Let Your
People Build

Pluto is the first workspace security platform for the AI era –
enabling every employee, from engineering to marketing, to build securely.
Make me an enabler
Monkey illustration
Monkey illustration
0 %

of Fortune 1000 companies officially use AI builders

0

different tools in use in every environment

0 %

of employees conceal their AI tool usage from their employers (KPMG)

CISO’s brand new problem

Every endpoint is now
an AI workspace

AI tools give everyone in the organization the power to build, but leave CISOs with no control, forced to either block innovation or become exposed.
Option 1

BLOCKING AS DEFAULT

BLOCKING AS DEFAULT
Leaves your organization behind and frustrates your employees, many times leading them to workarounds that put your company at risk.
Option 2

ALLOW WITHOUT SUPERVISION

ALLOW WITHOUT SUPERVISION
Attack surface grows wild with new blind spots, virtually turning every endpoint in your organization into an entry point for attackers.
Option 3

Pluto to the rescue

D mn it feels
good to say
Pluto is the AI Workspace Security Platform that lets you oversee and protect all AI building ventures in your organization

Yes, we mean anything

Wanna integrate?

go for it

Be part of the building party Learn about Pluto today.

Recent Blog Posts

Security
Nebula Deck: A Malicious VS Code Extension Built to Survive a Windows Reinstall
Aug 12, 2026 |24 min read

Nebula Deck: A Malicious VS Code Extension Built to Survive a Windows Reinstall

A fake project planner on the VS Code Marketplace starts working the second your editor finishes loading. It downloads a Windows script, unpacks a payload…
Read More
Security
PhantomBoard: A Fake Trello Extension for VS Code That Quietly Installs XWorm
Aug 12, 2026 |11 min read

PhantomBoard: A Fake Trello Extension for VS Code That Quietly Installs XWorm

Three VS Code extensions, three throwaway publisher accounts, three days, and one backend IP address that never changed once. Read the source of these three…
Read More
Tech
Inside Claude Artifacts – How Your Agent Publishes to the Web
Aug 06, 2026 |11 min read

Inside Claude Artifacts – How Your Agent Publishes to the Web

TL;DR Claude Artifacts are live web pages built from model output. Ask for a dashboard and you get a real URL on Anthropic infrastructure, rendered…
Read More
Tech
Vicious Circle: Owning CircleCI’s MCP Server With a Filename and a DNS Record
Jul 29, 2026 |13 min read

Vicious Circle: Owning CircleCI’s MCP Server With a Filename and a DNS Record

Two vulnerabilities in CircleCI’s official MCP server: a CVSS 10.0 that turns a filename into code execution inside your CI pipeline, and a CVSS 8.3…
Read More
ClaudeSec
Securing Claude Tag: A Practical Hardening Guide
Jul 27, 2026 |17 min read

Securing Claude Tag: A Practical Hardening Guide

Claude Tag’s security comes almost entirely from configuration – who can invoke it, what each channel and connected repo can reach, where its data can…
Read More
Security
The Importer Syndrome × Count Dooku 2.0 – When Your New AI IDE Imports More Than Extensions
Jul 22, 2026 |11 min read

The Importer Syndrome × Count Dooku 2.0 – When Your New AI IDE Imports More Than Extensions

How a gap between Microsoft Marketplace and Open VSX lets attackers hand you malware under trusted names, and the 150-extension campaign already exploiting it. TL;DR…
Read More
VIEW ALL BLOG POSTS

Plutonium

Introducing ClaudeSec
Introducing CopilotSec