What Bloom is
Bloom discovers and governs AI agents, extensions, IDE plugins, and MCP servers on endpoints with contextual risk assessments. The vendor site is bloom.security. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Bloom covers
Bloom is in the catalog for these capabilities. Categories: Asset Management, Endpoint Management, AI Security, and Agentic Development Security. Catalog tags: Trending and Hot Right Now.
How to evaluate Bloom in a security program
Use Bloom as a stack candidate, not as diligence evidence. The oneNorma score for Bloom is 6.8/10 (percentile 97). If the real gap is in Asset Management, Endpoint Management, AI Security, and Agentic Development Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what bloom.security publishes. Contrast it with pentesting and Security Cloud & Compliance.