Pluto Security raises $42M as AI gives enterprise security teams a new headache

Pluto Security, a startup emerging from stealth mode, has raised $42 million to address enterprise security gaps created by widespread AI tool adoption within organizations.

The company's $42 million funding round comprises an $8.5 million seed led by TLV Partners, with cybersecurity firm Armis' founders also investing, plus a $34 million Series A led by Jump Capital. Skinos, the venture firm of Check Point co-founder Shlomo Kramer, and Ansa Capital also participated.

Pluto Security CEO Shahar Bahat told TechCrunch that new AI tools can appear inside corporate environments within two hours of release. The company's analysis found that approximately 60% of risks it detects come from tools created by non-developers, particularly in finance departments, followed by marketing and legal teams. Developers rank fourth as a source of risk. One example Bahat cited involved a finance employee at a Fortune 500 company who built an app to manage customer information and churn that was left exposed to the internet.

Pluto began selling in April and has already reached $2 million in annual recurring revenue with more than 30 enterprise customers including Oscar Health, Workato, Sixt and AlphaSense.

The startup's core offering monitors what AI agents do in real time, including tracking AI tools employees use, the skills and extensions those tools rely on, and apps and agents being created. The system gathers data including prompts, commands, running processes, permissions and user activity, then uses what Bahat described as "lightweight" models on endpoints to assess agent behavior.

A distinctive feature of Pluto's approach is the ability to intervene while an agent is working. If an agent attempts to gain excessive permissions, the system can stop the action or inject instructions prompting the agent to request confirmation.

Bahat stated that in every proof-of-concept engagement Pluto conducted, the company found malicious activity, ranging from malicious extension packages to active live attacks.

Pluto launched Plutonium, a free platform that lets security professionals check risks associated with publicly available AI skills and connectors. The company claims thousands of security professionals use Plutonium, and Bahat said 70% of Pluto's sales pipeline now comes from inbound interest.

The company plans to use new capital for product development, expanding security research efforts and growing its U.S. presence. Pluto currently employs 40 people across the United States and Israel.