Pluto Security raised $42 million six months after its first sale, with ARR above $2 million

Pluto Security announced $42 million on 13 October: an $8.5 million seed and a $34 million Series A. TechCrunch puts its annual recurring revenue above $2 million, making the raise at most $21 per dollar of ARR. Its first sale came in April 2026.

Pluto Security came out of stealth on 13 October with $42 million, six months after its first sale in April. The published figures show how large the raise is relative to a business this new.

The funding runs far ahead of revenue, and the company's own detections carry the more useful finding. Pluto sells software that watches AI agents and AI built tools on employee devices, and it has staff in the United States and Israel.

The round has two parts. TechCrunch reported an $8.5 million seed led by TLV Partners, with the founders of Armis investing. It also reported a $34 million Series A led by Jump Capital, with Skinos, Ansa Capital and angel investors. Those add to $42.5 million, so the headline total is rounded down. Valuation was not disclosed.

TechCrunch also reported annual recurring revenue, or ARR, above $2 million. Against that minimum, $42 million is at most $21 raised per dollar of revenue. This compares capital with revenue; it is not a valuation multiple. The ratio falls if actual ARR is higher.

The split of the round adds context. The Series A is four times the size of the seed and makes up 80% of the total. The seed alone was already more than four times the revenue floor. The company's own blog post says it is one year since Pluto was an idea, so the whole path from founding to a $34 million Series A has taken about twelve months.

Pluto's published figures vary by source. In its launch post on 13 October, the company says it secures more than 1.5 million endpoints and has reached multi-million-dollar ARR. The same day, The Next Web reported more than 1 million endpoints, over 40 enterprise customers and over 50 employees across the United States and Israel.

TechCrunch reported more than 30 enterprise customers, including Oscar Health, Workato, Sixt and AlphaSense, and 40 employees. The three documents appeared within hours of each other, but the figures do not match. Each comes from the company or its press coverage.

The more useful number is the one Pluto drew from its own detections. According to TechCrunch, about 60% of the risks Pluto detects sit in tools built with AI coding assistants by people who are not developers. Finance is the largest source, followed by marketing and legal, with developers fourth.

Security teams that build device inventories around engineers may be looking in the wrong department. The article also describes an internet-exposed app Pluto found at a Fortune 500 company. A finance employee had built it to hold customer and churn information.

That finding explains the product. According to TechCrunch, Pluto places sensors through a customer's existing endpoint security and device management systems, or deploys them directly. The sensors collect prompts, commands, running processes, permissions and prior user activity. Pluto can stop an action or inject an instruction asking an agent to seek confirmation.

The product covers AI tools, skills, extensions, applications and MCP servers, which are the connectors that let agents reach other software and data. Chief executive Shahar Bahat described the shift as "from user behavior to agent behavior". She said newly released AI tools can appear inside an enterprise within two hours.

The research arm supplies the evidence. In its Wide Open report Pluto found 179 exposed MCP server deployments on the internet, of which 147 accepted unauthenticated requests. Separately, in the TechCrunch interview, Bahat said that "there was not one POC in which we entered and didn't find malicious stuff". That is a statement about customer proofs of concept. Both claims come from the vendor itself.

Pluto's current distribution relies partly on free tools and inbound interest. Bahat told TechCrunch that thousands of security professionals use Plutonium, the free open-source platform launched in April to scan public AI skills, connectors and add-ons. She said 70% of the company's sales pipeline comes from inbound interest. The launch post also says its enterprise customers include multiple Fortune 500 companies and leading AI companies, without naming them or giving a count.

Pluto deploys through endpoint tools its customers already use. TechCrunch says the new capital will fund product development, security research and US expansion. It counts 40 employees. The company has not mentioned acquisitions or the size of a sales team.

Hiring sales staff would show whether Pluto is converting its reported enterprise customers into paid expansion. To assess the round's price, buyers need to know what share of customers and endpoints pay. Pluto published three different endpoint counts in one day, and none says how many endpoints are in paid contracts.

ARR is the firmest figure, followed by the named customers. Endpoint counts are less certain, ranging from 1 million to 1.5 million across the three documents.

Pluto sold its first licence in April 2026, so its first full year of sales ends in April 2027. After raising $34 million in Series A funding against more than $2 million in ARR, the company will be expected to show growth by then. Its 13 October disclosures set the baseline: more than 30 customers, more than $2 million in ARR, and between 1 million and 1.5 million endpoints. Those figures can be compared with today's maximum 21-to-1 ratio of capital to revenue.