Pluto Security emerges from stealth with $34 million Series A led by Jump Capital
The company, founded in 2025 by veterans of Microsoft and Palo Alto Networks, claims more than $2 million in annual recurring revenue after barely half a year of sales — and that roughly 60 percent of detected risks come from apps built by employees without developer backgrounds.
The News
AI security startup Pluto Security came out of stealth on October 13, 2026, with $42 million in total funding. The capital consists of an $8.5 million seed round led by TLV Partners and a $34 million Series A led by Jump Capital, with participation from Skinos, Ansa Capital and AlphaDrive Ventures, along with angel investors including the founders of the security companies Armis and Descope. The company is not disclosing a valuation for the round.
The funding announcement came alongside the first commercial figures. According to CEO Shahar Bahat, Pluto began selling in April 2026 and has already passed $2 million in annual recurring revenue with more than 30 enterprise customers, among them Oscar Health, Workato, Sixt and AlphaSense. Other outlets, including Beinsure and ynet, report "over 40" enterprise customers, several of them Fortune 500 companies. The discrepancy is unresolved — both figures come from the company's own statements, and neither has been independently verified.
How the Product Works
Pluto's underlying premise is that enterprises' security tools cannot see what happens when employees themselves adopt and build AI tools. The company's technology monitors AI tools, skills, extensions and MCP servers — that is, both ready-made services that employees connect to and small applications they build themselves.
Technically, Pluto connects to existing endpoint security and device management (MDM), and can then deploy its own sensors through those systems or directly on devices. The company uses lightweight models that run locally on the device. What distinguishes Pluto from pure monitoring is the ability to intervene in live agent sessions — for example, by inserting instructions that force the agent to ask for confirmation before performing an action.
Bahat describes the approach as intent-based: "We took a different approach from the start: understand what users are trying to accomplish, understand their intent, and give security teams the context needed to enable that work safely, rather than just blocking it," she told ynet.
The Traction Signals — and How Much They Are Worth
All of the commercial figures in this story are the company's own claims relayed through secondary coverage, not independently verified facts. That applies especially to these assertions:
- Roughly 60 percent of detected security risks reportedly stem, according to Pluto, from applications built by employees without traditional software development backgrounds. Finance departments account for the largest share, followed by marketing and legal.
- New AI tools can appear in customer environments within about two hours of being announced, Bahat claims to TechCrunch.
- In every single proof-of-concept, Pluto says it has found malicious components, including ongoing attacks.
The company points to one concrete example: A finance employee at a Fortune 500 company built an application to handle customer information and customer churn. The application later turned out to be exposed to the public internet. The company is not named in the sources.
Taken together, these claims form Pluto's core pitch: the real risk landscape in enterprises lies not necessarily in the sanctioned AI tools IT approves, but in the apps and agents employees build on their own. But the 60 percent figure is based on Pluto's own customer base and methodology, and cannot be readily generalized to the industry as a whole.
Who Is Behind It, and How They Sell
Pluto was founded in 2025 by Shahar Bahat (CEO), Tal Ofer Regev (Chief Product Officer) and Gil Maman (CTO). The founders have backgrounds at Microsoft, Palo Alto Networks, Bridgecrew and Unit 8200. The company operates from New York and Israel and reports roughly 40 employees across the two countries, while Beinsure writes "over 50" — this discrepancy, too, remains unresolved.
The sales strategy combines a free product with direct sales. In April, Pluto launched Plutonium, a free platform for AI supply chain risk built on the company's RisksDB database. Bahat claims thousands of security professionals use it, and that 70 percent of the sales pipeline now comes from inbound inquiries — but she did not say what share of that pipeline comes directly via Plutonium.
A Wave of AI Security Startups
TechCrunch places Pluto in a new wave of security startups that have grown rapidly to address enterprises' fears about AI tools, connections and usage patterns — and that are raising large investments on the belief that existing security software is the wrong tool for monitoring AI usage. Pluto's angle on this is that the monitoring must go all the way down to the endpoint and all the way out to the unofficial tools employees adopt.
Open Questions
A number of matters remain uncertain after the launch. The valuation of the round is not disclosed. None of the commercial metrics are independently confirmed — all come from the company itself via secondary coverage. The customer count (over 30 or over 40) and the employee count (roughly 40 or over 50) vary between the sources without explanation. Whether Pluto's claim that every proof-of-concept uncovers malicious components reflects a real threat landscape or a selective sales narrative cannot be determined from the available sources. The same goes for the claim about two-hour adoption of new AI tools. And not least: whether employee-built apps actually constitute the main risk in enterprises, or only the main risk that Pluto's tool is built to find, is a question the preliminary figures alone cannot answer.