Let Your
People Build

Pluto is the first workspace security platform for the AI era –
enabling every employee, from engineering to marketing, to build securely.
Make me an enabler
Monkey illustration
Monkey illustration
0 %

of Fortune 1000 companies officially use AI builders

0

different tools in use in every environment

0 %

of employees conceal their AI tool usage from their employers (KPMG)

CISO’s brand new problem

Every endpoint is now
an AI workspace

AI tools give everyone in the organization the power to build, but leave CISOs with no control, forced to either block innovation or become exposed.
Option 1

BLOCKING AS DEFAULT

BLOCKING AS DEFAULT
Leaves your organization behind and frustrates your employees, many times leading them to workarounds that put your company at risk.
Option 2

ALLOW WITHOUT SUPERVISION

ALLOW WITHOUT SUPERVISION
Attack surface grows wild with new blind spots, virtually turning every endpoint in your organization into an entry point for attackers.
Option 3

Pluto to the rescue

D mn it feels
good to say
Pluto is the AI Workspace Security Platform that lets you oversee and protect all AI building ventures in your organization

Yes, we mean anything

Wanna integrate?

go for it

Be part of the building party Learn about Pluto today.

Recent Blog Posts

Security
SleepyDuck Wakes Again: A Cross-Platform Open VSX Campaign Targeting Solidity Developer Workstations
Oct 01, 2026 |15 min read

SleepyDuck Wakes Again: A Cross-Platform Open VSX Campaign Targeting Solidity Developer Workstations

Pluto Research traced EtherDuck, the latest evolution of SleepyDuck, through fake Solidity extensions, inflated download counts, and malware hidden inside a video file. The campaign…
Read More
Tech
Wide Open: Hundreds of MCPs Exposing Root Shells, Production Data, and Citizen Records One Call Away
Sep 24, 2026 |8 min read

Wide Open: Hundreds of MCPs Exposing Root Shells, Production Data, and Citizen Records One Call Away

Pluto Research found 179 exposed MCP server deployments across the internet. 147 accepted unauthenticated requests, exposing everything from root access and production credentials to financial…
Read More
ClaudeSec
Inside Claude Code Function Hooks: The Trust Problem Behind Claude Mods
Sep 22, 2026 |11 min read

Inside Claude Code Function Hooks: The Trust Problem Behind Claude Mods

Pluto Research tested Claude Code’s new function-hook model and found four trust gaps, including silent secret access, missing capability disclosure, UI spoofing, and code that…
Read More
Industry
A Security Leader’s Guide to Latio’s 2026 AI Security Market Report
Sep 17, 2026 |3 min read

A Security Leader’s Guide to Latio’s 2026 AI Security Market Report

A practical breakdown of Latio’s 2026 AI Security Market Report, what security leaders should look for, and why Pluto was recognized as an Endpoint AI…
Read More
Tech
MCP Through an Attacker’s Eyes: The New Path Into Enterprise Environments
Sep 16, 2026 |5 min read

MCP Through an Attacker’s Eyes: The New Path Into Enterprise Environments

A working exploit for MCPfluence appeared on a cybercrime forum just 20 days after responsible disclosure. Pluto Research traces the attack path, examines similar exploitation…
Read More
Security
Malicious Servers, Clean Scans: The Dangerous Illusion of a Clean MCP Scan
Sep 15, 2026 |13 min read

Malicious Servers, Clean Scans: The Dangerous Illusion of a Clean MCP Scan

Pluto Research tested five public MCP security scanners against malicious servers. Several returned clean or zero-finding results, exposing the gap between what a scan checks…
Read More
VIEW ALL BLOG POSTS

Plutonium

Introducing ClaudeSec
Introducing CopilotSec