Pluto Security Secures $42M to Tackle AI-Driven Enterprise Risk

The speed of AI integration is leaving traditional security frameworks behind. Bahat notes that new AI tools often appear within corporate environments just two hours after release, creating a shadow IT landscape where 60% of detected risks originate outside the developer pool. Finance teams are currently the leading source of these vulnerabilities, followed by marketing and legal departments. In one instance, a Fortune 500 finance employee created an internal app to manage customer churn, inadvertently leaving sensitive data exposed to the public internet.

Pluto, which exited stealth in April, has already surpassed $2 million in annual recurring revenue with a roster of clients including Oscar Health, Workato, and Sixt. Its platform integrates with existing endpoint security systems to monitor prompts, permissions, and agent behavior in real time. Unlike passive monitoring tools, Pluto can intervene mid-session, injecting context or forcing an agent to seek user confirmation if it attempts to exceed its intended scope.

To drive adoption, the company launched Plutonium, a free portal that allows security professionals to scan public AI skills and connectors for risks. This community-led approach currently generates a significant portion of the startup's sales pipeline. With a total of $42 million in seed and Series A funding from investors including TLV Partners and Jump Capital, the company intends to scale its research operations and expand its footprint across the U.S. and Israel.