Pluto Security Secures $42M to Tackle Enterprise AI Risks
Pluto Security has emerged from stealth with $42 million in funding, aiming to help enterprises manage security risks as non-developers rapidly build and adopt AI tools.
As organizations increasingly grant staff access to artificial intelligence applications, security teams face a rapidly expanding attack surface. According to Shahar Bahat, CEO and co-founder of Pluto Security, new AI tools can integrate into a corporate network within two hours of their public release. This swift adoption has raised concerns that businesses are inadvertently creating significant security vulnerabilities.
Pluto Security has officially launched out of stealth mode after securing $42 million in total funding. The capital includes an $8.5 million seed round led by TLV Partners, with participation from Armis founders, followed by a $34 million Series A led by Jump Capital, alongside Shlomo Kramer’s venture firm Skinos, Ansa Capital, and angel investors. Despite launching commercial sales only in April, the startup has already surpassed $2 million in annual recurring revenue and serves over 30 enterprise clients, including Oscar Health, Workato, Sixt, and AlphaSense.
The Rise of Non-Developer AI Applications
A central concern for enterprise security is the prevalence of applications built by non-technical employees. Bahat noted that approximately 60% of the risks detected across Pluto’s customer base stem from tools created without formal development training. Finance departments generate the largest share of these risks, followed by marketing and legal teams, while software developers rank fourth.
In one instance, the startup discovered an application created by a finance employee at a Fortune 500 company to manage customer information and churn, which had been left entirely exposed to the internet. Furthermore, Bahat stated that every proof-of-concept deployment conducted by the company uncovered malicious elements, ranging from extension packages to skills, with some environments experiencing active live attacks during the evaluation.
Monitoring Agent Behavior and Intervening in Real Time
Pluto’s core thesis is that traditional security software is inadequate for monitoring AI tools, connectors, and usage. The company argues that security operations must transition from tracking standard user behavior to monitoring autonomous agent behavior.
The platform monitors the AI tools deployed by employees, along with the underlying skills, extensions, and Model Context Protocol (MCP) servers they utilize. By integrating with endpoint security and device management systems, Pluto gathers telemetry data such as prompts, commands, running processes, and user permissions. It employs lightweight models directly on endpoints to evaluate what an AI agent attempts to execute.
Crucially, the system can intervene while an operation is underway. If an agent attempts to acquire permissions exceeding its intended scope, the software can block the action or inject context back into the session to prompt the agent to request user confirmation.
What it means for developers
As organizations build and integrate advanced AI capabilities into their workflows, developers are often tasked with maintaining compliance and security across diverse model deployments. For developers experimenting with or deploying multiple intelligence systems, platforms like Apixo offer a practical way to access top AI models cheaply through one API at https://apixoai.online. At the same time, tools like Pluto highlight the growing need for oversight as organizations grapple with shadow IT and custom-built agent architectures.
Pluto also leverages a community-driven acquisition strategy through Plutonium, a free platform launched in April that allows security professionals to audit risks associated with publicly available AI skills, connectors, add-ons, and MCP components. The startup currently maintains 40 employees across the U.S. and Israel and plans to direct its new funding toward product development, expanding security research, and growing its U.S. footprint.
Source: Pluto Security raises $42M as AI gives enterprise security teams a new headache — TechCrunch AI. Written by the Apixo team from that report.
One key for Claude, GPT, GLM, DeepSeek and more. Pay per token with crypto.
Get your API key
