Pluto Security Raises $42M to Tackle Enterprise AI Agent Risks

Summary

On October 13, 2026, Pluto Security emerged from stealth with $42 million in funding: an $8.5 million seed led by TLV Partners, with Armis' founders investing, and a recent $34 million Series A led by Jump Capital, joined by Skinos, Check Point co-founder Shlomo Kramer's venture firm, Ansa Capital and angels. Since starting sales in April, Shahar Bahat's company has topped $2 million in annual recurring revenue and 30 enterprise customers, including Oscar Health, Workato, Sixt and AlphaSense. Bahat says newly released AI tools can enter corporate environments within two hours, while non-developers' vibe-coded tools generate about 60% of detected risks; finance ranks first, then marketing, legal and developers. Pluto found a Fortune 500 finance-built app managing customer and churn information exposed to the internet.

Every proof of concept found malicious components such as extensions or skills, with active attacks in some evaluations, Bahat says. Pluto argues legacy controls are insufficient as security shifts from user behavior to real-time agent behavior. Its software inventories AI tools, apps, agents, skills, extensions, MCP servers and connectors; analyzes prompts, commands, processes, permissions and prior activity via sensors deployed through endpoint security or device management systems, or directly. Lightweight endpoint models assess intent, flag risky components and behavior, enforce policy, block excess permissions or inject instructions requiring confirmation without banning AI use. Free platform Plutonium, launched in April, offers public component checks, an MCP scanner and verified catalog; Bahat says thousands use it, while inbound interest drives 70% of the sales pipeline. Pluto's 40 employees in the U.S. and Israel will expand product development, security research and U.S. operations.