Pluto Security raises $42 million as AI creates a new headache for enterprise security teams

Meta description: Pluto Security raises $42 million to monitor vibe-coded AI tools and agent behavior across enterprise environments, highlighting how fast security gaps appear.

Tags: enterprise AI security, Pluto Security, AI agents, security startups, vibe-coded apps


Pluto Security has emerged from stealth with $42 million in funding, signaling how quickly enterprise AI security has become a distinct market. Pluto is the latest in a new crop of security startups that have quickly sprung up to help companies address fears that broad access to AI tools can create unexpected gaps. Investors are backing this category because existing security software is not a natural fit for AI tools, connectors and usage.

Background: AI tools arrive faster than controls

The concern is that people will use AI tools in unexpected ways. Shahar Bahat, Pluto’s CEO and co-founder, said a newly announced AI tool can appear inside a company’s environment within two hours of its release. That speed leaves little time for security teams to monitor or control what the tool does once it reaches users.

Pluto’s early detections show where the gap is widening. Bahat said about 60% of the risks the company detects across its customer base come from tools vibe-coded by non-developers. Finance departments are the largest source of those risks, followed by marketing and legal teams. Developers rank fourth. In one case, the startup found a vibe-coded app created by a finance employee at a Fortune 500 company. The app managed customer information and churn data, but it was left exposed to the internet.

Development: Selling began in April and reached $2 million in annual recurring revenue

Bahat told TechCrunch that Pluto started selling in April. Since then, the company has already crossed $2 million in annual recurring revenue and counted more than 30 enterprise customers, including Oscar Health, Workato, Sixt and AlphaSense.

Pluto’s funding spans an $8.5 million seed round led by TLV Partners, with cybersecurity firm Armis’ founders also investing. The company recently raised a Series A of $34 million led by Jump Capital, with Skinos, Check Point co-founder Shlomo Kramer’s venture firm, Ansa Capital, and other angel investors participating.

Latest progress: Security moves from monitoring users to monitoring agents

Pluto’s product is built around the idea that companies need security tools that pay attention to what AI agents are doing in real time, in addition to tracking what and how employees are building and deploying. The company says its software monitors the AI tools employees use, the skills, extensions, MCP servers, and other components those tools rely on, as well as the apps and agents being created.

To do that, Pluto connects to endpoint security and device management systems and can deploy its own sensors through them or directly onto devices. It gathers information including prompts, commands, running processes, permissions and users’ previous activity. The company says it uses lightweight models on endpoints to help assess what an agent is trying to do.

The distinguishing claim is real-time intervention. If an agent attempts to gain permissions beyond what a user intended, Pluto says the system can stop the action or add instructions into the session so the agent asks for confirmation. Bahat framed this as a shift in security scope: “We’re moving from user behavior to agent behavior.”

Current stage: Early market, but with a visible risk pattern

Bahat said the biggest risks are differentiated by the mindset of the chief information security officer and how willing the organization is to adopt AI, but risks are still present. Pluto’s data suggests the problem is already measurable. Bahat said Pluto found malicious activity in every proof-of-concept assessment it conducted, including extension packages or skills that were under active live attacks during the assessment.

The company’s free platform, Plutonium, launched in April, lets anyone check risks associated with publicly available AI skills, connectors and add-ons, and includes an MCP scanner and a catalog of verified components. Bahat said thousands of security professionals use Plutonium, and 70% of Pluto’s sales pipeline now comes from inbound interest.

The new capital will be used to develop the product, expand security research and grow the company’s presence in the US. Pluto currently has 40 employees in the US and Israel. Its position now is less that of a general-purpose security vendor and more a specialized layer for enterprise AI security: tracking not only what employees deploy, but what AI agents do while they are running.