The boundary between software user and software developer is becoming less distinct. AI-powered tools now allow employees to create applications, automate business processes, and build agents without following traditional development workflows. For enterprise security teams, this shift means protecting not only the software an organization deploys but also the tools, dependencies, and automated systems employees introduce themselves.
The growing importance of this challenge has attracted attention from the technology press. TechCrunch first reported on a company entering this market with an established enterprise footprint: Pluto Security, which has announced its emergence from stealth with $42 million in total funding, multi-million-dollar annual recurring revenue, and more than 1 million endpoints secured globally.
The AI Workspace Becomes a Security Priority
Led by CEO and co-founder Shahar Bahat, Pluto is building a security layer for the AI workspace. Its platform gives enterprises visibility, contextual risk assessment, and real-time control across the AI tools employees use, the supply chain surrounding those tools, and the applications, agents, and automations they create.
The company’s approach reflects a change in how work gets done. Tools such as Claude Code, Codex, Cowork, Lovable, and Base44 make it possible for employees outside conventional engineering teams to build software and automate tasks.
Those capabilities can also introduce dependencies that organizations need to evaluate. Pluto identifies skills, extensions, packages, MCPs, models, and other components as parts of the AI supply chain. According to the company, employees across its customer base use hundreds of supply chain components while building thousands of applications.
For security teams, the challenge is to understand the activity surrounding these tools without preventing employees from using them productively.
Security Controls Designed for Real-World Use
Pluto combines endpoint visibility, contextual analysis, and real-time enforcement. The company says its platform can block malicious skills, restrict unsafe agent actions, and prevent access to sensitive data or credentials without stopping legitimate work.
Bahat said the company was designed around understanding employee intent rather than relying entirely on restrictive controls.
“Security has traditionally been built around stopping things, but that model breaks down when the business is moving faster than security can evaluate every new tool,” she said.
She added that Pluto’s approach is to understand what users are trying to accomplish and give security teams the context to enable that work safely. This philosophy, she explained, informs both the company’s product and its engagement with the security community.
From Research to Enterprise Adoption
Pluto’s strategy also includes free resources that help security professionals evaluate emerging risks. Its Plutonium hub, powered by proprietary RisksDB, focuses on AI supply chain security and helps practitioners assess components such as skills and extensions.
Pluto says thousands of security professionals are already using and contributing to the resource. The company combines this community activity with security research and its commercial platform to support an inbound go-to-market strategy.
Saaya Pal, partner at Jump Capital, highlighted the approach when discussing the investment.
“Pluto has built a fundamentally different GTM engine for cybersecurity,” Pal said. “The clearest example is Plutonium, their AI risk database — there was no good public data on what AI tools are actually doing inside enterprises, so the team built it and gave part of it away.”
Pal said hundreds of practitioners use the resource every week and that most of Pluto’s pipeline now comes inbound. Jump Capital led the company’s latest financing round, an approximately $34 million investment that brings total funding to $42 million. The seed round was led by TLV Partners, with participation from additional investors.
A Growing Enterprise Customer Base
Pluto reports more than 40 enterprise customers, including Oscar Health, Workato, Sixt, AlphaSense, and Fortune 500 organizations. The company has grown to more than 50 employees across the United States and Israel.
Bahat founded Pluto alongside Tal Ofer Regev and Gil Maman. The founders bring experience spanning Microsoft, Palo Alto Networks, Bridgecrew, and Israel’s Unit 8200.
Bahat previously held senior cybersecurity leadership roles at Microsoft and Palo Alto Networks and is a Forbes 30 Under 30 honoree. Regev previously served as vice president of research and development at Palo Alto Networks, where he managed more than 150 people. Maman spent more than six years in Israeli Military Intelligence in technical leadership roles covering advanced cyber research and security engineering.
Building Security for the Next Generation of Work
Pluto plans to use its new capital to continue investing in product development, research, and U.S. expansion as the AI supply chain evolves.
Rona Segev, co-founder and managing partner at TLV Partners, said the company’s approach gives security teams a way to understand AI activity and respond with precision rather than simply block innovation.
As AI tools become part of everyday enterprise work, security teams will need to assess an expanding mix of applications, dependencies, and automated actions. Pluto’s strategy is built around helping organizations manage those risks while allowing employees to continue building and experimenting with AI.
John Kevin Hao is a news and feature writer covering cybersecurity, technology, and business targeted for professional audiences.