PRODUCT NOTES · PLUTO SECURITY
Pluto Security: AI endpoint control facts (2026)
Short answer
By The Device Desk · Endpoint AI Finder · Published 2026-10-11
Desk research from public vendor pages read on 27 September and 11 October 2026. Profiles follow our published method; we did not run the products.
Vendor pages read September and October 2026 · updated 2026-10-13
Where do Pluto's controls sit?
- DEV Filled marker: described on the product pages we read
- DEV Hatched marker: partly described (another component, a narrower scope, or method not detailed)
- DEV Dashed marker: not in our sources (it may exist; we did not find it)
| Type | Status | What the pages say | Source |
|---|---|---|---|
| On-device control | Partly described | (secondary: SACR) inline hook configuration on coding agents for runtime observability and enforcement. | Source: SACR (secondary): CISO guide to endpoint control and prevention, July 2026 · Read 13 Oct 2026 · secondary source |
| Browser extension | Not in our sources | Not described on the pages we read. | None |
| Network or SSE proxy | Not in our sources | Not described on the pages we read. | None |
| AI or MCP gateway | Not in our sources | Not described on the pages we read. | None |
| Policy only | No product needed | Policy is your own work whichever product you choose. | None |
How does Pluto decide on an AI action?
| Decides on a tool call before it runs | Partly(secondary: SACR) inline hooks on coding agents for runtime enforcement. Source: SACR (secondary): CISO guide to endpoint control and prevention, July 2026 · Read 13 Oct 2026 · secondary source |
|---|---|
| Can warn or ask instead of only blocking | Not in our sources |
| Can block an agent, tool or action | Not in our sources |
| Has a watch-only or simulation mode | Not in our sources |
How does Pluto reach devices, and which AI tools does it name?
| How it reaches devices | (secondary: SACR) Agentless, through API integrations and existing CrowdStrike, Defender and MDM infrastructure. Pluto's own site has no product or documentation page describing rollout. Source: SACR (secondary): CISO guide to endpoint control and prevention, July 2026 · Read 13 Oct 2026 · secondary source |
|---|---|
| Rolls out through EDR or device management you run | Partly(secondary: SACR) deploys through existing CrowdStrike, Defender and MDM infrastructure. Source: SACR (secondary): CISO guide to endpoint control and prevention, July 2026 · Read 13 Oct 2026 · secondary source |
| Names the coding agents it covers | PartlyPluto's research covers Claude Code; SACR (secondary) says it governs tools such as ChatGPT, Claude and Copilot. Source: SACR (secondary): CISO guide to endpoint control and prevention, July 2026 · Read 13 Oct 2026 · secondary source |
| AI tools and surfaces named | AI builders, developer tools and business workspaces. Source: Pluto Security homepage · Read 13 Oct 2026 |
| Built into | None |
| Works with | (secondary: SACR) deploys through existing CrowdStrike, Defender and MDM infrastructure. (secondary: SACR) deploys through existing CrowdStrike, Defender and MDM infrastructure. Source: SACR (secondary): CISO guide to endpoint control and prevention, July 2026 · Read 13 Oct 2026 · secondary source |
What else does Pluto cover?
| Controls what goes into browser AI | Not in our sources |
|---|---|
| Records who or what took each action | Not in our sources |
| Also covers SaaS, cloud or homegrown AI | Not in our sources |
What does Pluto cost?
Not published (demo request).
Source: Pluto Security homepage · Read 13 Oct 2026
Where is Pluto strong, and where are its limits?
Strengths and limits come from the product's own pages and our sources; a limit can be something we did not find.
Strengths
- (secondary: SACR) agentless rollout through existing CrowdStrike, Defender and MDM infrastructure.
- Publishes research on Claude Code hooks, exposed MCP servers and Open VSX malware.
Limits
- Pluto publishes little product detail on its own site, so this profile relies partly on a third-party report.
- No price is published.
What does Pluto say about itself?
No vendor figures are quoted in these notes.
What has Pluto announced recently?
- 24 Sep 2026
Published research finding 179 exposed MCP servers, 147 unauthenticated.
Source: Pluto Security homepage · Read 13 Oct 2026
Who should shortlist Pluto?
Consider Pluto if you want guardrails on coding agents without a new endpoint agent, or if .
In our example finder profiles, Pluto is not in the first group; your own answers may differ.
How does Pluto compare with each other product?
- AI Access Security and Pluto
- Workforce Protector and Pluto
- Bay and Pluto
- Bloom and Pluto
- Cloudflare AI Gateway and Pluto
- Falcon Guardian and Pluto
- Ent and Pluto
- Glow and Pluto
- Harmonic and Pluto
- Koi and Pluto
- Lasso and Pluto
- Neo and Pluto
- Noma and Pluto
- Onyx and Pluto
- Pluto and Prompt Security
- Pluto and Sun
- Pluto and Zenity
- Pluto and Zscaler