Pluto Security Lands 40 Enterprise Customers Securing AI Builders

The Tel Aviv startup, founded by Palo Alto Networks veterans, sells a security layer for the AI agents and apps employees build without asking.

About Pluto Security

Published

The prompt was simple: automate the weekly sales report. An employee, tired of the manual grind, found a no-code agent builder, connected it to the CRM and a data warehouse, and told it to run every Monday. It worked. It also created a new, unmonitored data pipeline, a set of API keys with broad permissions, and an AI model with access to sensitive customer information. The security team found out weeks later, not from their own logs, but from a question in a Slack channel.

This is the moment Pluto Security is built for. The Tel Aviv-founded company, which emerged from stealth in October 2026 with $42 million in total funding, sells an AI workspace security platform [TechCrunch, October 2026]. Its product is less about protecting a company from external AI threats and more about giving internal security teams a map to the AI tools, agents, and applications their own employees are already using and building. The company reports securing more than 1 million endpoints and serving over 40 enterprise customers, including Oscar Health, Workato, and Sixt [Calcalist Tech, October 2026] [daily.dev].

Mapping the Unseen AI Workspace

Pluto’s wedge is visibility. The platform is designed to scan endpoints for AI activity, cataloging everything from coding assistants and no-code builders to autonomous agents and Model Context Protocol servers [Tokenpost]. It analyzes prompts, commands, running processes, and permissions to build a contextual risk profile. The goal is to answer the question security leaders have been asking since generative AI exploded: what is running, where, and with access to what?

This is a shift from securing sanctioned, IT-procured software to securing a dynamic, user-driven environment. As CEO Shahar Bahat noted in an interview, customer tools in this space can change every few months [Breaking Through in Cybersecurity Marketing]. Pluto’s response is a platform that attempts to keep up, offering real-time enforcement and guardrails after it has provided the initial map.

The Team and the Traction

The founding team brings a blend of security pedigree and operational experience. CEO Shahar Bahat and CTO Gil Maman are both veterans of Palo Alto Networks, with Maman’s background also including Microsoft and Israel’s Unit 8200 [TechCrunch, October 2026] [lesechos-comfi.lesechos.fr]. CPO Tal Ofer Regev rounds out the trio. Their collective resume, which also landed Bahat and Maman on the Forbes Israel 30 Under 30 list, provided a credible foundation for investors confronting a novel security category [Dennis Zagiansky - Brizz | LinkedIn].

Traction, at least as reported publicly, has been rapid. The company began selling in April 2026 and by October claimed to have exceeded $2 million in annual recurring revenue with more than 30 enterprise customers [TechCrunch, October 2026]. The funding history shows investors buying into the early momentum.

Date Round Amount Lead Investor
2025 Seed $8.5 Million TLV Partners
October 2026 Series A $34 Million Jump Capital

Other backers include cybersecurity angels like Armis founders Nadir Izrael and Yevgeny Dibrov, along with Skinos and Ansa Capital [TechCrunch, October 2026]. The $34 million Series A, led by Jump Capital, suggests a belief that Pluto is defining a category rather than merely participating in one.

The Free Catalog and the Guardrails

A key part of Pluto’s strategy is its free service, Plutonium. This functions as a public catalog and scanner for AI skills, connectors, and add-ons, allowing developers and security teams to assess components before they are deployed internally [Tokenpost]. It’s a classic land-and-expand motion: establish Pluto as the source of truth for what’s safe in the open ecosystem, then sell the platform that manages the private, internal usage.

The paid platform then layers on the controls. It aims to protect what Pluto calls "every layer of the AI atmosphere," from the tools themselves to their supply chains and the runtime artifacts they produce [pluto.security]. For a security team, the value proposition is turning a sprawling, shadow IT problem for AI into a manageable surface with defined policies.

The Inevitable Friction Points

Pluto’s bet is ambitious, and its path is lined with specific, credible challenges. The company is not just selling software; it is asking security teams to adopt a new paradigm of continuous monitoring for a fluid attack surface. The risks are less about competition,no direct competitors are named in available sources,and more about execution and market readiness.

  • The adoption ceiling. The product’s complexity must match the sophistication of the buyer. A platform that offers deep, contextual risk analysis for AI workflows is inherently powerful, but also potentially overwhelming for organizations still drafting their basic AI usage policies. Pluto must navigate the gap between early-adopter security teams and the broader market.
  • The velocity of change. The company’s own messaging acknowledges that the tools they secure evolve quarterly. Building a platform that can reliably detect, classify, and govern a fast-morphing set of applications is a formidable technical challenge. Any lag in detection creates a window of vulnerability.
  • The proof of ROI. With multi-million-dollar ARR claimed in less than a year, Pluto has convinced a first wave of customers [NewsBlaze News]. The next hurdle is proving tangible risk reduction and operational savings at scale to justify expansion within the Fortune 500 and secure those critical seven-figure deals.

Pluto’s answer to these challenges is its team’s enterprise security experience and its focus on starting with visibility. You cannot govern what you cannot see. By making the unseen seen first, Pluto aims to create an indispensable map, making the subsequent sale of guardrails a logical, necessary next step.

What to Watch in the Next Twelve Months

The coming year will test whether Pluto can transition from a promising point solution for AI tool visibility to the central command post for AI workspace security. Key milestones will be landing a flagship Fortune 500 customer cited in their claims, expanding the integrations within its Market Space platform for secure components, and likely preparing the ground for a later-stage funding round as it scales its sales and R&D teams [Tal Ofer Regev ☄️ - Pluto Security | LinkedIn].

The cultural question Pluto is implicitly answering is a profound one for the modern enterprise: who gets to build? For years, the answer was a centralized IT or engineering team. Then came citizen development and no-code tools. Now, with AI, the ability to create powerful, agentic software is diffusing further and faster than any security policy can track. Pluto is not trying to stop that diffusion. Instead, it is building the security layer that makes this new, chaotic, and incredibly productive reality permissible. It is an attempt to let the building continue, but with the lights turned on.

Sources

  1. [TechCrunch, October 2026] Pluto Security raises $42M as AI gives enterprise security teams a new headache | https://techcrunch.com/2026/10/13/pluto-security-raises-42m-as-ai-gives-enterprise-security-teams-a-new-headache/
  2. [Calcalist Tech, October 2026] Palo Alto veterans’ Pluto Security emerges from stealth with $42 million to secure employee-built AI tools | https://www.calcalistech.com/ctechnews/article/hjf4d1himx
  3. [Tokenpost] Pluto Security monitors AI tools and supply chains | https://www.tokenpost.com/news/business/31386
  4. [Breaking Through in Cybersecurity Marketing] Interview with Shahar Bahat on AI security | https://www.iheart.com/podcast/269-breaking-through-in-cybers-146483116/
  5. [lesechos-comfi.lesechos.fr] Pluto Security emerges from stealth with $42M in funding for AI workspace protection | https://lesechos-comfi.lesechos.fr/press-release/pluto-security-emerges-from-stealth-with-42m-in-funding-for-ai-workspace-protection-v9nMIzDuJEt
  6. [daily.dev] Pluto Security customer list includes Oscar Health, Workato, Sixt, and AlphaSense | https://daily.dev
  7. [NewsBlaze News] Pluto Security reaches multi-million-dollar ARR | https://newsblaze.com
  8. [pluto.security] Pluto Security product overview | https://pluto.security/
  9. [Tal Ofer Regev ☄️ - Pluto Security | LinkedIn] Launch of Market Space platform | https://www.linkedin.com/in/tal-ofer-regev/
  10. [Dennis Zagiansky - Brizz | LinkedIn] Forbes Israel 30 Under 30 mention | https://www.linkedin.com/in/dennis-zagiansky-531992161/

Read on Startuply.vc