Pluto Security raises $42M as AI gives enterprise security teams a new headache
The problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies now have new, gaping security holes in their systems or, at least, will soon.
Pluto Security raises $42M as AI gives enterprise security teams a new headache | TechCrunch
Disrupt 2026 has officially begun. Grab your pass now to be at the center of the startup epicenter. REGISTER NOW
Disrupt doors open Oct. 13. Get your pass and bring someone with you at 50% off. REGISTER NOW.
Pluto Security raises $42M as AI gives enterprise security teams a new headache
10:18 AM PDT · October 13, 2026
The problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies now have new, gaping security holes in their systems or, at least, will soon.
Illustrating the pace of AI tool adoption within enterprises driving such fears, Shahar Bahat, CEO and co-founder of Pluto Security, says a newly announced AI tool can show up inside companies environment within a mere two hours of its release. And about 60% of the risks her company detects across its customer base are in tools vibe-coded by non-developers: Finance departments are the biggest source of such risks, she told TechCrunch, followed by marketing and legal teams. Developers rank fourth, she said.
Her startups tools apparently found a vibe-coded app made by a finance employee at a Fortune 500 company to manage customer information and churn, but the app was left exposed to the internet.
Pluto, fresh out of stealth with $42 million in funding, is the latest in a new crop of security startups that have quickly sprung up to help companies address those fears gaps, and all of them are raising big money from investors on the back of the conviction that only using existing security software to monitor and control AI tools, connectors, and usage is a square-peg-round-hole approach.
Bahat tells TechCrunch her startup started selling only in April and has already found some takers for its tech, which helps companies gain context, risk analysis, visibility, and control over how their employees use AI tools. She said Pluto began selling in April and has already crossed $2 million in annual recurring revenue, with more than 30 enterprise customers, including Oscar Health, Workato, Sixt, and AlphaSense.
Plutos funding spans an $8.5 million seed round led by TLV Partners, with cybersecurity firm Armis founders also investing. The company recently raised a Series A of $34 million led by Jump Capital, with Skinos (Check Point co-founder Shlomo Kramers venture firm), Ansa Capital, and other angel investors participating.
Thats decent traction for a young startup, though not unique in this AI era. But it may be because the breadth of the risk isnt isolated to large tech companies that lead the AI adoption charts.
When I asked Bahat where shes seeing the biggest risks, she said the issues are differentiated by the mindset of the CISO and how willing the organization is to adopt AI, but there were risks to be found anyway.
In general, Ill say there was not one POC in which we entered and didnt find malicious stuff, she said. Whether those are extension packages or skills — some of them had active live attacks while we did the POC. Which again, for me, product-wise is amazing. For the companies, its not very good.
Plutos entire bet is that securing such environments will require security tools to pay attention to what AI agents are doing in real time, in addition to keeping track of what and how employees are building and deploying.
Were moving from user behavior to agent behavior, Bahat said.
In line with that vision, the startups software monitors the AI tools employees use, the skills, extensions, MCP servers, and other components those tools rely on, as well as the apps and agents being created. The company says it can identify risky components, spot potentially dangerous agent activity, and enforce security policies without stopping employees from using or making AI tools.
To do all that, Pluto connects to endpoint security and device management systems and can deploy its own sensors through them or directly onto devices. It gathers information, including prompts, commands, running processes, permissions, and users previous activity, and uses its own lightweight models on endpoints to help assess what an agent is trying to do.
What stood out is that Plutos system can intervene while an agent is working, Bahat said. If an agent tries to gain permissions beyond what a user intended, for example, the system can stop the action or add instructions into the session that prompt the agent to ask for confirmation.
We can inject context back to the session, and this way I can change how the agent is working, Bahat explained.
The startup also takes an unusual approach to finding customers. In April, it launched Plutonium, a free platform that lets anyone check risks associated with publicly available AI skills, connectors, and add-ons. Theres also an MCP scanner and a catalog of verified components. Bahat claims thousands of security professionals use Plutonium and that the community around it has become an important source of feedback and prospective customers.
She said 70% of Plutos sales pipeline now comes from inbound interest, although she didnt break down how much of that comes directly through Plutonium.
Pluto said it plans to invest the new capital in developing its product, expanding its security research efforts, and growing its presence in the U.S. It has 40 employees in the U.S. and Israel.
AI, AI agents, ai security, Fundraising, jump capital, Security, TLV Partners
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Ram is a financial and tech reporter and editor. He covered North American and European M&A, equity, regulatory news and debt markets at Reuters and Acuris Global, and has also written about travel, tourism, entertainment and books.
You can contact or verify outreach from Ram by emailing [emailprotected].
The Disrupt experience is meant to be shared. Get your pass and bring a colleague, partner, or peer at 50% off. Cover more ground by making connections, building momentum, and discovering what’s next in the startup ecosystem.
Elon Musk intensifies attack on Ambani over Starlink India launch delay
Batteries are now cheaper than natural gas turbines used at many data centers
Remember Orkut? Its founder wants to bring it back
US bars Microsoft, Adobe, and major IT firms from green card program for skilled foreign workers
Elon Musk questions Ambani’s influence as Starlink India launch stalls
Cal AIs 19-year-old founder just raised $10M for his new AI startup
Google releases a new local-first Granola competitor