What Happened

Glow, a cybersecurity startup founded in 2025, emerged from stealth on July 22, 2026, announcing a $180 million all-equity Series A round at a $1.2 billion valuation. The round was led by Sequoia Capital, Cyberstarts, Greenoaks, and Redpoint Ventures, with participation from Index Ventures, Swish Ventures, Lux Capital, Operator Collective, and Holly Ventures.

The company was founded by a team with deep enterprise security and infrastructure pedigrees: CEO Roi Tiger (former Meta VP of engineering), Omer Singer (former Snowflake cybersecurity strategy head), Ophir Arie (former Claroty VP of R&D), and Arnon Joseph (former Meta engineering leader). COO Emily Heath brings additional credibility — she was CISO at United Airlines and Docusign and served on Wiz's board through its $32 billion acquisition by Google.

Glow is headquartered in Palo Alto with nearly 100 employees, approximately 70% based in Israel. The company confirmed it has paying customers across healthcare, retail, and financial services, with typical deployments spanning tens of thousands of employee devices. It declined to disclose customer names, revenue figures, or specific customer counts.

The platform uses AI models from Anthropic and Google's Gemini through Amazon Bedrock, combined with proprietary software that provides enterprise context to improve model reliability for security tasks. Glow said its platform has already prevented malicious npm packages from being installed in customer environments, identified AI agents attempting to pull in such software, and detected employee devices where endpoint detection and response tools were missing or operating with reduced functionality.

Why It Matters

Glow's core thesis is that AI adoption has fundamentally changed the endpoint threat surface — and that legacy EDR products weren't built for this new reality. According to Tiger, existing tools from CrowdStrike, Microsoft, SentinelOne, and Palo Alto Networks focus primarily on detecting threats after they emerge. Glow is designed to prevent risky software, AI agents, and developer tools from entering enterprise environments in the first place.

This is a meaningful distinction. As enterprises deploy AI coding assistants, autonomous agents, and third-party AI tools across employee laptops, the attack surface expands in ways traditional EDR doesn't fully address. An AI agent that pulls in a malicious npm package isn't a traditional malware detection problem — it's a governance and policy enforcement problem at the agent level. Glow is betting that this gap is large enough to justify a new platform, not just a feature.

The $1.2B valuation on a company that hasn't disclosed revenue metrics signals strong investor conviction. This mirrors the broader trend of cybersecurity unicorns commanding premium valuations pre-revenue — Wiz's trajectory to a $32B acquisition is the obvious precedent, and Heath's presence on Wiz's board is unlikely to be coincidental.

The timing is also notable. Anthropic's recent unveiling of its Mythos AI model, which reportedly demonstrated advanced capabilities in identifying and exploiting software vulnerabilities, has intensified the debate over AI-assisted cyberattacks. Glow is positioning itself squarely at the intersection of these two trends: AI as attack vector and AI as governance challenge.

Who Is Affected

Enterprise CISOs and security teams now face a new vendor category to evaluate. If Glow's thesis holds, their existing EDR stack may have a meaningful gap when it comes to AI agent governance — and they'll need to decide whether to add a tool like Glow or wait for incumbents to build similar capabilities.

AI startup founders building agents or developer tools that run on enterprise endpoints should pay close attention. Glow's platform actively monitors and controls what AI agents execute on employee devices. If your agent's behavior isn't transparent and policy-compliant, tools like Glow could block it from enterprise environments entirely.

Cybersecurity incumbents — CrowdStrike, SentinelOne, Microsoft, Palo Alto Networks — face a potential category challenge. If AI-native endpoint security emerges as a distinct purchasing decision rather than a feature within existing platforms, it could fragment their market and create acquisition pressure.

Strategic Implications

For AI startup founders

If your product runs as an agent or developer tool on enterprise endpoints, expect a new class of security gatekeepers evaluating and potentially blocking your software. Design for visibility — make your agent's behavior auditable and policy-compliant from day one, or you'll lose enterprise deals to competitors that are. Glow specifically calls out detecting AI agents that attempt to pull in third-party software components; if your agent installs dependencies dynamically, that's a red flag for this type of tool.

For developers and operators building with AI APIs

Glow's platform targets AI agents attempting to pull in third-party software components like malicious npm packages. If you're building agents that install dependencies or execute code on enterprise devices, assume they'll be monitored and sandboxed. Build with explicit permission models, dependency transparency, and behavior logging. The era of AI agents operating freely on enterprise endpoints is closing fast.

For non-technical business owners evaluating AI tools

A new vendor category is emerging to help you govern what AI tools and agents your employees are actually running on their devices. If you're deploying AI coding assistants or autonomous agents broadly across your organization, this is worth evaluating alongside your existing CrowdStrike or SentinelOne contract. Your current EDR may not cover the same risks that a tool like Glow is designed to address — specifically, the governance of AI agents and developer tools before they become a problem.

What to Watch Next

Monitor whether CrowdStrike, SentinelOne, or Microsoft announce AI agent governance features in the next two quarters — that would signal whether Glow's category thesis is being validated by incumbents or absorbed as a feature. Also watch for Glow's first customer case studies with named enterprises, which would move the story from investor narrative to commercial validation.

Frequently Asked Questions

Q: What does Glow's endpoint security platform do differently from CrowdStrike or SentinelOne?

A: Glow focuses on preventing risky software, AI agents, and developer tools from entering enterprise environments in the first place, rather than detecting threats after they emerge. It specifically monitors AI agents running on employee devices, controls what third-party software components they can install, and enforces security policies in real time using AI models from Anthropic and Google Gemini.

Q: Is Glow's $1.2B valuation justified given it hasn't disclosed revenue?

A: That's debatable. Glow has confirmed paying customers across healthcare, retail, and financial services with deployments spanning tens of thousands of devices, but hasn't disclosed revenue figures or customer names. The valuation reflects investor conviction in the AI security category rather than proven financial metrics — similar to how Wiz commanded premium valuations before its $32B acquisition by Google. Whether Glow can justify the valuation depends on whether AI-native endpoint security becomes a distinct purchasing category or gets absorbed into existing EDR platforms.