Pluto Security has emerged from stealth with US$42 million in total funding to help enterprises secure the growing universe of AI workspace tools. The company, which has operations in New York and Israel, announced the raise on October 13, 2026, reporting early commercial traction with customers such as Oscar Health, Workato, Sixt, and AlphaSense. Its platform addresses a widening gap between traditional endpoint security and the applications, agents, and automations that employees now create with AI tools.
AI Tools Expand the Security Surface
Enterprise security teams have historically focused on controlling software installations, monitoring endpoints, and restricting access to sensitive systems. Today employees can use tools such as Claude Code, Codex, Cowork, Lovable, and Base44 to build applications, configure agents, and automate workflows without relying on engineering teams. These workflows often depend on a broader AI supply chain of skills, extensions, packages, MCPs, models, and other components that can introduce new risk.
Pluto combines endpoint visibility, contextual analysis, and real-time enforcement to give security teams a clearer view of what AI tools are doing. The platform can block malicious skills, restrict unsafe agent actions, and prevent access to sensitive data or credentials while allowing legitimate work to continue. Its approach focuses on understanding user intent rather than applying blanket restrictions by default.
Real-Time Visibility and Agent Behavior
The company monitors AI tools, skills, extensions, MCP servers, applications, and agents that employees use or create. It connects to endpoint security and device management systems and can deploy lightweight models on devices to evaluate prompts, commands, permissions, and prior activity. If an agent attempts an unsafe action, Pluto can stop it or inject additional instructions into the session to require confirmation, moving security oversight from user behavior to agent behavior.
Risks are not limited to technical teams, and Pluto says roughly 60% of detected risks originate in tools vibe-coded by non-developers, with finance departments the largest source, followed by marketing and legal teams. In one example, a finance employee at a Fortune 500 company built an app to manage customer information and churn, but the application was left exposed to the internet. The finding illustrates how quickly AI adoption can create serious security exposure outside traditional engineering workflows.
Funding, Traction, and Community Research
Pluto reported more than US$2 million in annual recurring revenue, more than one million endpoints secured globally, and over 40 enterprise customers. The company's funding includes a US$8.5 million Seed round led by TLV Partners and a US$34 million Series A led by Jump Capital, bringing total backing to US$42 million. Additional investors include Skinos, Ansa Capital, AlphaDrive Ventures, and angel investors such as the founders of Armis and Descope.
Pluto's community-driven strategy includes Plutonium, a free AI supply chain security hub powered by its proprietary RisksDB. The resource lets security professionals assess skills, extensions, connectors, and other components, and includes an MCP scanner and a catalog of verified items. Thousands of practitioners already use Plutonium, and Pluto says roughly 70% of its sales pipeline now comes from inbound interest driven in part by that community.
Leadership and Growth Plans
Pluto was founded by Shahar Bahat, Tal Ofer Regev, and Gil Maman, whose backgrounds span Microsoft, Palo Alto Networks, Bridgecrew, and Unit 8200. The company has more than 50 employees across the United States and Israel. It plans to invest the new capital in product development, security research, and U.S. expansion as the AI supply chain continues to evolve.
Pluto's emergence reflects a broader shift in enterprise security as AI tools become accessible to employees across finance, marketing, legal, and other business functions. The company's early traction and community engagement suggest that security teams are looking for context and control rather than all-or-nothing restrictions. As agent-based work becomes more common, Pluto is betting that real-time understanding of both user and agent behavior will define the next phase of enterprise protection.