AI & Software Governance Distributed by Cyberdis An endpoint security control plane for the AI era - visibility, contextual risk and one-click remediation across the apps, extensions and AI tools nobody reviewed.
Cyberdis is a value-added distributor of Bloom Security, selling through channel partners with engineer-led evaluation, deployment and support.
What it does
Bloom Security in short.
Bloom Security is an endpoint security control plane that gives security teams visibility and control over everything running on corporate endpoints - applications, browser extensions, code libraries and AI tools. A live, fleet-wide inventory feeds contextual risk analysis combining marketplace intelligence, static analysis and behavioral sandboxing, and risky findings are fixed with one-click remediation that previews the change and notifies the affected employee.
Founded in 2025 in Tel Aviv by Palo Alto Networks and Dig Security veterans, the company came out of stealth in July 2026 with a $20 million seed round led by Glilot Capital Partners and Ten Eleven Ventures, and reports deployments at dozens of large enterprises across the United States and Europe.
The gap it closes is new: every endpoint now runs software no one reviewed - AI agents and coding assistants, unvetted browser extensions, third-party packages pulled from public registries. Security teams cannot review it all, and blocking it all slows the business down. Bloom runs that review continuously, blocks malicious packages at install time across npm, the Chrome Web Store and Open VSX, and reins in overpermissioned AI agents and MCP servers.
Capabilities
What you get.
-
Live Inventory
A real-time, fleet-wide inventory of the software, browser extensions and AI tools on every endpoint - including where each one came from and what it can access.
-
Contextual Risk Analysis
Combines marketplace intelligence, static analysis and behavioral sandboxing, then weighs risk in context: the user’s role, their data access, configurations and the other tools on the same endpoint.
-
Granular Remediation
Removes risky tools, revokes permissions and fixes misconfigurations with a change preview and built-in employee communication - surgical fixes, not blanket blocks.
-
Supply Chain Prevention
Blocks malicious or policy-violating packages at install time across npm, the Chrome Web Store and Open VSX - a supply-chain firewall that stops software at the door.
-
AI Guardrails
Governs what AI agents can access, execute and transmit - including scaling back overpermissioned MCP servers and enforcing AI usage policy across the fleet.
Why through Cyberdis
The vendor is theirs. The deployment is ours.
- 01
A PoC that starts with your blind spot
The first thing a Bloom evaluation produces is the inventory: the extensions, packages and AI tools already on the fleet that nobody approved. We run that discovery on real endpoints and let the findings make the case.
- 02
Policy without the revolt
Governance tools fail when they slow the business. Cyberdis engineers tune enforcement to the environment - what gets removed, what gets a warning, how employees are told - and hand over a working program, not a console of alerts.
- 03
The AI-governance door opener
Shadow AI is on every board agenda, and Bloom is the rare product that answers it with an inventory instead of a policy document. Resellers get the positioning, a demo environment and a Cyberdis engineer in the room.
FAQ
Frequently asked questions about Bloom Security
What is Bloom Security?
Bloom Security is an endpoint security control plane founded in Tel Aviv in 2025 by Palo Alto Networks and Dig Security veterans. It inventories the software, browser extensions and AI tools on every corporate endpoint, scores their risk in context, and remediates with one click - including blocking malicious packages at install time.
How is Bloom Security different from EDR?
EDR watches for malicious behavior at runtime; Bloom governs what is allowed to be there in the first place. It covers the layer EDR does not see well: unreviewed browser extensions, third-party packages, AI agents and MCP servers - and it runs alongside the existing endpoint stack rather than replacing it.
Does Bloom Security cover AI agents and MCP servers?
Yes. The AI Guardrails module controls what AI agents can access, execute and transmit, scales back overpermissioned MCP servers and enforces AI usage policies - and a dedicated integration turns Anthropic Compliance API events into endpoint-level visibility over Claude activity.
Who distributes Bloom Security?
Cyberdis is a value-added distributor of Bloom Security, selling through channel partners and resellers with pre-sales engineering, proof-of-concept execution, deployment and post-sale support included.
How do I evaluate Bloom Security?
Through a Cyberdis engineer-led proof of concept: we run the live-inventory discovery on a slice of your real fleet, review the findings with your team, and hand over measurable outcomes - request a demo via the Cyberdis contact page.
Weighing approaches? Read: Endpoint software governance vs application allowlisting: review everything, or block by default?
New to the category? Start with: What is an endpoint security control plane?How do malicious browser extensions attack organizations?What is an npm supply-chain attack?
See it running
See Bloom Security on your own terms.
A demo tailored to your environment, or a full proof of concept - run by a Cyberdis engineer.
End customer rather than reseller? Ask anyway: we bring the right partner into the deal and stay on it as the engineering team.