Analyst Report 
Latio
Latio’s 2026 AI Security Market Report
An independent look at how the AI security market is evolving, what buyers are prioritizing, and why Latio recognized Pluto as an Endpoint AI Security Leader.
Resources
The Pluto Library
Reports, research, guides and free tools for securing the AI workspace.
Featured
Research Report 
Pluto Research · Operation:MCP
Wide Open: Hundreds of Exposed MCP Servers
Pluto Research found 179 exposed MCP server deployments across the internet. 147 accepted unauthenticated requests, exposing root access, production credentials, financial data and municipal citizen workflows.
Tool 
Pluto Research · free hub
Plutonium (opens in a new tab)
A free, vendor-neutral security catalog for the connectors, skills, plugins and MCP servers extending Claude, Copilot and beyond. See what’s safe before your team installs it.
All resources
Everything in the library, grouped by type.
- Analyst Report
Latio
Latio’s 2026 AI Security Market Report
An independent look at how the AI security market is evolving, what buyers are prioritizing, and why Latio recognized Pluto as an Endpoint AI Security Leader.
- Analyst Report
Gartner
Two Gartner® Reports Naming Pluto as a Sample Vendor
“Shadow AI Demands Stricter Endpoint Application Control” and “Use the SAFE Framework to Secure AI Agents and Browsers in Endpoints”: what both notes say, and where Gartner named Pluto Security in each.
- Research Report
Pluto Research · Operation:MCP
Wide Open: Hundreds of Exposed MCP Servers
Pluto Research found 179 exposed MCP server deployments across the internet. 147 accepted unauthenticated requests, exposing root access, production credentials, financial data and municipal citizen workflows.
- Guide
ClaudeSec
Securing Claude Tag: A Practical Hardening Guide
The hardening checklist for Anthropic’s Slack-native agent, in priority order: who can invoke it, what each channel and repo can reach, where its data can go, and what to watch.
- Guide
CopilotSec
Securing Copilot Studio: A Practical Hardening Guide
Copilot Studio agents are in production in a lot of organizations, and the security work hasn’t kept up. A practical hardening guide for the platform.
- Guide
ClaudeSec
A Security Practitioner’s Map of the Claude Extension Ecosystem
Skills, Connectors (MCP) and Plugins look like distinct units but act as one bundle under a single click of consent. A practitioner’s map of where the code runs and where the risk sits.
- Guide
ClaudeSec
Securing Claude Cowork: What Security Teams Need to Know
Claude Cowork reads files, writes code, browses the web and executes tasks on your machine. What that new threat surface means for security teams, and how to govern it.
- Tool
Pluto Research · free tool
MCP Inspector (opens in a new tab)
A free tool from Pluto Research that scans public npm MCP servers for unauthenticated access, DNS rebinding, prompt injection and other risks before you install them.
- Tool
Pluto Research
TeamPCP Supply-Chain Attack Tracker (opens in a new tab)
The full sourced timeline of the TeamPCP campaign, from the first Trivy compromise onward, with technical details, indicators and a free defender toolkit.
- Tool
Pluto Research · free hub
Plutonium (opens in a new tab)
A free, vendor-neutral security catalog for the connectors, skills, plugins and MCP servers extending Claude, Copilot and beyond. See what’s safe before your team installs it.
- Tool
Pluto Research · free hub
CopilotSec (opens in a new tab)
A community knowledge hub for security across the Microsoft AI ecosystem: Copilot Studio, M365 Copilot and Azure AI Foundry. CopilotSec now lives inside Plutonium.
- Tool
Pluto Research · free hub
ClaudeSec (opens in a new tab)
Know what every Claude connector, extension and offering can actually do before you adopt it. ClaudeSec now lives inside Plutonium.
- Webinar
Pluto Security
Webinar: Still Saying No to AI Tools Because of Security Risks?
The modern CISO’s dilemma: how to enable AI-driven productivity with tools like Cursor, n8n and Lovable without losing control, and what a practical, enforceable framework for AI workspace security looks like.
Keep exploring
- Original research Pluto Research Vulnerability disclosures, malware campaigns and ecosystem investigations, as they happen.
- Explainers & glossary Learn Explainers, the glossary and FAQs on securing AI tools, agents and MCP.
- Company momentum Newsroom Press coverage, announcements and analyst recognition for Pluto.