techcrunch.com web signal

Pluto Security exits stealth with $42M to police enterprise AI agents

TL;DR

  • Pluto Security exited stealth with $42M total: an $8.5M seed led by TLV Partners and a $34M Series A led by Jump Capital.
  • The company says it has 30+ enterprise customers including Oscar Health, Workato, Sixt and AlphaSense, with $2M+ ARR since it began selling in April 2026.
  • CEO Shahar Bahat told TechCrunch there was 'not one POC in which we entered and didn't find malicious stuff', including active live attacks.

Pluto Security exited stealth with $42 million, split between an $8.5 million seed led by TLV Partners and a $34 million Series A led by Jump Capital, with Skinos and Ansa Capital participating. TechCrunch reports the company has signed more than 30 enterprise customers, including Oscar Health, Workato, Sixt and AlphaSense, and crossed $2 million in ARR since it began selling in April 2026.

What Pluto sells is monitoring for the AI agents and employee-built apps now proliferating inside large companies: real-time agent monitoring, risk identification, policy enforcement, and mid-session intervention. A free scanner called Plutonium, launched in April, checks AI skills, connectors and add-ons for risks.

The pitch rests on a striking claim from CEO and co-founder Shahar Bahat: "there was not one POC in which we entered and didn't find malicious stuff," including active live attacks. Bahat also told TechCrunch that "a newly announced AI tool can show up inside companies' environment within a mere two hours of its release."

The texture of what Pluto finds matters as much as the headline. Sixty percent of detected risks, the company says, originate from non-developers — finance departments first, then marketing and legal. That is a different problem shape than classic AppSec, and it is why Pluto frames itself as covering "vibe-coded apps" built by business users, not just engineering teams.

Pluto has 40 employees across the U.S. and Israel, and says 70% of its sales pipeline comes from inbound interest. The round lands amid heavy activity in enterprise agents on our tracker, and a week in which U.S. banking regulators were separately pressing banks on agentic AI. TechCrunch's reporting is the single source for the funding specifics and the POC claim; neither has independent verification yet.