Pluto Security Raises $42M to Protect Enterprises From AI Agent Risks

Quick Facts

• Pluto Security raised $42 million across an $8.5 million seed round and a $34 million Series A led by Jump Capital.
• The company has secured more than 1 million endpoints and surpassed $2 million in ARR since launching commercially in April 2026.
• About 60% of risks Pluto detects come from AI tools built by non-developers, with finance departments generating the most exposure.

Pluto Security came out of stealth on Oct. 13, announcing $42 million in funding to help enterprises monitor and control the AI agents and tools spreading through their organizations. The company launched commercially just six months ago and already counts Oscar Health, Workato, Sixt, and AlphaSense among its more than 30 enterprise customers.

The $8.5 million seed round was led by TLV Partners and included investment from the founders of cybersecurity firm Armis. Jump Capital led the $34 million Series A, with participation from Skinos, the venture firm of Check Point co-founder Shlomo Kramer, and Ansa Capital.

CEO and co-founder Shahar Bahat said the company took a different approach than traditional security vendors. "Security has traditionally been built around stopping things, but that model breaks down when the business is moving faster than security can evaluate every new tool," she said. Bahat previously held senior roles at Microsoft and Palo Alto Networks and is a Forbes 30 Under 30 honoree.

The company was founded in 2025 by Bahat, Chief Product Officer Tal Ofer Regev, and Chief Technology Officer Gil Maman. Regev previously managed more than 150 people as vice president of research and development at Palo Alto Networks. Maman spent more than six years in Israeli Military Intelligence in technical cyber and security engineering roles. Pluto now has more than 50 employees across the United States and Israel.

The platform's speed is a central selling point. A new AI tool can appear inside a company's environment within two hours of its public release, Pluto says. The company's product suite is divided into four functions: Explorer discovers AI activity, Risk Radar evaluates it against a proprietary risk database, Space Shield applies enforcement policies, and Marketspace provides a curated catalog of vetted AI add-ons.

Pluto collects prompts, commands, running processes, permissions, and user history to assess what an agent is trying to do. The system can intervene mid-session. If an agent tries to acquire permissions beyond what a user intended, Pluto can halt the action or inject instructions asking the agent to seek confirmation before proceeding.

The company's data reveals a pattern executives should watch. About 60% of the risks Pluto detects come from AI tools built by non-developers, a practice often called vibe-coding. Finance departments generate the most exposure, followed by marketing and legal teams. Developers rank fourth.

Pluto also built Plutonium, a free AI supply-chain security catalog that lets practitioners assess components such as skills, extensions, and MCP servers before adoption. Jump Capital partner Saaya Pal said hundreds of practitioners use Plutonium every week and credited it with driving most of Pluto's inbound sales pipeline. The company says 70% of its pipeline comes from inbound interest.

"They're building what we see as the next generation of endpoint security built for the agentic era, a vision that reaches well beyond any single AI use case," Jump Capital said in a statement on the investment.

Bahat said the threat is already active, not theoretical. "In general, I'll say there was not one POC in which we entered and didn't find malicious stuff," she said.

Read more: Pluto Security nabs $42M to help enterprises secure their AI agents