Blast Security

Blast Security builds what it calls a preemptive cloud defense platform: rather than generating alerts after a cloud misconfiguration or risky change has already happened, the product compiles security policy into guardrails that block or correct risky infrastructure-as-code, CI/CD, and runtime cloud changes before they take effect. The pitch is a direct response to a well-known problem in cloud security posture management — teams already drowning in CSPM and CNAPP alerts that arrive too late to prevent the underlying misconfiguration from ever existing. The platform integrates with AWS, Azure, GCP, Kubernetes, and CI/CD pipelines to apply these preventive controls across the build and runtime lifecycle.

Founded by Boris Vaynberg, Ido Bukra, and Roi Panai — veteran operators from the cybersecurity startup Solebit and Israeli military technology units — Blast Security emerged from stealth in November 2025 with a $10 million seed round co-led by 10D and MizMaa Ventures. The Tel Aviv-based company is early-stage but has already landed deployments at multiple large enterprises, and reports internally that its preventive guardrails block more than 90% of the cloud risk it evaluates before it can materialize into an actual misconfiguration or exposure.

As a company only months removed from stealth, Blast Security’s claims about deployment scale and risk-prevention rates come from the company itself rather than an independent, named case study or third-party evaluation. The underlying idea — shifting cloud security left from detection to prevention by compiling policy directly into blocking guardrails — is a real and increasingly common architectural approach in cloud-native security, but it is too early to know how the product performs at scale outside its founding design partners.