Glow exits stealth at $1.2B to secure AI agents on endpoints

The AI agent story most people have been telling is a cloud story, models in a data center taking actions via APIs. The story Glow is telling is quieter and, for security teams, more inconvenient. Agents are now landing on the laptop itself, invoking developer tools, pulling packages, taking actions on behalf of employees, and the endpoint stack most enterprises bought was designed to spot known-bad software after the fact, not to see an agent at all.

The company emerged from stealth with a $180 million Series A at a $1.2 billion valuation, led by Sequoia, Cyberstarts, Greenoaks and Redpoint, with Index Ventures, Swish Ventures, Lux Capital, Operator Collective and Holly Ventures also in. Founder and CEO Roi Tiger is a former Meta VP of Engineering; co-founders come from Snowflake and Claroty, and Emily Heath, previously CISO at United Airlines and Docusign, joined as COO.

The pitch, as TechCrunch describes it, is that existing endpoint detection and response products focus primarily on detecting threats after they emerge, whereas Glow is designed to prevent risky software, AI agents and developer tools from entering the environment in the first place. It runs its own specialized AI agents on endpoints, powered by models from Anthropic and Google's Gemini via Amazon Bedrock, to map what is on a device, score risk in real time, and enforce policy. Glow says it has already blocked malicious npm packages from being installed and caught AI agents trying to pull such software in.

Take the traction claims as reported, not settled. TechCrunch cites paying customers in healthcare, retail and financial services with typical deployments spanning tens of thousands of devices, but the piece does not disclose revenue, customer count, or how the prevention approach handles the false-positive problem any policy-enforcing agent eventually runs into. The interesting thing to watch is not whether a startup fresh out of stealth can technically police agents on a laptop, but whether the endpoint detection and response incumbents respond by shipping their own agent-aware modules or by writing an acquisition check. Either way, 'what is your agent story on the endpoint' is now a question CISOs will start asking their incumbent.