Wednesday 14 October 2026
Afternoon Edition
ZOTPAPER

News without the noise

ZOTPAPER
Security

Pluto Security raises $42M as enterprise AI tools create new security risks

Startup says non-developers are building vulnerable apps with AI, finance teams are the biggest source of risk

By LineZotpaper
Published
Read Time2 min
Sources2 outlets
Pluto Security has emerged from stealth with $42 million in funding to help companies manage the security risks posed by employees using AI tools. The startup says newly released AI tools can appear inside corporate environments within hours, and about 60 per cent of risks it detects come from applications built by non-developers, often using so-called 'vibe coding' practices.

The Israeli startup, which began selling only in April, has already crossed $2 million in annual recurring revenue and signed more than 30 enterprise customers, including Oscar Health, Workato, Sixt and AlphaSense. Its platform provides visibility, risk analysis and control over how employees use AI tools, connectors and extensions.

CEO and co-founder Shahar Bahat said finance departments are the biggest source of risk, followed by marketing and legal teams, with developers ranking fourth. She told TechCrunch that in one case, a finance employee at a Fortune 500 company built an app to manage customer churn data, but left it exposed to the internet.

"In general, I'll say there was not one proof of concept in which we entered and didn't find malicious stuff," Bahat said, referring to extension packages and skills that had active exploits.

The funding comprises an $8.5 million seed round led by TLV Partners, with participation from the founders of cybersecurity firm Armis, and a $34 million Series A led by Jump Capital, joined by Skinos (Check Point co-founder Shlomo Kramer's venture firm), Ansa Capital and angel investors.

Pluto is among a wave of startups raising significant capital to address security gaps that traditional software is ill-equipped to handle, as employees rapidly adopt generative AI tools without IT oversight.

§

Analysis

Why This Matters

  • The speed of AI tool adoption (within two hours of release) means traditional security approval processes cannot keep pace.
  • Non-developers building production-facing apps with AI introduces risks that existing security tools were not designed to catch.
  • The fact that 60 per cent of detected risks come from departments outside IT suggests a systemic gap in enterprise security.

Background

Enterprise adoption of generative AI has surged over the past year, with employees using everything from chatbots to code assistants. This has created a new category of 'shadow IT' security risk: AI tools and applications built or configured by employees without security review. Traditional security software, designed for known applications and approved workflows, struggles to monitor these ad-hoc creations. A crop of startups has emerged to fill this gap, raising substantial venture capital.

Key Perspectives

Chief Information Security Officers (CISOs): Face a growing blind spot as AI tools proliferate faster than policies can adapt. They need new tools for visibility and control. Non-technical employees: Finance, marketing and legal teams are using AI to build custom tools for their workflows, often without understanding security implications. They prioritise speed and functionality. Investors: See a large market opportunity. Pluto's rapid revenue growth and the prevalence of risks found in customer environments suggest strong demand for specialised AI security solutions.

What to Watch

  • Whether Pluto and its competitors can maintain growth as enterprises update their security policies.
  • How traditional security vendors (e.g., CrowdStrike, Palo Alto Networks) respond with AI-specific features.
  • Regulatory developments that may mandate AI governance and security controls, potentially accelerating adoption.

Sources

Zotpaper

Written by software from the reporting listed above, scored by an automated standards desk, and published without a person reading it first. If something here is wrong, tell the editor and it will be put right.

How we workSubscribe