Pluto Security Raises $42 Million as AI Brings New Headaches for Enterprise Security Teams
Pluto Security has raised $42 million from Jump Capital, TLV Partners, Ansa Capital and angel investors.
Disrupt 2026 has officially begun. Get your pass now to be in the center of the startup hub. Register now
Disrupt the doors opening on October 13th. Get your card and bring someone with you with a 50% discount. Register now.
The problem with giving everyone in the company access to AI tools is that people use them in unexpected ways. And this fact is constantly raising fears that companies now have, or at least will soon have, new security holes and gaps in their systems.
Shahr Bahat, CEO and co-founder of Pluto Security, demonstrates the speed of adoption of AI tools in enterprises, saying that a newly introduced AI tool can appear in the enterprise environment within two hours of its release. About 60 percent of the risks his company detects across its customers are related to tools coded by non-developers, he told TechCrunch: finance departments are the biggest source of such risks, followed by marketing and legal teams, he told TechCrunch. Developers are in fourth place, he said.
His startup tools allegedly found a program coded by a finance employee at a Fortune 500 company to manage customer information and diversion, but the program was exposed on the Internet.
Pluto, fresh from stealth with $42 million in funding, is the latest in a slew of security startups that have sprung up quickly to help companies bridge these fear gaps, and all of them are raising a lot of money from investors because of the belief that they're only using existing security software to monitor and control. AI tools, connectors, and usage are an approach nailed with square holes.
Bhatt tells TechCrunch his startup only started selling in April and has already found some fans for its technology, which helps companies gain context, risk analysis, visibility and control over how employees use AI tools. He said Pluto began selling in April and already exceeds $2 million in annual revenue with more than 30 enterprise customers that include Oscar Health, Workato, Sixt and AlphaSense.
Pluto's $8.5 million investment is led by TLV Partners, with the founders of cybersecurity firm Armis also investing. The company recently raised a $34 million Series A round led by Jump Capital with participation from Skinos (the investment firm of Check Point co-founder Shlomo Kramer), Ansa Capital and other angel investors.
That's a decent stretch for a young startup, though it's not unique to this era of AI. But that may be because the extent of the risk isn't isolated to the big tech companies that lead the AI adoption charts.
When I asked Bahat where he sees the biggest risks, he said that these issues vary with the mindset of the CISO and how willing the organization is to adopt AI, but that there are risks to be found nonetheless.
"Overall, I would say there was no POC that we went into and didn't find anything malicious," he said. "Whether it's add-on packs or skills — some of them had active live attacks where we were doing POCs. Which, again, to me, is amazing from a product standpoint. For enterprises, it's not so good."
Pluto's whole premise is that securing such environments requires security tools to pay attention to what AI agents are doing in real-time, in addition to tracking what and how they build and deploy employees.
"We are moving from user behavior to agent behavior," Bhatt said.
In line with this vision, the software startup monitors the AI tools used by employees, the skills, extensions, MCP servers and other components these tools rely on, as well as the programs and agents they create. The company says it can identify dangerous components, detect potentially dangerous agent activity, and enforce security policies without stopping employees from using or building AI tools.
To do all this, Pluto connects to endpoint security and device management systems and can deploy its sensors through them or directly on devices. It collects information including commands, commands, running processes, permissions, and previous user activity, and uses its "style" models on endpoints to help evaluate what an agent is trying to do.
"What stood out," Bhatt said, "is that the Pluto system can intervene while an agent is operating." For example, if an agent tries to obtain permissions beyond what a user intended, the system can stop the action or add instructions to the session that prompt the agent for confirmation.
"We can bring the context back to the meeting, and that way I can change the way the agent works," Bhatt explained.
The startup also has an unusual approach to finding customers. In April, it launched Plutonium, a free platform that allows anyone to review the risks associated with publicly available AI skills, interfaces, and plugins. There is also an MCP scanner and a catalog of approved components. Bhatt claims that thousands of security professionals use Plutonium, and the community around it has become an important source of feedback and leads.
He said that 70 percent of Pluto's sales pipeline now comes from inbound interest, though he did not elaborate on how much of that comes directly from plutonium.
Pluto said it plans to invest the new capital in product development, expanding its security research efforts and increasing its presence in the United States. The company has 40 employees in the United States and Israel.
When you make a purchase through links in our articles, we may earn a small commission. This does not affect our editorial independence.
You can contact or confirm with Ram by sending an email to [email protected].
Get 50% off a second pass The Disrupt experience is meant to be shared. Grab your pass and bring a colleague, partner or peer for 50% off. Cover more ground by building connections, building momentum, and discovering what's next in the startup ecosystem.
Elon Musk attacks Ambani over Jagmeet Singh's India Starlink launch delay
Batteries are already cheaper than the natural gas turbines used in many of Tim de Chant's data centers.
Remember Orkut? Its founder Jagmeet Singh wants to bring it back
The United States barred Microsoft, Adobe and major IT companies from the green card program for skilled foreign workers Ayesha Malik.
Elon Musk questions Ambani influence as Starlink India launches on Jagmeet Singh stands
The 19-year-old founder of Cal AI just raised $10 million for his new AI startup Julie Burt.