Key facts
- Pluto Security raised $42 million in funding to address enterprise security risks from AI tool adoption.
- The startup's platform monitors AI tools, extensions, and agents to identify risky components and enforce security policies.
- Shahar Bahat, CEO of Pluto Security, stated that 60% of detected risks come from tools coded by non-developers, particularly in finance, marketing, and legal departments.
- Pluto Security has over 30 enterprise customers, including Oscar Health, Workato, Sixt, and AlphaSense.
- The company's software can intervene in real-time if an AI agent attempts to gain unauthorized permissions.
Pluto Security has emerged from stealth with $42 million in funding to address the growing security concerns businesses face as employees increasingly adopt AI tools. The startup's platform is designed to monitor and control the use of AI agents and applications within enterprise environments, aiming to mitigate risks that traditional security software may not adequately cover.
According to Shahar Bahat, CEO and co-founder of Pluto Security, new AI tools can appear within companies' systems in as little as two hours. She highlighted that approximately 60% of the risks Pluto detects stem from AI tools developed by non-technical employees, with finance departments being the largest source of these vulnerabilities, followed by marketing and legal teams. Developers ranked fourth in terms of risk creation.
Pluto's technology aims to provide companies with visibility, risk analysis, and control over employee AI tool usage. The company reported starting sales in April and has already achieved over $2 million in annual recurring revenue from more than 30 enterprise customers, including Oscar Health, Workato, Sixt, and AlphaSense. The funding comprises an $8.5 million seed round led by TLV Partners and a $34 million Series A round led by Jump Capital, with participation from Armis founders, Skinos, and Ansa Capital.
Bahat noted that in every proof-of-concept engagement, Pluto has found "malicious stuff," including active live attacks within extension packages or skills. The company's core strategy is to secure AI environments by monitoring AI agents' real-time activities and employee-created applications. Pluto's software tracks AI tools, extensions, MCP servers, and other components, identifying risky elements and enforcing policies without impeding employee use.
The system connects to endpoint security and device management systems, gathering data such as prompts, commands, and user activity. It employs lightweight models on endpoints to assess agent intentions. A key feature is the ability to intervene while an agent is active, for instance, by stopping actions that exceed intended permissions or prompting agents to seek user confirmation. Pluto also offers a free platform called Plutonium, which allows users to check risks associated with publicly available AI skills and connectors, serving as a feedback source and customer acquisition channel.