Bloom Security exits stealth with $20M to catalog AI tools

Bloom Security left stealth on August 4 with a $20 million seed round to track AI tools employees install themselves, per FinTech Global. Browsers, IDEs and AI agents each run their own marketplace now. AI assistants, extensions, MCP servers and code packages pile up on company devices faster than security teams can catalog them.

Already, Bloom's product runs inside dozens of large enterprises, unusually far along for a stealth exit, according to the report.

Glilot and Ten Eleven led the round. Okta Ventures joined, and the angel list adds Dig Security, Demisto, Snyk and Talon.

Its bet is narrower than generic agent security. A developer can add an MCP server or a browser extension in seconds. That's one more tool in a pile that outgrows what security teams can catalog, per the report. The report doesn't say what happens once Bloom flags something unapproved. It doesn't say whether Bloom blocks the tool, warns the user, or just logs it for someone to chase down later.

The $20 million matters less than what came before it. Dozens of large enterprises were already running Bloom before it had a public name. That's proof MCP servers and AI browser extensions are outrunning whatever inventory security teams think they have.

FinTech Global put the raise on record on August 4. MCP servers and browser extensions have turned into a distribution channel security reviews haven't caught up to.