Pluto Security Raises $42M to Secure AI Agents

Overview

Pluto Security has emerged from stealth with a $42 million funding round, positioning itself as a critical defense layer for enterprises navigating the rapid proliferation of AI tools. The startup addresses a growing concern among corporate security teams: the difficulty of monitoring AI adoption when employees deploy tools in unpredictable ways.

According to Shahar Bahat, CEO and co-founder, the velocity of AI integration within corporations is staggering. She notes that a newly released AI tool can infiltrate a company’s environment within just two hours of its public launch. This speed outpaces traditional security protocols, creating what Bahat describes as "gaping security holes" that legacy systems struggle to detect.

The funding underscores investor conviction that existing cybersecurity software is ill-equipped to handle the unique risks posed by AI agents and low-code development. Pluto’s platform aims to shift security focus from mere user behavior to agent behavior, providing real-time visibility and control over how AI tools are used and built within enterprise networks.

Market Drivers and Risk Landscape

The core problem driving Pluto’s emergence is the democratization of AI development. When every employee in an organization is given access to powerful AI tools, the resulting innovation often comes at the cost of security. Bahat revealed that approximately 60% of the risks detected across Pluto’s customer base originate from applications that are "vibe-coded" by non-developers.

These informal code-generation practices are most prevalent in finance departments, followed by marketing and legal teams. Interestingly, professional developers rank only fourth in terms of risk generation, suggesting that the lack of structured coding guidelines in business units creates the largest attack surfaces.

“In general, I’ll say there was not one POC in which we entered and didn’t find malicious stuff,” Bahat stated. “Whether those are extension packages or skills — some of them had active live attacks while we did the POC.”

One notable case involved a Fortune 500 company where a finance employee created an app to manage customer information and churn rates. While the tool was functional, it was left exposed to the internet due to a lack of security oversight. Such incidents highlight the tension between operational agility and data protection in the age of generative AI.

Technology and Product Approach

Pluto Security’s technology stack is designed to monitor AI tools, the skills and extensions they rely on, and the apps being created by employees. The platform connects to existing endpoint security and device management systems, deploying sensors either directly onto devices or through these integrations.

Key capabilities include:

Real-time Monitoring: The system gathers data on prompts, commands, running processes, permissions, and user activity history.
Lightweight AI Models: Pluto employs its own lightweight models on endpoints to assess the intent of AI agents as they operate.
Active Intervention: Unlike passive monitoring tools, Pluto can intervene while an agent is working. If an agent attempts to exceed its intended permissions, the system can stop the action or inject context into the session to prompt the agent for confirmation.

“We’re moving from user behavior to agent behavior,” Bahat explained. “We can inject context back to the session, and this way I can change how the agent is working.”

This proactive approach allows companies to enforce security policies without stifling the productivity gains associated with AI adoption. The goal is to create a secure environment where employees can continue to build and use AI tools freely, provided they adhere to defined safety boundaries.

Traction and Funding Details

Despite launching sales operations only in April, Pluto Security has already secured significant market traction. The company reports crossing $2 million in annual recurring revenue with more than 30 enterprise customers. Notable clients include Oscar Health, Workato, Sixt, and AlphaSense, demonstrating that demand spans across healthcare, technology, automotive, and data analytics sectors.

The $42 million raise consists of two rounds:

An $8.5 million seed round led by TLV Partners, with participation from the founders of cybersecurity firm Armis.
A $34 million Series A led by Jump Capital, alongside Skinos (founded by Check Point co-founder Shlomo Kramer) and Ansa Capital.

Bahat attributed the startup’s success to a novel go-to-market strategy centered around Plutonium, a free platform launched in April. Plutonium allows security professionals to scan and assess risks associated with publicly available AI skills, connectors, and add-ons. It also features an MCP scanner and a catalog of verified components.

The free tool has garnered thousands of users within the security community, serving as both a utility and a lead generation engine. Bahat noted that 70% of Pluto’s sales pipeline now stems from inbound interest, largely driven by the visibility and trust established through Plutonium.

Future Outlook

With the new capital, Pluto Security plans to invest in product development, expand its security research capabilities, and grow its presence in the United States. The company currently employs 40 people across offices in the U.S. and Israel.

The broader trend of AI security startups raising large sums reflects a market consensus that the current patchwork of security tools is insufficient for the agent-based future of enterprise IT. As AI agents become more autonomous, the need for specialized monitoring and intervention tools will likely intensify.

Pluto’s bet is that by securing the lifecycle of AI tools—from initial discovery by non-technical users to active execution by agents—enterprises can mitigate risks without sacrificing innovation. Whether this model can scale to match the pace of AI adoption remains the key challenge for the startup and its investors.