Bloom Security has emerged from stealth with a $20 million seed funding round as the company develops an endpoint security platform designed for the growing use of AI agents, browser extensions and locally deployed software tools inside enterprise environments.
The round was led by Glilot Capital Partners and Ten Eleven Ventures (1011vc), with participation from Okta Ventures, Runtime Ventures and several cybersecurity founders, including executives behind Dig Security, Demisto, Talon and Snyk.
Bloom was founded by a team of cybersecurity veterans who previously built enterprise security companies that were acquired by larger industry players. The company is focused on what it describes as a new challenge for security teams: protecting the “AI-native endpoint,” where employee devices increasingly run autonomous software, AI agents, code packages and third-party extensions.
The team at Bloom Security : Bloom currently has 30 employees, many of whom previously worked together at Dig Security
(Photo: Pini Siluk)
Traditional endpoint detection and response (EDR) tools were built primarily to identify malware, malicious files and suspicious processes. Bloom says that the modern endpoint creates a broader set of risks, including improperly configured AI agents, software extensions with excessive permissions, screen-recording tools and code libraries from untrusted sources.
“In the AI era, the employee device is no longer just a managed endpoint,” said Itay Keren, co-founder and CEO of Bloom Security. “Every endpoint is now running software no one reviewed, connecting to services no one provisioned.”
The company’s platform is designed to provide organizations with visibility into all software running across employee devices, including tools, extensions and code, while analyzing how those applications interact with sensitive data and systems.
Bloom said its technology evaluates risk based on context, including the user’s role, access privileges and the other software operating on a device, rather than relying only on whether a specific tool is considered malicious.
“The same tool can be completely acceptable on one endpoint and high-risk on another,” said Ofir Balassiano, co-founder and chief product officer at Bloom Security. “Risk depends on context: the user’s role, their access to sensitive data, the other tools operating on that endpoint and how everything interacts. Bloom Security was designed to evaluate that context in real time.”
Beyond monitoring, the platform allows security teams to block risky software installations, enforce configurations and remediate issues without disrupting employee workflows, the company said.
Bloom said it is already deployed at dozens of large enterprises in the United States and Europe, helping organizations replace broad security policies with more targeted controls based on specific risks and circumstances.
The company’s leadership team includes Keren, who previously held engineering and sales engineering roles at Palo Alto Networks, Dig Security and Demisto; Balassiano, who led cloud security research at Palo Alto Networks and Dig Security; and Chief Technology Officer Itay Frishman, who previously built security products at Palo Alto Networks and Dig Security.
The team has particular experience in enterprise cybersecurity. Before entering the industry, Keren served as a submarine naval officer, while Frishman previously held a cybersecurity research role in the IDF’s Unit 81. Bloom currently has 30 employees, many of whom previously worked together at Dig Security.
“While this is technically our first company as founders, our team has built and integrated category-defining products before,” Frishman said. “We understand how enterprise security environments operate, and we built Bloom Security specifically for the reality of how endpoints are used today.”
Bloom plans to use the funding to expand its product development and support enterprise adoption as organizations continue integrating AI tools into daily operations.
The company describes its platform as endpoint security built for the AI era, combining software inventory, contextual risk assessment and automated remediation to help security teams manage new technologies without limiting employee productivity.