Pluto Security raises $42M to monitor corporate AI tools
Cybersecurity startup Pluto Security emerged from stealth with $42 million in funding to protect enterprises from security risks created by employee-deployed AI tools and autonomous agents.
Pluto Security has emerged from stealth with $42 million in total capital, securing an $8.5 million seed round led by TLV Partners alongside the founders of Armis, followed by a $34 million Series A led by Jump Capital. Additional investors include Skinos, Ansa Capital, and several angel backers. The startup, which employs 40 people across the U.S. and Israel, began commercial operations in April and has already surpassed $2 million in annual recurring revenue. Its client roster includes more than 30 enterprise customers, such as Oscar Health, Workato, Sixt, and AlphaSense.
The capital influx targets a rapidly expanding corporate threat vector: non-technical staff deploying or building unmonitored AI utilities. According to Pluto co-founder and CEO Shahar Bahat, newly released AI tools routinely enter enterprise environments within two hours of launch. Furthermore, roughly 60% of detected risks stem from applications vibe-coded by non-developers, with finance departments generating the most vulnerabilities, followed by marketing, legal, and engineering teams. In one instance, Pluto uncovered an exposed customer management application created by a finance staffer at a Fortune 500 company. Bahat noted that every proof-of-concept trial conducted by the startup uncovered malicious activity, including live attacks.
To address these vulnerabilities, Pluto tracks how employees build, deploy, and interact with AI components, including extensions, skills, and Model Context Protocol (MCP) servers. The platform connects to endpoint security and device management systems or deploys direct sensors to monitor prompts, commands, running processes, and permissions. By executing lightweight models directly on endpoints, Pluto can actively intervene during live sessions—injecting context to redirect an agent's behavior or requiring user confirmation if an agent attempts unauthorized permission escalations.
For enterprise security teams adapting to agentic workflows, Pluto offers direct intervention mechanisms rather than simple passive monitoring. The startup also provides Plutonium, a free platform and MCP scanner launched in April that allows security professionals to audit public AI components. Plutonium currently acts as a primary discovery engine for the firm, with inbound interest driving 70% of Pluto's current sales pipeline.
This is our own summary of reporting by TechCrunch AI
