- Pluto Security has emerged from stealth with $42 mn in funding, including a $34 mn Series A led by Jump Capital and an $8.5 mn seed round led by TLV Partners.
- The company reports more than $2 mn in annual recurring revenue, over 40 enterprise customers and more than 1 mn secured endpoints worldwide.
- Approximately 60% of detected security risks originate from AI applications built by non-developers, with finance, marketing and legal departments accounting for significant exposure.
Pluto Security has emerged from stealth with $42 mn in announced funding to expand its enterprise cybersecurity platform, which protects AI applications, autonomous agents and employee-created workflows.
The company, operating in New York and Israel, announced the funding on October 13, 2026, alongside early commercial results that include more than 40 enterprise customers and over 1 mn secured endpoints globally.
Pluto’s funding includes an $8.5 mn seed round led by TLV Partners and a $34 mn Series A led by Jump Capital. Other investors include Skinos, Ansa Capital and AlphaDrive Ventures, alongside angel investors including founders of cybersecurity companies Armis and Descope.
Customers include Oscar Health, Workato, Sixt and AlphaSense. Pluto’s annual recurring revenue has exceeded $2 mn as businesses seek greater visibility into AI tools deployed outside traditional IT and security controls.
The platform addresses security risks created by employees using tools such as Claude Code, Codex, Cowork, Lovable and Base44 to develop applications and automate business processes without direct involvement from engineering teams.
These applications frequently rely on external components, including AI skills, extensions, software packages, Model Context Protocol (MCP) servers and third-party models. Each additional component can introduce vulnerabilities or expose sensitive corporate information.
Traditional endpoint security systems primarily monitor installed software, devices and access permissions. Pluto extends that monitoring to the behavior of AI agents and the applications employees create.
Its technology combines endpoint visibility, contextual analysis and real-time policy enforcement to identify potentially harmful activity without automatically blocking legitimate AI usage.
Pluto was founded by Shahar Bahat, Tal Ofer Regev and Gil Maman, whose professional backgrounds include Microsoft, Palo Alto Networks, Bridgecrew and Israel’s Unit 8200. The company employs more than 50 people across the United States and Israel.
The platform monitors AI tools, extensions, MCP servers, applications and autonomous agents. It integrates with existing endpoint security and device management systems and can deploy lightweight models directly on devices.
These models analyze prompts, commands, permissions and previous activity to assess whether an AI agent’s intended actions present security risks.
When suspicious behavior is detected, Pluto can block malicious components, prevent access to sensitive credentials or interrupt unsafe operations. It can also insert instructions into an active agent session to request additional confirmation before an action proceeds.
Pluto says understanding user intent allows security teams to apply targeted restrictions rather than imposing blanket controls on AI applications.
The company reports that approximately 60% of detected security risks originate from applications developed by employees without traditional software development backgrounds.
Finance departments account for the largest share of those risks, followed by marketing and legal teams. In one case, a finance employee at a Fortune 500 company developed an application to manage customer information and churn. The application was subsequently found to be exposed to the public internet, creating a potential security vulnerability.
The company has also developed Plutonium, a free AI supply chain security resource built around its proprietary RisksDB database.
The platform allows security professionals to assess AI skills, extensions, connectors and related components. It includes an MCP security scanner and a catalog of verified items.
Thousands of security practitioners use Plutonium, according to the company. Pluto estimates that approximately 70% of its sales pipeline now originates from inbound interest, partly supported by its security research community.
Pluto plans to direct the new capital toward product development, cybersecurity research and expansion in the US market, with a focus on securing AI applications and agents as their use expands across enterprise departments.
