Pluto Security came out of stealth on Oct 13 with $42 million in total funding. The latest round, about $34 million, was led by Jump Capital, and TLV Partners led the seed. Valuation: Undisclosed (per TNW). TNW also lists Skinos, AlphaDrive Ventures, Ansa Capital, MTF and Ariel Maislos among investors, plus angels including Armis co-founders Yevgeny Dibrov and Nadir Izrael and Descope's Slavik Markovich. TNW notes TechCrunch reported the news first.
What Pluto actually secures. Pluto calls it the AI workspace: everything employees now build and run with tools like Claude Code, Codex, Cowork and Lovable, including the agents, apps and automations that come out the other end. The product sits on the endpoint and covers four layers the company names on its site: tool and agent sprawl, runtime execution, the AI supply chain (skills, plugins, extensions, packages, MCP servers, models, hooks), and the artifacts employees ship (Pluto Security). Security teams can block a malicious skill, restrict an agent action, or stop an agent from touching credentials or sensitive data without killing the whole tool (per TNW).
Traction, as the company tells it. Per Pluto's launch announcement, it has reached multi-million-dollar ARR, secures more than 1 million endpoints, and has more than 40 enterprise customers, naming Oscar Health, Workato, Sixt, AlphaSense and Fortune 500 organizations. CEO Shahar Bahat's launch post puts endpoints above 1.5 million. TechCrunch, which interviewed Bahat, reported a narrower snapshot: past $2M in ARR and 30+ enterprise customers since sales began in April. Headcount is above 50 across the U.S. and Israel. None of that is audited, and exact ARR: Undisclosed.
The team. CEO Shahar Bahat held senior security roles at Microsoft and Palo Alto Networks. Co-founder Tal Ofer Regev was VP of R&D at Palo Alto Networks, and Gil Maman spent more than six years in technical roles in Israeli military intelligence (per TNW). That's a Bridgecrew and Prisma Cloud lineage, which matters because Bridgecrew grew on free open-source tooling (Checkov) that developers pulled in themselves.
Why buyers should care. The MCP server or skill an engineer installs on Tuesday afternoon is a supply chain dependency with shell access, and most shops have no inventory of them. Jump Capital's thesis leans on distribution as much as product: Plutonium, Pluto's free AI supply chain risk catalog, is driving most of its pipeline inbound, per Jump partner Saaya Pal (per TNW). The fight ahead is crowded, with browser security, EDR vendors and the AI gateway crowd all reaching for the same endpoint. Pluto's bet is that the endpoint, where the agent actually executes, is the right control point. Worth a pilot if your developers are already living in agentic coding tools and you can't answer what's installed.