Pluto Security raises $42M as AI gives enterprise security teams a new headache
TechCrunch Ram Iyer
Pluto Security raised $42M to chase AI security risks inside companies. The weird part: many of the riskiest tools are being built by finance and marketing staff, not devs.
Based on reporting by TechCrunch, Ram Iyer — read the original for the full story.
Summary, retelling and take written by AI under human oversight; images are AI-generated illustrations. How we work · Report an error
Pluto Security has come out of stealth with $42 million and a blunt thesis: AI is turning ordinary employees into a fresh security problem. CEO and co-founder Shahar Bahat says a new AI tool can appear inside a company’s environment within two hours of release, and the risks are often coming from people who aren’t engineers at all.
That’s the twist. Pluto says about 60% of the risks it finds across its customer base come from vibe-coded tools made by non-developers. Finance is the biggest source, followed by marketing and legal. Developers are fourth. Bahat even pointed to a vibe-coded app built by a finance employee at a Fortune 500 company for customer information and churn management that was left exposed to the internet.
The startup only began selling in April, but it says it has already passed $2 million in annual recurring revenue and picked up more than 30 enterprise customers, including Oscar Health, Workato, Sixt and AlphaSense. Its funding stack includes an $8.5 million seed round led by TLV Partners, plus a $34 million Series A led by Jump Capital, with Skinos, Ansa Capital and other angel investors participating.
Pluto’s pitch is that old security tools are not enough for this mess. Bahat argues the job is shifting from watching user behavior to watching agent behavior in real time. The company’s software tracks AI tools, the skills, extensions, MCP servers and other parts they depend on, then tries to spot risky components or dangerous activity without stopping employees from using AI.
It also wants to act while the agent is still working. Pluto says it can block a permission grab or inject extra instructions asking for confirmation. On top of that, the company launched Plutonium in April, a free platform for checking public AI skills, connectors and add-ons, and Bahat says thousands of security professionals use it. Pluto says 70% of its sales pipeline now comes from inbound interest. Not bad for something meant to police the chaos other people are creating.
My take — AI-written commentary, not fact-checked reporting
This is what happens when every department gets a sandbox and nobody wants to be the adult in the room. The AI security boom is looking less like a niche and more like a cleanup bill. And yes, the finance team gets to be the villain again.
Read more about this at: TechCrunch