PAGES
← all tools
◆ AI Security Posture & Discovery

Pluto Security

commercial

Pluto Security agentlessly discovers the AI builders, agents, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers and extensions on employee endpoints, scores their risk and enforces guardrails.

Summary

Pluto Security is a commercial ai-security tool that agentlessly discovers AI builders, agents, MCP servers, and extensions across employee endpoints, scoring their risk and enforcing guardrails. The platform is designed for teams managing shadow-ai risks and sits in the agentless security control space. The product was launched in 2025.

Pluto Security agentlessly discovers the AI builders, agents, MCP servers and extensions on employee endpoints, scores their risk and enforces guardrails.

How Pluto Security helps

Which AI builders, agents, MCP servers, and extensions are running on employee machines right now?

scans endpoints agentlessly and returns an inventory of what is installed and active, without requiring a deployed agent on each device

Which of these AI tools carry the most risk to the organization?

scores each discovered builder, agent, MCP server, or extension against a risk model and ranks them so the riskiest installs surface first

Is shadow AI running on machines nobody told security about?

surfaces AI tooling that was never provisioned or approved, since discovery happens across endpoints rather than relying on a submitted list

Which employees are using AI extensions or agents that violate policy?

ties each discovered tool back to the endpoint and enforces guardrails against it, flagging the ones that fall outside allowed use

Can risky AI agents or extensions be stopped without installing anything new on the endpoint?

enforces guardrails agentlessly, acting on what discovery already found rather than requiring a new agent to be deployed first

Where are MCP servers exposed across the company's endpoints?

identifies MCP servers specifically as a discovery category and reports their presence alongside the risk score assigned to them

Languages

Not documented

Release-note detail over time

See how much detail Pluto Security puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

Nothing shipped since we started watching. Releases and docs updates land here as they happen.

watching since Sep 15, 2026

Add the badge to your README

Maintain this project? The badge links readers straight to this page, so they can follow every release here.

Tracked by Cyber Toolchain Choose a badge style and copy the code →
browse all tools → score card for your toolchain →