Bloom Security spent much of the past year in stealth while quietly deploying its cybersecurity products to enterprise customers, but the company is now gaining early market recognition following a $20 million seed round completed in late July. Shortly after emerging from stealth, Bloom appeared at the Black Hat conference, where multiple CISOs reportedly recognized the firm by name, signaling growing awareness among key buyers.
Bloom disclosed that its name is already showing up in market reports covering its cybersecurity segment, despite being formally established only since July. This early inclusion in industry analyses suggests increasing relevance in the endpoint security landscape and may help Bloom position itself against more established vendors as it pursues additional commercial traction.
During the week, Bloom also announced it was identified as an Example Vendor in Gartner’s 2026 Market Overview for AI Usage Control, a segment focused on discovering AI usage, assessing risk and enforcing security policy for employee use of third-party AI applications. Bloom is concentrating on endpoint protection, where AI agents install packages, connect to internal systems via MCP and operate with user-level permissions, targeting what it sees as a critical control layer.
The company highlighted Gartner’s forecast that more than 50% of enterprises will adopt dedicated AI usage control technologies by 2030, underscoring a long-term structural tailwind for its solutions. Bloom’s focus on securing employee interactions with third-party AI tools and aligning its product strategy with enterprise AI governance trends could enhance its profile in security and compliance markets as scrutiny of AI-related risk grows.
Bloom’s leadership also drew attention to evolving software supply chain risk after a webinar anecdote involving malicious npm packages discovered on a marketing manager’s laptop. Co-founder and CEO Itay Keren argued that supply chain threats now extend beyond engineering teams to any endpoint running local AI assistants, pointing to a security gap not fully addressed by traditional endpoint detection and response tools.
The company is positioning itself around “post-EDR” challenges tied to AI-assisted development and shadow IT on non-engineering devices, aiming to monitor both developer and business-user endpoints for malicious packages and related threats. Taken together, Bloom Security’s early enterprise traction, analyst recognition and focus on emerging AI and supply chain risks mark a week of strengthening market visibility and strategic clarity for the young cybersecurity firm.


