In cybersecurity, useful research can become more than a way to explain a threat. It can help practitioners make decisions, identify gaps in their defenses, and understand risks that existing tools may not adequately address. For startups, building resources that security professionals actually use can also create a direct connection between a technical problem and a potential commercial solution.
That model is becoming relevant as organizations adopt AI tools faster than security teams can assess every new capability. In its initial coverage of the company’s emergence from stealth, TechCrunch highlighted a business operating in this changing market. The company behind the announcement is Pluto Security, which has raised $42 million in total funding and reported multi-million-dollar annual recurring revenue, more than 1 million endpoints secured globally, and over 40 enterprise customers.
Starting With What Practitioners Need
Pluto has built a community-driven, inbound go-to-market strategy around security research, practitioner tools, and its commercial platform. A central part of that effort is Plutonium, a free AI supply chain security hub powered by the company’s proprietary RisksDB.
Plutonium helps security professionals assess risks across AI supply chain components, including skills and extensions. Pluto says thousands of security professionals are already using and contributing to the resource.
The company is addressing a changing technical environment. Tools such as Claude Code, Codex, Cowork, Lovable, and Base44 allow employees to create applications, agents, automations, and workflows without relying exclusively on traditional development teams. The resulting AI supply chain can include skills, extensions, packages, MCPs, models, and other dependencies.
According to Pluto, employees across its customer base use hundreds of supply chain components while building thousands of applications. That creates a need for security teams to understand how these tools are used, what they depend on, and what actions they can perform.
Why Jump Capital Invested
Saaya Pal, partner at Jump Capital, pointed to Pluto’s research-led approach as an important reason for backing the company.
“Pluto has built a fundamentally different GTM engine for cybersecurity,” Pal said. “The clearest example is Plutonium, their AI risk database — there was no good public data on what AI tools are actually doing inside enterprises, so the team built it and gave part of it away.”
Pal said hundreds of practitioners use Plutonium every week and that most of Pluto’s pipeline now comes inbound. She also emphasized the difficulty of building a distribution strategy after a company has already scaled.
Jump Capital led Pluto’s latest financing round, an approximately $34 million investment that brings the company’s total funding to $42 million. The seed round was led by TLV Partners, with participation from additional investors.
Turning the Research Into Security Controls
Pluto’s commercial platform focuses on visibility, contextual risk assessment, and real-time control across AI tools, their supply chains, and the applications, agents, and automations employees create.
The platform combines endpoint visibility, contextual analysis, and real-time enforcement. Security teams can use it to block malicious skills, restrict unsafe agent actions, and prevent access to sensitive data or credentials without stopping legitimate work.
CEO and co-founder Shahar Bahat described the reasoning behind the product’s design.
“We took a different approach from the beginning: understand what users are trying to accomplish, understand their intent, and give security teams the context to enable that work safely rather than simply block it,” Bahat said.
The approach is intended to help organizations accommodate legitimate AI use while maintaining controls over risky activity.
Enterprise Traction and Leadership
Pluto reports more than 40 enterprise customers, including Oscar Health, Workato, Sixt, AlphaSense, and Fortune 500 organizations. It has reached multi-million-dollar ARR in less than a year and secured more than 1 million endpoints globally.
Bahat founded the company with Tal Ofer Regev and Gil Maman. The founders bring experience from Microsoft, Palo Alto Networks, Bridgecrew, and Israel’s Unit 8200. Bahat previously held senior cybersecurity leadership roles at Microsoft and Palo Alto Networks and is a Forbes 30 Under 30 honoree. Regev previously served as vice president of research and development at Palo Alto Networks, managing more than 150 people. Maman spent more than six years in Israeli Military Intelligence in technical leadership roles.
Pluto now employs more than 50 people across the United States and Israel. Its backers include Jump Capital, TLV Partners, Skinos, AlphaDrive Ventures, Ansa Capital, MTF, and individual investors from the technology and cybersecurity sectors.
A Growth Strategy Built Around Trust
Rona Segev, co-founder and managing partner at TLV Partners, said Pluto’s approach gives security teams a way to understand AI activity and act with precision rather than simply block innovation.
The company plans to use its new funding to continue investing in its product, research, and U.S. expansion. Its combination of practitioner resources and enterprise security technology offers a distinct route to market, while the continued adoption of AI tools will shape the security problems it must solve next.
