Pluto Security Secures $42M to Tame AI‑Driven Enterprise Risk

Enterprise adoption of generative AI is outpacing traditional security controls. Within hours of a new model’s release, employees can embed it in workflows, often without IT oversight. Pluto Security’s platform maps every AI agent, skill, extension, and custom‑built app across the network, giving CISOs real‑time visibility into what is running, who built it, and whether it exposes data.

The startup reports that roughly 60 % of the risks it discovers stem from “vibe‑coded” applications created by non‑developers — finance, marketing, and legal teams leading the charge. In one proof‑of‑concept, Pluto uncovered a finance‑team app at a Fortune 500 firm that was publicly reachable, illustrating how quickly shadow AI can become a breach vector.

Why it matters for GPU / AI infrastructure

As GPU clusters power more inference and training workloads, the same hardware that accelerates models also expands the attack surface when employees spin up unauthorized agents. Pluto’s agent‑behavior monitoring complements existing GPU‑level safeguards by enforcing policy at the application layer, ensuring that compute resources are not hijacked by rogue AI workloads.

Since launching sales in April, Pluto has crossed $2 million ARR and signed over 30 enterprise customers, including Oscar Health, Workato, Sixt, and AlphaSense. The funding round — an $8.5 million seed led by TLV Partners and a $34 million Series A led by Jump Capital — signals strong investor confidence that AI‑specific security will become a mandatory layer in every cloud‑GPU deployment.