Startup Leverages Endpoint Telemetry to Enhance Security Understanding and Policy Enforcement
In a noteworthy development from the cybersecurity arena, an Israeli startup has emerged from stealth mode, raising a significant $42 million to bolster the security of agentic workflows through innovative endpoint security measures. This initiative is spearheaded by Shahar Bahat, co-founder and CEO of Pluto Security, who has extensive experience in high-tech management, including a tenure at Microsoft.
Pluto Security’s recent Series A funding round was led by Jump Capital and aims to create a fortified workspace that can articulate security across various tools, access configurations, execution commands, and supply chains, as well as new digital artifacts. These enhancements necessitate a profound understanding of intricate processes, user behaviors, and file contents, allowing organizations to respond effectively to ever-evolving cybersecurity threats.
Bahat points out the evolving nature of workspaces: "The workspace always has shifted and will continue to shift. When you possess this understanding, you must ensure you can extract whatever is needed from different environments and operate securely in diverse settings." This flexibility is crucial as employees increasingly switch between devices and platforms, including laptops and cloud-based sandboxes.
Established in October 2025, Pluto Security has already grown to accommodate a team of 57 professionals. Prior to this round, the company successfully completed a seed stage while operating undercover, backed by TLV Partners. Under Bahat’s leadership, the company aims to fill a critical gap in security solutions, especially as she has amassed substantial knowledge over her career, holding key roles in software security and cyber risk management.
Innovative Approach to Lightweight Models
One of Pluto’s standout strategic features is its adoption of lightweight models that run locally, which allows the company to deliver preventive telemetry without incurring significant CPU or latency overhead. This approach effectively reduces deployment friction, making it easier for organizations to adopt the technology. Rather than merely providing reactive insights about potential vulnerabilities, Pluto takes proactive measures by automatically instituting protective measures such as mandatory authentication processes for employee-developed applications.
"The endpoint is a very risky area," Bahat acknowledges, emphasizing the need for efficient deployment methods to mitigate resource consumption and operational challenges. Expert developers are essential to optimizing endpoint security tools, ensuring that deployments are remarkably lean while still safeguarding against threats.
Securing modern workspaces necessitates a deep understanding of intent rather than simply runtime behavior. Bahat notes that endpoints provide critical visibility into running processes, user behaviors, and file internals. However, the resource-intensive nature of traditional endpoint security tools creates challenges, making it imperative to have skilled developers at the helm.
To comprehend agent behaviors, Bahat elaborates on the requirement for multiple data points: "You need to interpret what’s occurring on the endpoint, understand the processes in action, analyze file contents, and monitor user behavior comprehensively." This holistic approach is vital for addressing the complexities of endpoint security in dynamic work environments.
Comprehensive Security for Workspace Layers
Pluto Security adopts a layered perspective on security, segmenting the workspace into four distinct layers: tool usage, user interactions, ecosystem considerations, and artifact management. This comprehensive approach allows the organization to capture intricate details about how tools are used and the context in which they operate.
Bahat underscores the importance of managing access and identity risks across various entry points, particularly in email and collaboration platforms. The startup proactively focuses on mitigating prompt injection issues, agent misbehavior, and the risk of malicious code within user-created skills and extensions.
To ensure security and compliance, Pluto implements a vetted skills, packages, and extensions catalog reviewed by a security team. Employee installations are facilitated through a secure catalog, allowing user-created applications to run in controlled environments—thereby reinforcing security protocols regarding authentication and sensitive data management.
"We believe it is crucial to provide organizations with not only visibility but also enforcement capabilities," Bahat explains. "Our platform ensures both monitoring and actionable recommendations to bolster security measures effectively." This dual capability empowers users, enabling them to identify risks while also implementing security policies that mitigate potential threats.
Competitive Landscape and Future Aspirations
Bahat observes the competitive landscape, noting that Pluto faces challenges from established security platforms that may not have fully matured their AI-driven endpoint offerings as well as emerging startups in the cybersecurity space. As the company multiplies its footprint beyond its existing 1.5 million secured endpoints, its focus remains dedicated to tracking annual recurring revenue growth and proving the efficacy of its solutions through successful proof-of-concept conversions.
Ultimately, Bahat asserts, "There’s a practical way to enable organizations swiftly without sacrificing security and oversight. The deployment process for our solutions is seamless, and organizations can derive immediate value." With such promising innovations, Pluto Security seems poised to make significant strides in the cybersecurity industry, particularly in optimizing endpoint security measures amid an ever-evolving threat landscape.