$1.2B AI Risk Bet Hurls Glow Endpoint Security Into View

Glow endpoint security is now a unicorn thesis before it is a public revenue story, and the first people under pressure are CISOs trying to govern AI tools already running on employee devices.

The Palo Alto-headquartered startup emerged from stealth Wednesday with a $180 million all-equity Series A at a $1.2 billion valuation, according to TechCrunch. Its bet is direct: AI agents, developer tools, and enterprise software running on laptops and other endpoints now create risks that older endpoint tools were not built to stop early enough.

XOOMAR analysis: Glow’s launch is less about one startup’s funding round than a fight over where AI security budgets will land. If the endpoint becomes the place where AI enters the company, then AI endpoint security shifts from a feature request to a control layer.

Glow endpoint security lands with a $1.2 billion claim on AI risk

Glow was founded in 2025 by former Meta, Snowflake, and Claroty executives. Its co-founders include Roi Tiger, a former Meta vice president of engineering, Omer Singer, formerly Snowflake’s head of cybersecurity strategy, Ophir Arie, formerly Claroty vice president of research and development, and Arnon Joseph, a former Meta engineering leader.

The round was backed by Sequoia Capital, Cyberstarts, Greenoaks, and Redpoint Ventures, with participation from Index Ventures, Swish Ventures, Lux Capital, Operator Collective, and Holly Ventures. That investor list matters because Glow is emerging before disclosing revenue metrics, customer counts, or named customers.

What are investors underwriting if not public financial proof?

XOOMAR analysis: they are underwriting a category argument. Glow says endpoints are being redefined by AI tools that employees and developers adopt faster than security teams can review. The company’s pitch is that endpoint security can’t only detect bad activity after the fact. It must decide what software, AI agents, and developer tools should be allowed to run in the first place.

“If you think of the past decade, everything was moving to the cloud and SaaS. Suddenly, AI lands on the endpoint in a way we’ve never seen,” Tiger told TechCrunch.

Glow says it already has paying customers in healthcare, retail, and financial services, but it declined to disclose names or numbers. Tiger told TechCrunch that typical deployments span tens of thousands of employee devices across global organizations.

Developers face the sharpest edge of AI agent risk

Glow is targeting the machines where software work happens. That means employee laptops, developer environments, servers, and other connected devices where tools are installed, packages are pulled, and code is built.

The company says its platform monitors and controls the software, AI agents, and developer tools running on employee devices. Its specialized AI agents continuously map enterprise environments, assess risk in real time, and enforce security policies.

Which tools are running, what can they touch, and who approved them?

That question hits developers first. Glow told TechCrunch its platform has already prevented malicious npm packages from being installed in customer environments, identified AI agents attempting to pull in that software, and detected employee devices where endpoint detection and response tools were missing or running with reduced functionality.

That is the most concrete product signal in the launch. It places Glow near software supply-chain risk, developer tooling, and endpoint posture at the same time.

XOOMAR analysis: the risk Glow is selling against is not only a hostile AI model. The more immediate problem is a sanctioned or tolerated tool making unsafe choices quickly. An AI agent that pulls a package, modifies a workflow, or acts inside a developer environment can create exposure before a traditional review process catches up.

For XOOMAR readers tracking how risk shows up at the device level, this sits near our coverage of Windows 10 Security Updates Now Trap One in Six PCs, though Glow is focused on what runs on managed enterprise endpoints rather than operating-system support cycles. The device is becoming the pressure point again.

Buyers get a prevention pitch, not another alert queue

Glow’s central contrast is with existing endpoint detection and response products. Tiger told TechCrunch that those tools primarily focus on detecting threats after they emerge, while Glow is designed to prevent risky software, AI agents, and developer tools from entering enterprise environments in the first place.

The company’s own announcement, carried by GlobeNewswire via Business Insider, says regular usage of AI on corporate devices, authorized or not, rose from 15% to 45% in one year. That figure comes from Glow’s launch materials, not an independently audited dataset in the supplied sources.

Can a prevention-first product avoid becoming a productivity tax?

That is the buyer test. CISOs want control, but developers and business teams will resist anything that blocks useful tools without clear reasoning. Glow’s answer is a context and reasoning engine that decides which software is allowed in and which should be removed.

“Prevention was always the right answer in security. It just never worked at enterprise scale without blocking the business,” Tiger said in the company announcement. “AI solves that.”

Glow says it uses models from Anthropic and Google’s Gemini through Amazon Bedrock, while building its own software to give those models enterprise context and improve reliability for security tasks. That architecture choice matters. Glow is not claiming to train everything from scratch. It is wrapping third-party models in a security product with enterprise-specific context.

Incumbents will attack the category before they concede it

Glow enters a crowded endpoint market dominated by CrowdStrike, Microsoft, SentinelOne, and Palo Alto Networks, according to TechCrunch. Those companies already sit inside large enterprise security budgets and have distribution Glow does not yet have.

Will buyers treat AI agent control as a standalone platform or as a feature inside tools they already own?

That is the competitive fight. Glow needs enterprises to believe AI changes endpoint control enough to justify a new vendor. Incumbents have an easier counter: AI agent monitoring, software control, and policy enforcement can be folded into existing endpoint and cloud security suites.

Here is the launch positioning in practical terms:

XOOMAR analysis: Glow’s biggest enemy may not be CrowdStrike or Microsoft on day one. It may be buyer uncertainty. Enterprises are still figuring out whether AI agent security belongs with endpoint, identity, data loss controls, developer security, or all of them at once.

That ambiguity can help a startup create a category. It can also slow procurement.

The market signal is bigger than one stealth exit

Glow’s launch follows rising concern over AI-assisted cyberattacks. TechCrunch notes that debate intensified after Anthropic unveiled its Mythos AI model, which the company said showed advanced capabilities in identifying and exploiting software vulnerabilities.

Security teams now have to assume that attackers can automate more of the vulnerability discovery and exploitation chain. Glow is using that backdrop to argue that every tolerated endpoint weakness becomes more dangerous when exploitation can move at machine speed.

Does that make endpoint security the new front door for enterprise AI governance?

XOOMAR analysis: not by itself. Endpoint visibility is one layer. Enterprises still need to understand identity permissions, data access, logging, procurement, and developer workflow. But Glow’s point is credible: if AI tools are installed and used on employee devices, policy documents and training alone won’t show what those tools actually do.

This is also where Glow’s operational claims need public testing. The company says it has paying customers and large deployments, but it has not disclosed customer names, counts, retention, revenue, or independent benchmarks. A $1.2 billion valuation buys attention. It does not buy trust.

Our broader technology coverage, from endpoint maintenance pressure in Windows 10 Security Updates Now Trap One in Six PCs to engineering limits in 630 Texas Miles Punish Teens in Solar Car Challenge, keeps returning to the same practical theme: systems fail where real-world use exceeds what designers planned for. Glow is making that argument for enterprise AI tools.

Glow’s next proof point is whether AI endpoint security becomes durable

Glow employs nearly 100 people, with about 70% in Israel and the rest in the U.S. The company says the new funding will support U.S. go-to-market growth and expansion of Glow Labs, its research arm.

The next test is not whether enterprises are anxious about AI. They are. The harder test is whether Glow can turn that anxiety into deployments, measurable risk reduction, and renewals across regulated and high-trust sectors.

Evidence that would strengthen Glow’s thesis:

• Named customers: Public references from large enterprises using Glow across tens of thousands of devices.
• Measured outcomes: Clear before-and-after data on blocked risky software, reduced unmanaged tools, or faster remediation.
• Developer acceptance: Proof that controls do not slow engineering teams into workarounds.
• Incumbent response: Endpoint giants adding similar AI agent control features would validate the problem, even while pressuring Glow.

Evidence that would weaken it:

• Feature absorption: Buyers decide existing endpoint vendors can handle AI agent visibility well enough.
• Low trust in automation: CISOs hesitate to let AI-driven controls remove or block software automatically.
• Thin differentiation: Glow’s product looks like policy enforcement plus model wrappers rather than a new control plane.

Glow has picked the right anxiety point: AI tools are reaching endpoints faster than security operating models can adapt. Now it has to prove that Glow endpoint security is more than a well-funded response to a scary moment. The watch item is simple: whether enterprises treat AI agent control as a permanent layer of endpoint defense, or wait for it to disappear into the next release cycle from the incumbents they already pay.

The Bottom Line

• Glow’s $1.2 billion valuation signals investor conviction that AI will reshape endpoint security budgets.
• CISOs face rising pressure to control AI tools already running on employee devices.
• The company must turn a strong category thesis into revenue, customers, and proof of security value.