PRODUCT PROFILE · RANK 6 OF 6
Bloom Security review: endpoint inventory and rules on what agents may run
SHORT ANSWER
Bloom Security inventories everything running on the endpoint and sets rules on what AI agents can access, execute and transmit, including package and extension policies. Deployment, actor trail and cloud coverage are not published. It scores 4.65 and ranks 6 of 6, highest or tied highest on no criterion.
By The Agent Desk · Agentic Endpoint Compare · Published 2026-10-11
Desk research from public vendor pages, press releases and standards pages read on 27 September and 11 October 2026. Editorial assessment; we did not run the products.
Rank 6 of 6 among agentic endpoint vendors on our published weights
Inventory and supply-chain rules for endpoint software
What does Bloom control?
Discovers software, extensions and AI tools running on endpoints, defines what AI agents can access, execute and transmit, and blocks risky packages and skills across npm, the Chrome Web Store and Open VSX.
How does Bloom reach devices?
Not published on the pages we read.
Source: Bloom Security homepage · Read 27 Sep 2026
Which verdicts can Bloom return?
- Block or denyDocumented
- Ask a personNot described
- Alert or warnNot described
- Mask or modifyNot described
- Simulate firstNot described
- Remove or scale backDocumented
"Blocks malicious or policy-violating packages and skills; removes risky tools, revokes permissions and scales back overpermissioned MCP servers."
Source: Bloom Security homepage · Read 27 Sep 2026
How does Bloom score on each criterion?
| Criterion | Weight | Score | Why |
|---|---|---|---|
| Stop before it runs | 25% | 6 / 10 Lowest in set | Defines what agents can access, execute and transmit; runtime decisions on individual actions are not detailed. Source: Bloom Security homepage · Read 27 Sep 2026 |
| Verdict range | 15% | 3 / 10 | Documents 2 of six verdict types: Block or deny and Remove or scale back. "Blocks malicious or policy-violating packages and skills; removes risky tools, revokes permissions and scales back overpermissioned MCP servers." Source: Bloom Security homepage · Read 27 Sep 2026 |
| Capability rules | 15% | 8 / 10 | Rules on what agents can access, execute and transmit, automatic scaling back of overpermissioned MCP servers, and package and skill policies across npm, Chrome Web Store and Open VSX. Source: Bloom Security homepage · Read 27 Sep 2026 |
| Actor trail | 10% | 4 / 10 Lowest in set | Not described on the pages we read. Source: Bloom Security homepage · Read 27 Sep 2026 |
| Rollout path | 10% | 4 / 10 Lowest in set | Deployment method not published. Source: Bloom Security homepage · Read 27 Sep 2026 |
| Cloud and workspace reach | 10% | 2 / 10 Lowest in set | Endpoint fleet only; no cloud, SaaS or homegrown agent coverage described. Source: Bloom Security homepage · Read 27 Sep 2026 |
| Named agent coverage | 5% | 0 / 10 Lowest in set | Names 0 of the six agents we track: none. Source: Bloom Security homepage · Read 27 Sep 2026 |
| Public proof | 10% | 5 / 10 | SOC 2 listed and a $20 million seed round reported by Ctech (secondary); pricing and deployment detail not published. Source: Ctech by Calcalist (secondary): Bloom Security seed round (30 July 2026) · Read 11 Oct 2026 |
Which agents does Bloom name?
- Claude CodeNot named
- CursorNot named
- GitHub CopilotNot named
- OpenAI CodexNot named
- WindsurfNot named
- Claude DesktopNot named
Bloom names 0 of the six agents we track.
Source: Bloom Security homepage · Read 27 Sep 2026
- Onyx Security and Bloom Security describe coding assistants, desktop agents or AI tools in general terms without naming agents on the pages we read.
What does it cost?
Where is Bloom strongest, and where does it fall short?
Strongest
- Capability rules that reach packages, extensions and MCP permissions.
- Inventory that includes non-AI software and extensions.
Falls short
- Stop before it runs: 6 / 10; highest Bay 9 / 10
- Verdict range: 3 / 10; highest Bay and Neo 7 / 10
- Capability rules: 8 / 10; highest Bay 9 / 10
- Actor trail: 4 / 10; highest Bay, CrowdStrike Falcon Guardian and Neo 8 / 10
- Rollout path: 4 / 10; highest Bay 9 / 10
- Cloud and workspace reach: 2 / 10; highest CrowdStrike Falcon Guardian 8 / 10
- Named agent coverage: 0 / 10; highest Ent 7 / 10
- Public proof: 5 / 10; highest CrowdStrike Falcon Guardian 8 / 10
- Deployment method and actor trail are not published.
- Endpoint-only, with no cloud or SaaS agent coverage described.
Key facts
| Fact | Detail and source |
|---|---|
| Positioning | "Securing the AI-Native Endpoint": discovery of software, extensions and AI, with who built each item and what it can access. Source: Bloom Security homepage · Read 27 Sep 2026 |
| Agent rules | Defines what AI agents can access, execute and transmit; automatically scales back overpermissioned MCP servers; enforces policies across npm, Chrome Web Store and Open VSX. Source: Bloom Security homepage · Read 27 Sep 2026 |
| Company | Founders previously at Palo Alto Networks and Dig Security; offices in Wilmington, Delaware and Tel Aviv; SOC 2 listed. Source: Bloom Security: about · Read 27 Sep 2026 |
| Launch | Bloom's launch post (30 July 2026) describes one platform to control, defend and manage everything running across the endpoint fleet. Source: Bloom Security blog: why we built Bloom (30 July 2026) · Read 27 Sep 2026 |
| Funding | Ctech (secondary) reported a $20 million seed round led by Glilot Capital Partners and Ten Eleven Ventures, with Okta Ventures and Runtime Ventures, on 30 July 2026. Source: Ctech by Calcalist (secondary): Bloom Security seed round (30 July 2026) · Read 11 Oct 2026 |
How does Bloom compare head to head?
| Pair | Result |
|---|---|
| Bay matched with Bloom Security | Bay 7.20, Bloom Security 4.65 |
| Bloom Security matched with Neo | Bloom Security 4.65, Neo 6.85 |
| Bloom Security matched with Onyx Security | Bloom Security 4.65, Onyx Security 6.85 |
| Bloom Security matched with Zenity | Bloom Security 4.65, Zenity 6.75 |
| Bloom Security matched with Noma Security | Bloom Security 4.65, Noma Security 6.55 |
| Bloom Security matched with Lasso Security | Bloom Security 4.65, Lasso Security 6.40 |
| Bloom Security matched with CrowdStrike Falcon Guardian | Bloom Security 4.65, CrowdStrike Falcon Guardian 6.25 |
| Bloom Security matched with Harmonic Security | Bloom Security 4.65, Harmonic Security 5.90 |
| Bloom Security matched with Ent | Bloom Security 4.65, Ent 5.80 |
| Bloom Security matched with Koi (Palo Alto Networks) | Bloom Security 4.65, Koi (Palo Alto Networks) 5.75 |
| Bloom Security matched with Prompt Security (SentinelOne) | Bloom Security 4.65, Prompt Security (SentinelOne) 5.45 |
| Bloom Security matched with Glow Security | Bloom Security 4.65, Glow Security 5.40 |
Frequently asked questions
Can Bloom Security stop an agent action before it runs?
Defines what agents can access, execute and transmit; runtime decisions on individual actions are not detailed. We score this 6 out of 10.
Which verdicts does Bloom Security document?
Bloom Security documents 2 of six verdict types: Block or deny and Remove or scale back. "Blocks malicious or policy-violating packages and skills; removes risky tools, revokes permissions and scales back overpermissioned MCP servers."
How much does Bloom Security cost?
Not published. Bloom Security publishes no pricing.