Snapshot
Continue to About ↓- What it does
- Bloom is an endpoint security platform that discovers, analyzes, and controls everything running on employee devices: the OS, installed applications, browser extensions, developer packages, and AI tools such as LLMs, autonomous agents, and MCP servers.
More detail
- It flags risky permissions and configurations and lets security teams block or surgically remediate risky software without broadly restricting employees.
- Best for
- Enterprise security and CISO teams with distributed laptop fleets and growing AI-agent, extension, and open-source package use, who need continuous visibility and enforcement without blocking employee productivity.
- Pricing
- No public pricing.
More detail
- The site offers only a demo request and a contact email, with no published plans, tiers, or fee schedule.
- Any subscription, per-endpoint, or deployment fees are undisclosed and must come from a Bloom quote; the product should not be described as free.
- Main limitation
- Individual consumers or small teams wanting self-serve signup: Bloom is demo-gated and sold to enterprises.
More detail
- Buyers wanting a long-established vendor should weigh that Bloom was founded in 2025 and is seed-stage.
- Record
- Living and monitored
- Reviewed
- Evidence
- Public web research
- Machine access
- Structured profile ↗
About
- Bloom is an endpoint security platform that discovers, analyzes, and controls everything running on employee devices: the OS, installed applications, browser extensions, developer packages, and AI tools such as LLMs, autonomous agents, and MCP servers.
- It flags risky permissions and configurations and lets security teams block or surgically remediate risky software without broadly restricting employees.
What it helps with
- AI agents, MCP servers, and local automation now run on endpoints, exposing data and systems in ways traditional malware
- Browsers, IDEs, and business tools each carry their own app store or package manager, so visibility into what is actuall
- Developers and AI agents download open-source code faster than security review can keep up, creating supply-chain exposu
- Unapproved extensions and plugins sit on corporate laptops without security team review, and blocking everything would s
Capabilities
A practical view of what is available and where limitations apply.
| Offering | Available | Detail |
|---|---|---|
| Live inventory | Yes | Discovers software, extensions, AI tools, and other endpoint software, with origin, access, and real-time fleet-wide change monitoring. |
| Contextual risk analysis | Yes | Uses marketplace intelligence, static analysis, and behavioral sandboxing to flag unauthorized downloads, excessive data access, and policy bypasses. |
| Granular remediation | Yes | Removes risky tools, revokes permissions, and fixes misconfigurations, with a preview of impact before acting and employee notification. |
| Supply-chain prevention | Yes | Blocks malicious, vulnerable, or policy-violating packages and skills at the source, with named enforcement across npm, Chrome Web Store, and Open VSX. |
| AI guardrails | Yes | Defines what AI agents can access, execute, and transmit, and scales back overpermissioned MCP servers to safe defaults. |
| Anthropic Compliance API integration | Yes | Retrieves Claude-generated artifacts and uploaded files, scans for secrets and PII, and monitors plugins, skills, MCP servers, and configuration changes. |
| Cyera DSPM integration | Yes | Cross-references which AI tools and agents attempt to connect to which datastores and blocks access to datastores tagged Sensitive+. |
| Self-serve signup | No | The site offers only a demo request and contact email, with no published self-serve path. |
| Published pricing or tiers | No | No plans, tiers, or fee schedule are published; pricing is demo-gated and undisclosed. |
| Supported OS list | Unknown | Specific Windows, macOS, and Linux support is not stated on the cited pages. |
Bot trust
How confidently AI systems can verify this profile from public evidence.
—of 100
ChatGPT—/100
Claude—/100
This profile has not completed a Bot Score assessment yet.
Evidence
Where this record came from, when it was reviewed, and how confidently it can be used.
- Verification
- Scribble researched these facts from the linked public sources.
- The owner has not manually confirmed every field.
- Last reviewed
- Primary source
- bloom.security
Technical profile details
Record ID
db11920f-c705-43bc-97e6-57bf4fb0c56fCanonical URLhttps://profiles.scribble.network/listing/bloom-db11920f