Pluto Security Lands $42M to Close AI-Era Gaps in Enterprise Systems

Pluto Security has raised $42 million to help companies find and close the security gaps that appear when employees put AI tools to work inside corporate systems. The funding round, confirmed this week, lands as security teams confront a problem they did not have three years ago: AI assistants, coding agents and third-party integrations now touch sensitive data in ways traditional controls were never built to track. Pluto's pitch is that the exposure is not theoretical. Every tool an employee connects quietly widens the attack surface, and few organizations have an inventory of where that access actually goes.

The concern is structural, not just a matter of careless users. When AI assistants are wired into email, code repositories, calendars and internal databases, they inherit the permissions of whoever installed them and often pass data through external model providers. Security researchers have spent the past two years documenting how prompt injection, over-permissioned plugins and leaked API keys can turn those connections into entry points. Most enterprise security stacks were designed to guard endpoints and networks, not autonomous agents acting on a user's behalf.

Pluto is not alone in chasing this market. Established vendors including Palo Alto Networks, CrowdStrike and Microsoft have added AI security posture features over the past 18 months, and a crop of startups now sells discovery and governance tools for AI usage inside companies. What the new capital buys Pluto is runway to build out detection for agent-driven workflows, where the risk shifts from a static misconfiguration to a sequence of actions that may only look dangerous in hindsight.

The funding also reflects where venture money is moving. Investors have grown cautious about generic AI infrastructure bets but remain willing to back security companies with a clear compliance angle, since regulators in the EU and several US states are pushing disclosure requirements for automated decision systems. Security budgets, unlike many other IT line items, have proven sticky even as companies trim software spending. A $42 million round puts Pluto in the range where it must show enterprise traction, not just a compelling demo.

For security leaders, the practical question is whether Pluto can detect AI-related exposure faster than attackers can exploit it, and whether its findings integrate with the SIEM and identity tools already in place. The company has not disclosed its customer count or valuation, and the round's investors were not named in early reports. Those details will matter as buyers weigh Pluto against incumbents that can bundle similar features into contracts they already hold. The next signal to watch is whether Pluto publishes detection coverage for specific agent frameworks, which would show how deep its technical work runs.