MCPwn: A CVSS 9.8 One-Line MCP Bug That Hands Over Your Nginx to Anyone on the Network – Actively Exploited in the Wild
Rule The AI
Atmosphere
Let everyone boldly venture into the AI space as you keep every endpoint protected
Trusted by
CISO’s brand new problem
AI chaos makes it harder
for CISOs to approve creation
New tools, skills, plugins and extensions, combined with intent-based actions that execute in runtime lead CISOs to either block or approve in bulk.
Pluto to the rescue
Pluto protects every layer of the AI atmosphere: tools, supply chain, artifacts and runtime, so everyone can safely launch themselves into the AI space
See, control, prevent and
enable – it's all connected.
Uncover your entire AI universe with the widest context
Every discovery is triaged with Pluto's self-research risk database
Surgical enforcement and intent-based policies that adapt in real time
Every safe, verified AI add-on in one place – curated by default, yours to adapt
Uncover your entire AI universe with the widest context
Every discovery is triaged with Pluto's self-research risk database
Surgical enforcement and intent-based policies that adapt in real time
Every safe, verified AI add-on in one place – curated by default, yours to adapt
Ever wanted to
feel like Oprah?
Now you finally can!
- Engineering Code with Claude Code Keep production data protected
- Marketing Work with Claude Cowork Block unauthorized actions in real time
- Finance Run scripts with Cursor Require approval for payment API access
- AI Builders Connect MCP servers Allow trusted MCPs. Quarantine the rest.
- Teams Build with AI Skills Block risky skills and data access
- Employees Use AI-powered extensions Block risky access to sensitive apps
- HR Build with Lovable Protect employee & company data
- Sales Use AI agents for prospecting Prevent unauthorized outbound actions
* We definitely do not mean the specific Oprah you’re thinking about, just any Oprah in general. Sincerely, Pluto’s legal team.
The most granular enablement on any tool
Wanna integrate?
go for it
Praisers gonna praise
“Pluto shows us what we never saw before, explains where the risk is and why, and gives us the enforcement to follow through on every decision and enable the organization.”
“Pluto shows us what we never saw before, explains where the risk is and why, and gives us the enforcement to follow through on every decision and enable the organization.”
Join the Pluto community,
no one is an alien here.
Plutonium
The Free AI Supply Chain Security Catalog. Search any connector, plugin, or skill below to see its risk
Explore PlutoniumDiscovered by Pluto
Our brave researchers continuously discover vulnerabilities, even in the farthest quadrants of the AI atmosphere.
MCPwn: A CVSS 9.8 One-Line MCP Bug That Hands Over Your Nginx to Anyone on the Network – Actively Exploited in the Wild
Unauthenticated Remote Code Execution in HuggingFace Transformers via Config Injection
Nebula Deck: A Malicious VS Code Extension Built to Survive a Windows Reinstall
