Glow Exits Stealth With $180M, Betting Endpoint Control Beats Data Inspection in the AI Era

Glow emerged from stealth on July 22, 2026 with $180 million in an all-equity Series A at a $1.2 billion valuation. The round was led by Sequoia Capital, Cyberstarts, Greenoaks and Redpoint Ventures, with Index Ventures, Lux Capital and others participating.

The hook for data-security teams is the shadow-AI thesis. Glow cites its own data showing that regular AI-tool usage on corporate devices — authorized or not — jumped from 15% to 45% in a year, and argues AI has both spawned new risks and accelerated old ones. That’s a real pain point: unmanaged GenAI on endpoints is exactly where a lot of sensitive data is quietly leaking today.

But read the mechanism carefully. Glow’s model is prevention and application control, not content inspection. It gives teams control over everything that runs on the endpoint, using AI agents to map the environment, score risk in real time, and enforce policy automatically — deciding which software is allowed and which gets removed. That’s allowlisting and software governance, closer to the app-control lineage than to endpoint DLP’s data-movement classification and blocking.

So where does this sit next to your DLP program? Adjacent, not overlapping. If you’re evaluating this against an endpoint DLP or DSPM line item, don’t. Software control can shrink the shadow-AI attack surface by keeping unsanctioned tools off devices, but it doesn’t inspect what data moves into the AI tools you do allow. The interesting question is whether Glow adds data-aware controls later; today the pitch is about what runs, not what leaves.

The pedigree is worth noting because it signals intent. CEO Roi Tiger spent nine years at Meta, most recently as VP of Engineering; CTO Omer Singer was Head of Cybersecurity Strategy at Snowflake; and VP of R&D Ophir Arie came from the same role at Claroty. Singer’s Snowflake background in particular is a data-security signal.

Two caveats before anyone gets excited. Glow hit unicorn status with no publicly available product, and its early metrics are self-reported with no independent benchmarks. Temper the capability claims accordingly. (Valuation shorthand also varies across coverage — the company and most trade press say $1.2B.)

Bottom line for practitioners: file this under endpoint security to watch, with a note to ask about data-control roadmap the moment a product ships.