint protection, Bloom aims to give security teams contextualized, automated controls to reduce exposure to this emerging class of risks.
