Bloom Security Raises $20M to Secure AI-Native Endpoints

Employee laptops are no longer running only approved business software. AI agents, MCP servers, browser extensions and code packages can now access company systems without appearing in traditional endpoint inventories.

Tel Aviv-based Bloom Security has emerged from stealth with a $20 million Seed round, co-led by Glilot Capital Partners and Ten Eleven Ventures. Okta Ventures and Runtime Ventures also participated, alongside founders of cybersecurity companies including Snyk, Demisto, Dig Security and Talon.

Founded by Itay Keren, Ofir Balassiano and Itay Frishman, Bloom is building endpoint security around the software layer created by modern AI use. Its platform provides visibility across operating systems, local data, applications, plugins, AI agents and code running on employee devices.

Instead of treating every unfamiliar tool as equally dangerous, Bloom assesses risk using context such as the employee’s role, access to sensitive information, software configuration and the other tools operating on the same device. Security teams can then enforce targeted policies or remediate specific risks without blocking AI adoption across the organization.

The company says its technology is already deployed across dozens of large enterprises in the United States and Europe. The funding will support product development and wider commercial deployment as organizations look for better AI security and governance controls.

Bloom joins a growing group of cybersecurity startups focused on protecting the tools and agents traditional endpoint platforms were not designed to monitor. Its challenge will be proving that deeper visibility can improve security without slowing the AI workflows employees increasingly depend on.