Palo Alto veterans launch Bloom Security with $20M to secure AI-era endpoints

Bloom Security, an Israeli cybersecurity startup, closed a $20 million Seed funding round led by Glilot Capital Partners and Ten Eleven Ventures. Okta Ventures and Runtime Ventures also participated, alongside angel investors including the founders of major cybersecurity companies: Snyk, Demisto, Dig Security, and Talon.

The company was founded in 2025 by three veterans of Palo Alto Networks. CEO Itay Keren previously served as a submarine officer in the Israeli Navy before moving into cybersecurity. Chief Product Officer Ofir Balassiano began his career in the IDF's Mamram Unit. Chief Technology Officer Itay Frishman held R&D leadership roles in Unit 81. All three worked together in senior engineering, product, and research roles at Palo Alto Networks following its acquisitions of Dig Security and Demisto. The company currently employs 30 people in Israel, many of whom previously worked together at Dig Security.

Bloom Security's core insight is that traditional endpoint security tools no longer match the reality of modern enterprise devices. Employee laptops and developer workstations now run far more than approved operating systems and enterprise applications. They execute AI agents, MCP (Model Context Protocol) servers, browser and IDE plugins, automation tools, and countless code libraries. Browsers, development environments, and AI agents themselves have become platforms with app stores and package managers, causing the number of programs running on each machine to grow faster than security teams can track. Some tools are installed directly by employees; others are added automatically by AI-powered applications. Many receive extensive permissions and access to sensitive data and enterprise services without undergoing formal security review.

Traditional endpoint detection and response (EDR) products were designed to identify malware, malicious executables, and suspicious processes—but they are poorly suited to managing risks created by legitimate AI agents, browser extensions, code packages, and automation tools that have become part of everyday enterprise workflows. Bloom Security has built an endpoint security platform designed specifically for the AI era. The platform uses autonomous AI agents to analyze and map the applications, AI agents, plugins, extensions, and code running on every endpoint, identifying what data and systems they access and how they interact with one another.

Crucially, Bloom's risk analysis is context-aware. Software that may be appropriate for one employee can present a security risk on another's device, depending on the user's role, access privileges, the data they can access, and the other applications running in the same environment. The platform analyzes permissions, configurations, and software supply chain risks, enabling organizations to block risky installations before they reach employee devices, enforce security policies, and remediate threats without disrupting employee productivity.

CEO Itay Keren said: "In the AI era, the employee device is no longer just a managed endpoint. Every endpoint is now running software no one reviewed, connecting to services no one provisioned." He continued: "Employee computers no longer run only software that organizations have selected, tested, and approved. They now run AI agents, plugins, and code packages that connect to services and gain access to information, often without security teams even knowing about them. We founded Bloom to help organizations understand what is actually running on every computer and control those risks without slowing productivity or limiting the adoption of AI tools." Chief Product Officer Ofir Balassiano added: "The same tool can be completely acceptable on one endpoint and high-risk on another. Risk depends on context: the user's role, access to sensitive data, the other tools operating on that endpoint, and how everything interacts. Bloom Security was designed to evaluate that context in real time."

Bloom Security says its platform is already deployed at dozens of large enterprises across the United States and Europe, where customers are using it to replace broad security restrictions with more granular, context-based controls as they expand their use of AI tools. Koby Samboursky, Founder and Managing Partner at Glilot Capital, commented: "The endpoint is evolving faster than existing security stacks can keep up. Agents, plugins, and code packages running directly on employee devices create a new layer of risk that existing tools weren't built to address."