Pluto Security steps out of the shadows with $42 million to monitor AI agents and ‘vibe-coded’ apps in the workplace

The start-up says it has exceeded $2 million in recurring revenue since April and has found malicious components in every customer it has tested.

Pluto Security announced on October 13 that it had raised a total of $42 million: an $8.5 million seed round led by TLV Partners, with the founders of Armis, then a $34 million Series A round led by Jump Capital, with Skinos (the fund of Shlomo Kramer, co-founder of Check Point) and Ansa Capital. Marketed only since April, its solution claims more than $2 million in annual recurring revenue and about thirty customers, including Oscar Health, Workato, Sixt and AlphaSense.

The risk comes first and foremost from finance

According to CEO Shahar Bahat, a new AI tool appears in the corporate environment just two hours after its release, and about 60% of the risks detected are in tools developed by non-developers: finance comes first, ahead of marketing and legal, with developers only fourth. She says no proof of concept has been conducted without discovering malicious extensions or skills, some of which are subject to active attacks.

The software lists the AI tools used, the skills, extensions, and MCP servers they depend on, as well as the agents created in-house. It relies on endpoint security systems and small local models to evaluate in real time what an agent is trying to do, and can intervene while it is running.