Pluto Security Exits Stealth With $42M to Tackle AI Risks

Cybersecurity startup Pluto Security has emerged from stealth with $42 million in total funding, according to a TechCrunch report, targeting enterprise security blind spots created by employee-built artificial intelligence tools. The funding haul comprises an $8.5 million seed round led by TLV Partners and a $34 million Series A led by Jump Capital.

"Security has traditionally been built around stopping things, but that model breaks down when the business is moving faster than security can evaluate every new tool," said Shahar Bahat, CEO and co-founder of Pluto Security, in a statement regarding the launch.

Revenue Traction and Enterprise Customers

Since beginning commercial sales for its software in April, the company has scaled its business. Pluto Security has surpassed $2 million in annual recurring revenue. The startup's customer base spans more than 30 to 40 enterprise clients, including Oscar Health, Workato, Sixt, and AlphaSense.

The growth highlights how corporate security teams are working to maintain visibility as rank-and-file workers adopt generative artificial intelligence applications. These unvetted deployments frequently bypass traditional IT procurement channels, creating data governance and compliance vulnerabilities.

Targeting 'Vibe-Coded' AI Risks

According to data from Pluto Security, approximately 60% of the security risks detected across its customer base originate from tools "vibe-coded" by non-developer employees. Within corporate structures, finance departments represent the single largest source of these improvised applications.

"Pluto has built a different GTM engine for cybersecurity. The clearest example is Plutonium, their AI risk database, because there was no good public data on what AI tools are actually doing inside enterprises, so the team built it and gave part of it away," said Saaya Pal, partner at Jump Capital, in a statement.

The Shift in Enterprise Cybersecurity

The emergence of Pluto Security points to a market transformation in how venture capital investors evaluate early-stage cybersecurity startups. Traditional security architectures focus heavily on perimeter defense and endpoint protection, while modern startups are increasingly compelled to address internal software creation and shadow artificial intelligence usage across enterprise business units.