Pluto Security has emerged from stealth with $42 million in funding, positioning itself among a growing group of security startups built around the premise that existing security software is not suited to monitoring and controlling AI tools, connectors and usage inside companies.
The startup sells technology that gives companies context, risk analysis, visibility and control over how employees use AI tools. Shahar Bahat, Pluto's CEO and co-founder, said the company began selling in April and has passed $2 million in annual recurring revenue, with more than 30 enterprise customers, including Oscar Health, Workato, Sixt and AlphaSense.
The funding consists of an $8.5 million seed round led by TLV Partners, with the founders of cybersecurity firm Armis also investing, and a recently raised $34 million Series A led by Jump Capital. Skinos, the venture firm of Check Point co-founder Shlomo Kramer, Ansa Capital and other angel investors participated in the Series A.
Bahat said AI tools can appear inside corporate environments within two hours of release, feeding concerns that companies face new security holes. She said about 60% of the risks Pluto detects across its customer base are in tools vibe-coded by non-developers, with finance departments the biggest source of such risks, followed by marketing and legal teams. Developers rank fourth.
She cited one instance in which Pluto's tools found a vibe-coded app built by a finance employee at a Fortune 500 company to manage customer information and churn that had been left exposed to the internet.
Pluto monitors the AI tools employees use, along with the skills, extensions, MCP servers and other components those tools rely on, and the apps and agents being created. The company says it can identify risky components, spot potentially dangerous agent activity and enforce security policies without halting employees' use or creation of AI tools.
To do so, Pluto connects to endpoint security and device management systems and can deploy its own sensors through them or directly onto devices. It gathers prompts, commands, running processes, permissions and users' previous activity, and uses lightweight models on endpoints to assess what an agent is attempting.
Bahat said the system can intervene while an agent is working, stopping an action if an agent seeks permissions beyond what a user intended, or adding instructions into a session that prompt the agent to ask for confirmation.
The company also runs Plutonium, a free platform launched in April that lets anyone check risks tied to publicly available AI skills, connectors and add-ons. It includes an MCP scanner and a catalog of verified components. Bahat said thousands of security professionals use Plutonium and that 70% of Pluto's sales pipeline now comes from inbound interest.
Pluto said it plans to put the new capital into product development, expanding its security research and growing its presence in the U.S. It has 40 employees in the U.S. and Israel.
More company and startup news from TechManNews.
