Bloom Security

Bloom Security is an endpoint security company that provides a unified control plane for discovering, analyzing, and managing software, extensions, plugins, AI tools, and code libraries running on corporate endpoints. The platform addresses modern endpoint risks including shadow AI, unapproved browser extensions, third-party open source packages, AI agents, and MCP (Model Context Protocol) servers. It is designed to give security teams visibility into what is actually running across their device fleet, including tools installed by employees or AI agents without formal approval. Core capabilities include: - Live inventory: Real-time discovery of all software, extensions, AI tools, and packages running on endpoints, including provenance and access permissions. - Contextual risk analysis: Risk identification using marketplace intelligence, static analysis, and behavioral sandboxing to surface dangerous configurations and policy violations. - Granular remediation: Targeted removal of risky tools, permission revocation, and misconfiguration fixes with impact previews before changes are applied. - Supply chain prevention: Blocking of malicious, vulnerable, or policy-violating packages across sources such as npm, Chrome Web Store, and Open VSX. - AI guardrails: Policy enforcement for AI agents, including automatic reduction of overpermissioned MCP server configurations to safe defaults. Bloom Security targets enterprise security teams and CISOs who need continuous, automated oversight of endpoint software sprawl, particularly as AI-driven tooling becomes more prevalent in corporate environments.