Pluto Security

Security for AI Governance Risk ComplianceApplication Security also known as PLUTO SECURITY LTD

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure.
Founded 2025
Funding $42M
Last updated 2026-10-13

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

Pluto Security, founded in 2025, sells enterprise security teams its AI Workspace Security Platform. The platform identifies AI tools, add-ons and agents on employees' computers, scores their risk and can block an agent's action that exceeds the permissions the employee intended. Pluto has raised $42 million, including a $34 million Series A led by Jump Capital. Its named customers include Oscar Health, Workato, Sixt and AlphaSense. Its CEO told TechCrunch it passed $2 million in annual recurring revenue with more than 30 enterprise customers, while Pluto cites over 40 in its release. CrowdStrike has announced AI application and agent discovery plus runtime tracking of agent behavior. If it also blocks individual agent actions, buyers would have less reason to buy Pluto separately.

Sourced Details

Description Pluto Security sells an AI workspace security platform that protects the AI tools employees use, the skills and add-ons those tools load, the apps and agents employees build, and what agents do at runtime on company endpoints. [f1]
Founded 2025 [f2]
HQ Tel Aviv, Israel [f2]
Funding $42M total [f3]
Latest funding Series A, $34M, led by Jump Capital, announced 2026-10-13 [f3]

Products

Product What it does
Pluto AI Workspace Security Platform Discovers the AI tools, agents, and add-ons employees use on endpoints, triages their risk against Pluto's research, and enforces policies on AI tool and agent activity in real time.
Plutonium Free community catalog that vets MCP servers, skills, plugins, and connectors for risk and lists add-ons Pluto has vetted as safe to adopt.

Matrix Coverage

AI Defense Matrix

GovernIdentifyProtectDetectRespondRecover
AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain.
AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients.
AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD.
AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services.
AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes.
Training Data Datasets used for training, fine-tuning, and continued learning.
Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history.
AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools.

The Pluto AI Workspace Security Platform discovers the AI builders, agents, and MCP tools employees use, scores their risk, and enforces guardrails on AI building activity. These capabilities are mapped to the AI Defense Matrix. [f4]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Established 25 /40 Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
Dimension Score Rationale
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 3/5 Pluto names a clear buyer and a specific problem. The buyer is the security leader who wants staff to use and build with AI tools, and the problem is risky AI tools, add-ons and agent actions on employee endpoints. According to Resilient Cyber, Latio calls the endpoint the second era of AI security in its 2026 report, which supports the problem’s existence. No independent source in the record quantifies the pain Pluto describes, so it stays vendor-asserted. [s1, s2, s3, s13]
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. 3/5 On its own pages, Pluto describes discovery of AI tools and add-ons, triage against its own risk database, intent-based enforcement, and a Claude Enterprise integration through Anthropic’s Compliance API that is in private preview. A TechCrunch article adds that Pluto deploys sensors through endpoint and device-management tools and runs lightweight models on endpoints. Pluto quotes Latio’s praise of its endpoint capabilities on its homepage and discusses the assessment on its blog. No independent technical evaluation appears in the record. [s1, s3, s18, s11]
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 4/5 Two kinds of buyer-side demand signal appear in independent sources within the last year. Budget-line emergence: according to Resilient Cyber on October 5, 2026, Latio reported dedicated AI security budget at 37% of organizations, up from 8% a year earlier. Analyst category note: Latio’s 2026 AI Security Market Report, announced September 15, 2026, covers the evolution of endpoint security, including MCP and skill security. The enabler is AI agents acting on employee endpoints, which Latio calls the second era of AI security in its report. [s12, s13, s3]
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 3/5 In its funding release, Pluto names three co-founders whose experience spans Microsoft, Palo Alto Networks, Bridgecrew and Unit 8200. By the company’s account, co-founder Tal Ofer Regev was a Palo Alto Networks vice president of R&D. The GitHub advisory for CVE-2026-27825, a critical mcp-atlassian flaw Pluto says it disclosed, lists the account yotampe-pluto among its reporters. The co-founders have verifiable in-domain experience, without an independently verified prior exit or named product build in the cited record. [s4, s15, s16, s5]
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 3/5 Pluto names customers on its homepage under a trusted-by heading, including SIXT, Oscar, Workato, Playtika and Agoda, and security leaders at Workato and Playtika give quoted endorsements there. Its scale figures are the company’s own. Bahat said Pluto passed $2 million in annual recurring revenue with more than 30 enterprise customers, according to TechCrunch, while Pluto cites over 40 in its release. No independent source in the cited record corroborates those figures, so the Jump Capital-led round counts only as an indirect signal. [s1, s3, s4, s5]
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 3/5 TechCrunch describes $42 million raised across an $8.5 million seed led by TLV Partners and a $34 million Series A led by Jump Capital. Bahat said Pluto began selling in April and passed $2 million in annual recurring revenue, so Pluto pairs the staged raise with a shipping product and named customers. That revenue figure is the company’s own, so efficiency stays unconfirmed. [s3, s4, s1]
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 3/5 TechCrunch describes Pluto as the latest in a new crop of security startups, and Latio covers the evolution of endpoint security, including MCP and skill security, in its 2026 report. On its blog, Pluto says Gartner named it a sample vendor for AI usage control and Latio named it an Endpoint AI Security Leader. In the cited record, Pluto reports those placements on its own pages. Resilient Cyber cites Latio’s count of roughly 400 AI security startups competing for the same buyers, so placing Pluto still takes vendor explanation. [s3, s12, s10, s11, s13]
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 3/5 CrowdStrike announced Shadow AI Discovery for Endpoint in March 2026, which overlaps Pluto’s discovery of AI applications, agents and MCP servers. According to TechCrunch, Pluto connects to endpoint security and device management systems, deploys its own sensors, and gathers prompts, commands, permissions and past user activity. Pluto also maintains cross-ecosystem risk catalogs, and its private-preview Claude Enterprise integration maps resources onto its AI security graph. An incumbent would have to rebuild that integration and research, which is friction without a structural moat. [s14, s3, s8, s18]
Business Risks CrowdStrike has announced endpoint discovery of AI applications, agents and MCP servers and runtime protection that tracks how agents behave, so it could add intervention in individual agent actions and narrow the case for buying Pluto separately…
  • CrowdStrike has announced endpoint discovery of AI applications, agents and MCP servers and runtime protection that tracks how agents behave, so it could add intervention in individual agent actions and narrow the case for buying Pluto separately.
  • Pluto’s customer, revenue and endpoint figures are company-reported. Bahat told TechCrunch it had more than 30 enterprise customers, and Pluto cited over 40 in its release.
  • Bahat says 70% of Pluto’s sales pipeline comes from inbound interest, with Plutonium a source of prospects. A rival free catalog of AI add-on risks could slow that inbound flow.
Problem & Market Pluto Security frames the problem as employees who now use and build with AI tools on company endpoints…

Pluto Security frames the problem as employees who now use and build with AI tools on company endpoints. TechCrunch describes Pluto monitoring those tools, the skills, extensions and MCP servers they rely on, and the apps and agents employees create. On its homepage, Pluto pitches a way for security teams to allow that work while keeping each endpoint protected.

The buyer is the security leader who wants staff to build with AI while retaining security control. On its About page, Pluto describes a third way that lets people build while security stays in control. According to Resilient Cyber, Latio calls the endpoint the second era of AI security in its 2026 report, which matches Pluto’s framing. [s1, s2, s3, s13]

Product Capabilities The Pluto AI Workspace Security Platform discovers the AI tools, add-ons and agents in use and triages each against Pluto’s own risk database…

The Pluto AI Workspace Security Platform discovers the AI tools, add-ons and agents in use and triages each against Pluto’s own risk database. It enforces intent-based policies in real time. In its release, Pluto says the platform can block malicious skills, restrict unsafe agent actions and prevent access to sensitive data or credentials.

According to TechCrunch, Pluto connects to endpoint security and device-management systems and can deploy its own sensors through them or directly onto devices. The sensors gather prompts, commands, running processes and permissions, and Pluto’s lightweight models assess what an agent is trying to do. When an agent seeks more permissions than the user intended, the system can stop the action or add instructions to the session.

Pluto also offers a Claude Enterprise integration through Anthropic’s Compliance API, which imports Claude activity into its platform and scores each session for risk. That integration is in private preview for organizations using both products. Plutonium is Pluto’s free community tool for vetting MCP servers, skills, plugins and connectors, and it lists add-ons Pluto has vetted as safe to adopt. [s1, s3, s4, s18, s9]

Competitive Positioning Pluto competes in a crowded field of AI security startups…

Pluto competes in a crowded field of AI security startups. TechCrunch describes Pluto as the latest in a new crop of security startups, and Resilient Cyber cites Latio’s count of roughly 400 AI security startups competing for the same buyers.

Pluto’s discovery overlaps a feature an endpoint incumbent has announced. CrowdStrike announced Shadow AI Discovery for Endpoint in March 2026 to identify AI applications, agents, MCP servers and development tools on devices. SiliconANGLE describes CrowdStrike’s strategy as treating the endpoint as the control plane for AI security.

Pluto reports its analyst recognition on its own blog. It says Gartner named it a sample vendor in two research notes and that Latio named it an Endpoint AI Security Leader. [s3, s13, s14, s10, s11]

Go-to-Market & Traction Pluto names customers on its homepage under a trusted-by heading, including Guesty, SIXT, AlphaSense, Oscar, Agoda, Redis, Workato and Playtika…

Pluto names customers on its homepage under a trusted-by heading, including Guesty, SIXT, AlphaSense, Oscar, Agoda, Redis, Workato and Playtika. Workato’s CISO and Playtika’s Director of Product Security give quoted endorsements there, as does the CISO of a Fortune 500 health insurance company.

Pluto’s scale figures are its own. Bahat said Pluto began selling in April, passed $2 million in annual recurring revenue and has more than 30 enterprise customers, according to TechCrunch. In its release, Pluto cites over 40 enterprise customers and more than 1 million endpoints secured, while Bahat wrote in her launch post that Pluto secures more than 1.5 million.

Pluto builds demand through free research. Bahat says 70% of its sales pipeline comes from inbound interest and that the community around Plutonium supplies prospective customers. In May 2026, 160 CISOs and security executives voted Pluto the winner of the Innovate Cybersecurity Summit’s Best Emerging Technology Award. [s1, s3, s4, s7, s5]

Team & Credibility Shahar Bahat co-founded Pluto with Tal Ofer Regev and Gil Maman and serves as its CEO…

Shahar Bahat co-founded Pluto with Tal Ofer Regev and Gil Maman and serves as its CEO. In its funding release, Pluto says Bahat held senior cybersecurity leadership roles at Microsoft and Palo Alto Networks. It says Regev served as a Palo Alto Networks vice president of R&D managing more than 150 people. Those backgrounds are the company’s own account.

Pluto’s team publishes security research on AI tools and their add-ons. It disclosed CVE-2026-27825 and CVE-2026-27826 in the mcp-atlassian server, and the GitHub advisory for CVE-2026-27825 lists the account yotampe-pluto among its reporters. Pluto Research also says it found 179 exposed MCP server deployments, 147 of which accepted unauthenticated requests. [s4, s5, s15, s16, s17]

Trust Readiness Pluto displays SOC 2 Type 2 and ISO 27001 marks in its site footer and links a Trust Center…

Pluto displays SOC 2 Type 2 and ISO 27001 marks in its site footer and links a Trust Center.

Pluto’s sensors gather prompts, commands and permissions from employee devices, so Pluto’s platform handles sensitive activity data. A buyer has reason to ask how Pluto retains and protects that data, which Pluto does not detail on the captured pages. [s1, s3, s20]

Competitors CrowdStrike, Aurascape, WitnessAI, Harmonic Security, Knostic, Zenity, Netskope, Zscaler, Palo Alto Networks, Microsoft…
Company Relationship Note Compare
CrowdStrike competes with Endpoint incumbent that announced discovery of AI applications, agents and MCP servers on devices, overlapping Pluto’s discovery. Pluto also names CrowdStrike among its accelerator programs.
Aurascape competes with Competes for the same enterprise security buyer of controls over how employees use AI.
WitnessAI competes with Competes for enterprise budget to govern how employees use AI tools and agents. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
Harmonic Security competes with Competes for the same security leader managing employee use of AI tools. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
Knostic adjacent Adjacent in enterprise AI governance, a different slice of the same buyer’s problem. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
Zenity competes with Competes for the security buyer governing the agents and automations employees build.
Netskope competes with Could compete for the same AI tool control budget.
Zscaler competes with Could compete for the same AI tool control budget.
Palo Alto Networks competes with Could compete with Pluto for AI tool discovery. N/AWe scored these companies at different scopes, so the totals measure different things.
Microsoft competes with Could compete for the same buyer governing employee use of AI tools. N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product.

Add analyzed competitors to compare them side by side with Pluto Security.

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Contested 14 /21 Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure. reinforce or reposition

Pluto Security’s sensors act on AI agent activity on employee endpoints. They can stop an agent’s action or add instructions to the agent’s session. Playtika’s product security director says Pluto lets the team enforce what it allows across its endpoints. Pluto also keeps a risk database built from its own research and shares part of it through Plutonium, its free catalog. CrowdStrike has announced similar discovery for AI applications and agents on endpoints. The sensors Pluto deploys through a customer’s endpoint tools and the policies a security team writes in it are switching friction.

Dimension Score Rationale
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 1/3 Pluto sells a software platform that a customer’s security team runs: it discovers AI tools, triages their risk and enforces the policies that team sets. Pluto offers no managed service or accountability layer in the cited record, so the customer’s team operates it and owns the outcomes.
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3 Pluto deploys sensors through a customer’s endpoint security and device-management tools and offers a private-preview connection to Claude Enterprise through Anthropic’s Compliance API. It also holds the intent-based policies a security team writes. Those integrations and policies are switching friction. In the cited record, no one has sized the migration or shown a network effect, non-portable state or other mechanism that makes leaving expensive.
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 1/3 Pluto displays SOC 2 Type 2 and ISO 27001 marks in its site footer and links a Trust Vault portal, credentials a funded rival can also obtain. In the captured record, Pluto cites no authorization or mandate that would block a buyer from replacing it.
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 3/3 According to TechCrunch, Pluto runs its own lightweight models on endpoints to judge what an AI agent is trying to do. It can also stop an action or add instructions to the agent’s session while the agent runs. On-device machine learning combined with real-time intervention across many AI tools is specialized engineering.
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 3/3 Pluto sells to enterprise security leaders, and it quotes the CISO of a Fortune 500 health insurance company on its homepage, a regulated enterprise buyer of the product. In its release, Pluto names Fortune 500 organizations among its customers, and Pluto publishes no self-serve price, asking buyers to book a demo.
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 2/3 Pluto sells a connected platform on its homepage, covering discovery, risk triage, intent-based enforcement policies and curated AI add-ons. Its Claude Enterprise integration, still in private preview, maps each resource onto the Pluto AI security graph. According to TechCrunch, which relays the CEO, Pluto’s system can stop an agent’s action or add instructions to the session. On the pages captured for this refresh, Pluto documents no architecture or customer deployment in which agent requests must wait on its decision. Pluto therefore scores as a platform with some application features.
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 2/3 Pluto names a retained asset, its proprietary RisksDB, which Pluto describes on its homepage as a self-research risk database used to triage every discovery. Pluto says its ratings come from hands-on research against live platforms. A Jump Capital partner says the team gave part of that data away, so the full database accrues to Pluto and is not shown public. A funded rival could rebuild such a database with time and research effort.
Strategic Market Segmentation Pluto sells to enterprise security leaders whose staff use and build with AI tools on company endpoints…

Pluto sells to enterprise security leaders whose staff use and build with AI tools on company endpoints. On its homepage, Pluto describes requiring approval for payment API access. On its About page, Pluto frames the offer as a third way between blocking AI tools and accepting the risk.

The customers Pluto names are large organizations. In its release, Pluto says they include Oscar Health, Workato, Sixt, AlphaSense and Fortune 500 organizations, and Pluto quotes the CISO of a Fortune 500 health insurance company on its homepage. Bahat said Pluto has more than 30 enterprise customers, according to TechCrunch, while Pluto cites over 40 in its release.

Product Capabilities & AI Advantages The Pluto AI Workspace Security Platform discovers the AI tools, add-ons and agents in use, triages each against Pluto’s own risk database, and enforces intent-based policies in real time…

The Pluto AI Workspace Security Platform discovers the AI tools, add-ons and agents in use, triages each against Pluto’s own risk database, and enforces intent-based policies in real time. In its release, Pluto says the platform can block malicious skills, restrict unsafe agent actions and prevent access to sensitive data or credentials.

According to TechCrunch, Pluto deploys sensors through endpoint security and device-management systems or directly onto devices. The sensors gather prompts, commands, running processes and permissions, and Pluto’s lightweight models assess what an agent is trying to do. When an agent seeks more permissions than the user intended, the system can stop the action or add instructions to the session.

Pluto extends that coverage through integrations and its free catalog. Through a Claude Enterprise integration in private preview, Pluto imports Claude activity from Anthropic’s Compliance API and scores each session for risk. Plutonium is a free tool for vetting MCP servers, skills, plugins and connectors, and Pluto vets the add-ons on its Market-Space before listing them.

No independent technical evaluation of these functions appears in the record. Latio’s praise of Pluto’s depth on the endpoint appears as a quotation on Pluto’s own homepage.

Sales Engagement & Go-to-Market Pluto builds demand through free research and an inbound motion…

Pluto builds demand through free research and an inbound motion. Bahat says 70% of Pluto’s sales pipeline comes from inbound interest, and Jump Capital partner Saaya Pal says most of the pipeline now comes inbound. Bahat also claims thousands of security professionals use Plutonium, Pluto’s free catalog, and that its community supplies prospective customers.

Pluto gives part of its risk data away through Plutonium. Pal said the team built data on what AI tools do inside enterprises and gave part of it away. Pluto describes Plutonium as a free hub for the AI assistant ecosystem.

Pluto’s traction figures are its own. Bahat said Pluto began selling in April and passed $2 million in annual recurring revenue, according to TechCrunch. In its release, Pluto cites over 40 enterprise customers and more than 1 million endpoints secured, and Bahat wrote in her launch post that Pluto secures more than 1.5 million. In May 2026, 160 CISOs and security executives voted Pluto the winner of the Innovate Cybersecurity Summit’s Best Emerging Technology Award.

Pricing Model Pluto posts no price list on the captured pages…

Pluto posts no price list on the captured pages. Pluto’s /pricing address returns the site’s 404 page, Pluto states no unit of charge on the captured pages, and Pluto asks prospective buyers on its homepage to book a demo.

Bahat’s figures tie Pluto’s revenue to enterprise customers, more than $2 million in annual recurring revenue across more than 30 of them, according to TechCrunch. Pluto states no contract size or pricing model behind that revenue on the captured pages.

Product Delivery & Operations Pluto describes more than one way to deploy…

Pluto describes more than one way to deploy. According to TechCrunch, it connects to customers’ endpoint security and device-management systems and can deploy its own sensors through them or directly onto devices. In its May 2026 award announcement, Bahat described a fully agentless deployment, so Pluto’s published descriptions of how it deploys differ.

The sensors run Pluto’s lightweight models on endpoints and gather prompts, commands, running processes, permissions and prior user activity. That design gives Pluto’s platform sensitive activity data from employee devices. Data handling and retention are diligence questions that the captured pages do not answer.

Pluto also reaches activity inside individual AI assistants through integrations. Through its Claude Enterprise integration, which is in private preview, Pluto imports Claude Enterprise activity from Anthropic’s Compliance API.

Earning Customers' Trust Pluto displays SOC 2 Type 2 and ISO 27001 marks in its site footer and links a Trust Center…

Pluto displays SOC 2 Type 2 and ISO 27001 marks in its site footer and links a Trust Center.

Pluto’s platform handles sensitive data, which raises the bar for a buyer’s security review. Its sensors gather prompts, commands and permissions, and Pluto imports Claude Enterprise activity through a private-preview integration. A buyer has reason to confirm report scope, retention terms and handling of that activity data with Pluto.

Platform Strategy & Ecosystem Positioning Pluto positions its platform as one control point across employee use of AI…

Pluto positions its platform as one control point across employee use of AI. On its homepage, Pluto says it protects every layer of AI use, from tools and their supply chain to artifacts and runtime.

Pluto extends that position into the security community through Plutonium. Pluto describes it as a free, vendor-neutral hub for the AI assistant ecosystem, and its Market-Space is a curated marketplace where Pluto vets add-ons before listing them. Pluto’s Claude Enterprise integration is in private preview.

An endpoint incumbent is moving toward the same control point. CrowdStrike announced Shadow AI Discovery for Endpoint in March 2026, and SiliconANGLE describes CrowdStrike’s strategy as treating the endpoint as the control plane for AI security.

Team & Execution Capability Shahar Bahat co-founded Pluto with Tal Ofer Regev and Gil Maman and serves as its CEO…

Shahar Bahat co-founded Pluto with Tal Ofer Regev and Gil Maman and serves as its CEO. In its funding release, Pluto says Bahat held senior cybersecurity leadership roles at Microsoft and Palo Alto Networks. It says Regev served as a Palo Alto Networks vice president of R&D managing more than 150 people. Those backgrounds are the company’s own account.

Pluto’s research output appears in an independent record. Pluto disclosed a file-writing flaw in mcp-atlassian that could allow attackers to execute code. The GitHub advisory authors credit yotampe-pluto as a reporter. Pluto Research also says it found 179 exposed MCP server deployments, 147 of which accepted unauthenticated requests.

In its release, Pluto says it has more than 50 employees across the United States and Israel, while TechCrunch puts the figure at 40. No independently documented prior exit appears in the record.

Sources

Company Detail Sources (4)
Id Source Tier Accessed
f1 Pluto Security: homepage official 2026-10-13
f2 KYC Israel (commercial registry aggregator): PLUTO SECURITY LTD record other 2026-10-13
f3 TechCrunch: Pluto Security funding article by Ram Iyer press 2026-10-13
f4 AI Defense Matrix Catalog: Pluto Security official 2026-10-13
Profile Analysis Sources (20)
Id Source Tier Accessed
s1 Pluto Security: homepage official 2026-10-13
s2 Pluto Security: About Us page official 2026-10-13
s3 TechCrunch: Pluto Security funding article by Ram Iyer press 2026-10-13
s4 FinanceWire: Pluto Security stealth-exit press release official 2026-10-13
s5 Innovate Cybersecurity: Best Emerging Technology Award announcement press 2026-10-13
s6 KYC Israel (commercial registry aggregator): PLUTO SECURITY LTD record other 2026-10-13
s7 Pluto Security blog: Welcome to Planet Pluto launch post official 2026-10-13
s8 Pluto Security blog: Introducing Plutonium official 2026-10-13
s9 Plutonium: Pluto Security community catalog site official 2026-10-13
s10 Pluto Security blog: post on two Gartner endpoint notes official 2026-10-13
s11 Pluto Security blog: post on Latio's 2026 AI Security Market Report official 2026-10-13
s12 Latio Pulse: 2026 AI Security Market Report announcement research 2026-10-13
s13 Resilient Cyber: episode on Latio's 2026 AI Security Market Report press 2026-10-13
s14 SiliconANGLE: CrowdStrike Falcon AI security expansion article press 2026-10-13
s15 GitHub Security Advisory GHSA-xjgw-4wvw-rgm4 for mcp-atlassian research 2026-10-13
s16 Pluto Security blog: MCPwnfluence disclosure post official 2026-10-13
s17 Pluto Security blog: Wide Open exposed MCP server research official 2026-10-13
s18 Pluto Security blog: Claude Enterprise Compliance API integration post official 2026-10-13
s19 Probe: pluto.security/pricing/ returned the site 404 page (capture-extract, 2026-10-13) official 2026-10-13
s20 Probe: trust.pluto.security Trust Vault portal served a script shell and rendered blank in agent-browser (2026-10-13) official 2026-10-13
Deep-Dive Sources (20)
Id Source Tier Accessed
s1 Pluto Security: homepage official 2026-10-13
s2 Pluto Security: About Us page official 2026-10-13
s3 TechCrunch: Pluto Security funding article by Ram Iyer press 2026-10-13
s4 FinanceWire: Pluto Security stealth-exit press release official 2026-10-13
s5 Innovate Cybersecurity: Best Emerging Technology Award announcement press 2026-10-13
s6 KYC Israel (commercial registry aggregator): PLUTO SECURITY LTD record other 2026-10-13
s7 Pluto Security blog: Welcome to Planet Pluto launch post official 2026-10-13
s8 Pluto Security blog: Introducing Plutonium official 2026-10-13
s9 Plutonium: Pluto Security community catalog site official 2026-10-13
s10 Pluto Security blog: post on two Gartner endpoint notes official 2026-10-13
s11 Pluto Security blog: post on Latio's 2026 AI Security Market Report official 2026-10-13
s12 Latio Pulse: 2026 AI Security Market Report announcement research 2026-10-13
s13 Resilient Cyber: episode on Latio's 2026 AI Security Market Report press 2026-10-13
s14 SiliconANGLE: CrowdStrike Falcon AI security expansion article press 2026-10-13
s15 GitHub Security Advisory GHSA-xjgw-4wvw-rgm4 for mcp-atlassian research 2026-10-13
s16 Pluto Security blog: MCPwnfluence disclosure post official 2026-10-13
s17 Pluto Security blog: Wide Open exposed MCP server research official 2026-10-13
s18 Pluto Security blog: Claude Enterprise Compliance API integration post official 2026-10-13
s19 Probe: pluto.security/pricing/ returned the site 404 page (capture-extract, 2026-10-13) official 2026-10-13
s20 Probe: trust.pluto.security Trust Vault portal served a script shell and rendered blank in agent-browser (2026-10-13) official 2026-10-13

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.