About 60% of the risks Pluto detects across its customer base sit in tools vibe-coded, meaning built with AI assistance, by non-developers, Bahat told TechCrunch. Finance departments are the biggest source, followed by marketing and legal, with developers ranking only fourth. Pluto says it found a vibe-coded app made by a finance employee at a Fortune 500 company to manage customer information and churn, left exposed to the internet.

The funding comprises an $8.5 million seed round led by TLV Partners, with Armis' founders investing, and a $34 million Series A led by Jump Capital, with Skinos, Ansa Capital and angels participating. Pluto began selling in April and says it has already crossed $2 million in annual recurring revenue with more than 30 enterprise customers, including Oscar Health, Workato, Sixt and AlphaSense.

Pluto's software monitors the AI tools employees use, plus the skills, extensions, MCP servers and agents built around them, connecting to endpoint security and device management systems to gather prompts, commands, permissions and prior activity. Bahat says the system can intervene mid-session, for example stopping an agent that tries to gain permissions beyond what a user intended, or injecting instructions that make the agent ask for confirmation. "We're moving from user behavior to agent behavior," she said.

The startup has also courted customers unusually: in April it launched Plutonium, a free platform for checking risks in publicly available AI skills, connectors and add-ons, alongside an MCP scanner and a catalog of verified components. Bahat claims thousands of security professionals use it, and says 70% of Pluto's sales pipeline now comes from inbound interest, though she did not break down how much comes directly through Plutonium.