Pluto Security Raises $42M to Tackle Enterprise AI Security Risks

Pluto Security, an enterprise cybersecurity startup focused on risks associated with AI tools and agents, has raised $42 million across seed and Series A funding rounds. The funding comes as businesses increasingly adopt AI tools, creating new security challenges involving AI-generated applications, third-party extensions, connectors and autonomous agents.

The company's funding includes an $8.5 million seed round led by TLV Partners, with investment from the founders of cybersecurity company Armis. Pluto subsequently raised a $34 million Series A round led by Jump Capital, with participation from Skinos, the venture firm associated with Check Point co-founder Shlomo Kramer, Ansa Capital and other angel investors.

Founded by CEO Shahar Bahat and her co-founders, Pluto Security develops technology that helps enterprises understand, monitor and control how employees use AI tools and how AI agents behave within company environments.

According to TechCrunch, Pluto began selling its product in April 2026 and had already crossed $2 million in annual recurring revenue (ARR), with more than 30 enterprise customers. Its customers include Oscar Health, Workato, Sixt and AlphaSense.

The company plans to use the new capital to develop its product, expand security research and grow its presence in the United States.

Why Enterprise AI Adoption Is Creating New Security Risks

Companies are introducing AI tools across departments to automate tasks, generate content, analyze information and build internal applications. However, these tools can introduce security vulnerabilities when employees adopt applications, extensions or AI-generated software without sufficient oversight.

Pluto Security CEO Shahar Bahat told TechCrunch that a newly announced AI tool can appear inside a company's environment within approximately two hours of its release.

The article also reports that around 60% of the risks Pluto detects across its customer base involve tools built by non-developers using AI-assisted coding, often referred to as vibe coding. Finance departments were identified as the largest source of these risks, followed by marketing and legal teams. Developers ranked fourth.

One example described in the report involved a finance employee at a Fortune 500 company who had created an application to manage customer information and churn. The application was reportedly left exposed to the internet.

This illustrates a challenge for enterprise security teams: employees can now create and deploy software without following the same development and security processes traditionally used by engineering teams.

The resulting risks may involve exposed information, excessive permissions, vulnerable extensions or unsafe interactions between AI agents and company systems.

How Pluto Security Monitors AI Tools and Agents

Pluto Security's platform is designed to provide enterprises with visibility into AI tools, their supporting components and the applications employees create.

The software monitors AI tools, skills, extensions, Model Context Protocol (MCP) servers and other components that those tools rely on. It also tracks applications and agents being created or deployed within company environments.

The objective is to identify risky components, detect potentially dangerous agent activity and enforce security policies without completely preventing employees from using AI.

To collect information, Pluto connects with endpoint security and device management systems. It can deploy its own sensors through those systems or install them directly on devices.

According to the article, the platform gathers information such as prompts, commands, running processes, permissions and previous user activity. It also uses lightweight models on endpoints to help assess what an AI agent is attempting to do.

This approach allows the system to consider the context surrounding an AI agent's actions rather than treating every AI tool as an isolated application.

Real-Time Intervention in AI Agent Activity

A key feature highlighted by Pluto is its ability to intervene while an AI agent is working.

For example, if an agent attempts to obtain permissions beyond what the user intended, Pluto's system can stop the action or introduce instructions into the session that prompt the agent to request confirmation.

The company describes this as a shift from monitoring user behaviour to monitoring agent behaviour.

That distinction matters because AI agents can perform sequences of actions, interact with multiple tools and operate within the permissions granted to them. Monitoring only which applications employees open may not provide enough information about what those agents are doing.

Pluto's approach aims to help security teams assess these actions in context and intervene when behaviour appears risky.

The platform is intended to maintain employee access to AI tools while giving organizations greater control over the actions those tools and agents perform.

Plutonium: A Free Platform for AI Security Research

Pluto Security has also developed a customer acquisition and research initiative called Plutonium.

Launched in April 2026, Plutonium is a free platform that allows users to check risks associated with publicly available AI skills, connectors and add-ons. It also includes an MCP scanner and a catalogue of verified components.

The platform gives security professionals a way to investigate AI-related components before incorporating them into their environments.

According to Bahat, thousands of security professionals use Plutonium. She also said the community has become an important source of product feedback and potential customers.

TechCrunch reported that 70% of Pluto's sales pipeline comes from inbound interest, although the company did not disclose how much of that interest comes directly from Plutonium.

The free platform therefore serves both a security research purpose and a potential route for enterprises to discover Pluto's commercial products.

Pluto Security's Funding and Enterprise Traction

Pluto's $42 million in funding consists of two rounds:

• Seed funding: $8.5 million led by TLV Partners, with the founders of Armis also investing.

• Series A funding: $34 million led by Jump Capital, with participation from Skinos, Ansa Capital and other angel investors.

The company had reported more than $2 million in ARR and over 30 enterprise customers after beginning sales in April 2026.

Its customer list includes Oscar Health, Workato, Sixt and AlphaSense. These deployments provide an indication of its early enterprise traction, although the supplied article does not disclose customer-level spending or contract values.

Pluto has 40 employees across the United States and Israel. The company plans to invest its new funding in product development, security research and expansion in the US market.

What Pluto Security's Growth Signals for Enterprise Cybersecurity

Pluto is entering a cybersecurity market in which enterprises are adopting AI faster than traditional security processes may be able to accommodate.

Employees can use AI assistants, install extensions, connect tools and build applications with relatively little technical effort. While these capabilities can increase productivity, they can also create risks when organizations lack visibility into the components being used or the actions automated agents perform.

Pluto's strategy is to provide security controls specifically designed for these AI-driven workflows. Its focus includes both the tools employees use and the behaviour of agents operating within company systems.

The company's early revenue, enterprise customer base and new funding indicate investor interest in this emerging security category. However, the longer-term opportunity will depend on how effectively Pluto detects genuine threats, integrates with enterprise security systems and supports organizations as their AI usage expands.

With $42 million raised, Pluto Security plans to strengthen its product and research capabilities while expanding its presence in the US market.