Pluto Security has emerged from stealth with $42 million in funding and a bet that conventional endpoint tools cannot fully govern AI agents. The startup says it has already passed $2 million in annual recurring revenue and signed more than 30 enterprise customers since it began selling in April.
The funding includes an $8.5 million seed round led by TLV Partners and a $34 million Series A led by Jump Capital. Pluto named Oscar Health, Workato, Sixt and AlphaSense among its customers and said it has 40 employees in the United States and Israel.
The risk is moving from users to agents
Traditional security software watches files, identities, network traffic and employee behavior. AI agents add a layer that can choose tools, call connectors and request permissions while completing a task. A harmless prompt can become risky if an agent reaches sensitive data or executes a command the user did not expect.
Pluto says it monitors AI tools, extensions, Model Context Protocol servers and employee-built applications. Its endpoint models examine prompts, commands, running processes, permissions and prior activity. The system can stop an action or inject instructions that require the agent to ask for confirmation.
The product's value depends on context. Blocking every new tool would undermine the productivity companies seek from AI. Allowing every action would create an expanding attack surface. Pluto is selling a control layer that tries to distinguish between the two in real time.
Traction is promising but self-reported
Chief executive Shahar Bahat told TechCrunch that about 60% of the risks Pluto detects arise in tools built by non-developers, with finance teams the largest source. She also said every proof of concept uncovered malicious activity. These figures are company claims from a young customer base, not an independent measurement of the wider market.
Pluto's free Plutonium catalog gives the company a distribution channel and a public sample of its approach. The catalog examines connectors, plugins and skills for capabilities such as persistent tokens, command execution, data sharing and deletion.
For cybersecurity investors, the round is evidence that AI governance is becoming a distinct spending category. It is not yet proof that Pluto will win it. Renewal rates, customer expansion and the share of alerts that lead to useful intervention will matter more than the funding headline.