A cybersecurity startup called Glow has come out of stealth with $180 million raised and a $1.2 billion valuation, despite sharing almost no commercial information about itself. No revenue numbers, no customer names. The founders have strong credentials, which appears to be the main reason investors moved so quickly.
The CEO, Roi Tiger, spent nine years at Meta as a vice president of engineering and previously co-founded Onavo, which Meta acquired in 2013 for up to $200 million. His co-founders come from Snowflake, where one led cybersecurity strategy, and from Claroty, a specialist in protecting industrial systems. The company also brought in Emily Heath, a former chief information security officer at both United Airlines and DocuSign, who sat on the board of Wiz before Google acquired it for $32 billion.
The problem they are building around is something most business operators are already living with. Employees are connecting AI tools to corporate systems without asking permission, often without realising the risk. According to Verizon's 2026 data breach report, shadow AI detections rose fourfold in one year, with 45% of employees now regularly using AI tools on company devices. According to IBM's 2025 Cost of a Data Breach Report, breaches that involve this kind of unsanctioned AI use cost organisations an average of $670,000 more than standard breaches.
At the same time, attackers have become faster and more capable. The time between a known software vulnerability being made public and criminals actively exploiting it has dropped from over 700 days in 2020 to just 44 days in 2025. Malicious software packages planted in public code libraries, which developers routinely pull into their work, grew from 55,000 in 2022 to over 450,000 by 2025. Glow says it has already blocked some of these packages from reaching customer devices.
Glow's argument is that the tools companies currently use to protect their devices, products from CrowdStrike, SentinelOne, Microsoft, and Palo Alto Networks, were built to detect threats after they are already inside. Those five vendors together hold roughly 58% of the market. Glow says it sits earlier in the process, preventing risky software and AI agents from entering the company environment at all.
The endpoint security market, meaning the business of protecting employee laptops, servers, and connected devices, is worth around $40 billion globally and is growing steadily. It is one of the few technology categories where spending tends to hold up even during downturns, because companies treat it as essential rather than optional.
Glow currently has around 100 employees, about 70 of them based in Israel. It uses AI models from Anthropic and Google to power its platform, running them through Amazon's cloud infrastructure. It has paying customers across healthcare, retail, and financial services, though it has not said how many.
The honest read here: Glow is an early-stage company in a crowded space, making claims that have not been independently verified. Its metrics around reducing AI supply-chain risk are self-reported. The security community will get its first real look at the technology at Black Hat USA 2026. Until then, the $1.2 billion valuation is mostly a bet on the founding team and on the direction of the threat environment, both of which give investors reasonable grounds for confidence.
For business operators, the underlying issue does not wait for Glow to prove itself. If your organisation does not know which AI tools are running on company devices right now, that is a gap worth closing, with or without a new vendor.