Figma announces new features to define how agents work on its platform
9:30 PM PDT · October 14, 2026
Design platform Figma announced a new Markdown-based editor to help define a company’s design, bring in design and code libraries, and integrate with the Payload headless content management system during the company’s first Config event in India. Through some of these features, the company aims to provide a definition for its own and third-party agents to adhere to a brand’s design rules better while creating with AI.
The company debuted a new feature called Figma Specs, which is a markdown editor that lets users define their design language in a simple way. The document can serve as a reference for teams and agents while designing in Figma. Specs can exist as a standalone file in Figma or can co-exist within the canvas. Apart from acting as a text editor, users can reference other Figma elements, such as elements on the canvas and embed FigJam diagrams, code layers, and designs.
What’s more, teams can bring in more context about design, including design libraries, code libraries, and guidelines to manage context for the design system. Agents can also refer to this centralized system to adhere to rules.
In the past week, the company made its agent on canvas available to a wider user base. However, given the non-deterministic nature of AI, the company is providing tools to steer it towards more predictable outcomes.
Figma also made its code layers feature, which adds coding to designs on canvas for more interactive prototypes. The company announced this feature in private beta back in June. At its India event this week, the company is making the function available in public beta to let more users test it out. Users can also ask the agent to turn a design into code or change a part of the code to iterate on a prototype.
“We see Figma as the place where software teams come to decide what they build and ship. And so for that, I think one of the key things to keep in mind about what AI has changed and what it made available is the ability to build,” Figma’s chief design officer Loredana Crisan told TechCrunch. “There are 17-times more lines of code being produced today than in the past. But when you’re looking at releases, only 1.3-times more releases. A lot of that code actually is not necessarily built to ship, but really built to discover what the product is. It’s built to design.”
The company said it is also supporting over 20 new tools with its MCP, including Open Code, Dia, Grok Bot, and Indian AI startup Sarvam.
Last year, Figma acquired open-source headless CMS Payload. Now, the company is integrating it with its Figma Make product for generating dynamic websites and directly managing content. The company said that Payload’s downloads have increased sixfold in the last 12 months.
The company opened its first office in India late last year with sales, partnership, go-to-market, and product support functions. Figma said that the country is its biggest market in terms of users outside the United States. The company noted that the platform works with 40% of India’s top 100 companies listed on the Bombay Stock Exchange.
Topics
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Most Popular
-
Bumble agrees to a $1.3B acquisition deal as online dating faces a reset
-
Meta releases its first frontier model, Muse Wonder
-
This AI startup says it can generate permit-ready blueprints in minutes
-
Elon Musk intensifies attack on Ambani over Starlink India launch delay
-
Anthropic can’t reliably control its AI agents — it’s cutting off its internal evals from the live internet instead
-
Batteries are now cheaper than natural gas turbines used at many data centers
-
Remember Orkut? Its founder wants to bring it back
Keep reading
Pluto Security raises $42M as AI gives enterprise security teams a new headache
10:18 AM PDT · October 13, 2026
The problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies now have new, gaping security holes in their systems or, at least, will soon.
Illustrating the pace of AI tool adoption within enterprises driving such fears, Shahar Bahat, CEO and co-founder of Pluto Security, says a newly announced AI tool can show up inside companies’ environment within a mere two hours of its release. And about 60% of the risks her company detects across its customer base are in tools vibe-coded by non-developers: Finance departments are the biggest source of such risks, she told TechCrunch, followed by marketing and legal teams. Developers rank fourth, she said.
Her startup’s tools apparently found a vibe-coded app made by a finance employee at a Fortune 500 company to manage customer information and churn, but the app was left exposed to the internet.
Pluto, fresh out of stealth with $42 million in funding, is the latest in a new crop of security startups that have quickly sprung up to help companies address those fears gaps, and all of them are raising big money from investors on the back of the conviction that only using existing security software to monitor and control AI tools, connectors, and usage is a square-peg-round-hole approach.
Bahat tells TechCrunch her startup started selling only in April and has already found some takers for its tech, which helps companies gain context, risk analysis, visibility, and control over how their employees use AI tools. She said Pluto began selling in April and has already crossed $2 million in annual recurring revenue, with more than 30 enterprise customers, including Oscar Health, Workato, Sixt, and AlphaSense.
Pluto’s funding spans an $8.5 million seed round led by TLV Partners, with cybersecurity firm Armis’ founders also investing. The company recently raised a Series A of $34 million led by Jump Capital, with Skinos (Check Point co-founder Shlomo Kramer’s venture firm), Ansa Capital, and other angel investors participating.
That’s decent traction for a young startup, though not unique in this AI era. But it may be because the breadth of the risk isn’t isolated to large tech companies that lead the AI adoption charts.
When I asked Bahat where she’s seeing the biggest risks, she said the issues are differentiated by the mindset of the CISO and how willing the organization is to adopt AI, but there were risks to be found anyway.
“In general, I’ll say there was not one POC in which we entered and didn’t find malicious stuff,” she said. “Whether those are extension packages or skills — some of them had active live attacks while we did the POC. Which again, for me, product-wise is amazing. For the companies, it’s not very good.”
Pluto’s entire bet is that securing such environments will require security tools to pay attention to what AI agents are doing in real time, in addition to keeping track of what and how employees are building and deploying.
“We’re moving from user behavior to agent behavior,” Bahat said.
In line with that vision, the startup’s software monitors the AI tools employees use, the skills, extensions, MCP servers, and other components those tools rely on, as well as the apps and agents being created. The company says it can identify risky components, spot potentially dangerous agent activity, and enforce security policies without stopping employees from using or making AI tools.
To do all that, Pluto connects to endpoint security and device management systems and can deploy its own sensors through them or directly onto devices. It gathers information, including prompts, commands, running processes, permissions, and users’ previous activity, and uses its own “lightweight” models on endpoints to help assess what an agent is trying to do.
What stood out is that Pluto’s system can intervene while an agent is working, Bahat said. If an agent tries to gain permissions beyond what a user intended, for example, the system can stop the action or add instructions into the session that prompt the agent to ask for confirmation.
“We can inject context back to the session, and this way I can change how the agent is working,” Bahat explained.
The startup also takes an unusual approach to finding customers. In April, it launched Plutonium, a free platform that lets anyone check risks associated with publicly available AI skills, connectors, and add-ons. There’s also an MCP scanner and a catalog of verified components. Bahat claims thousands of security professionals use Plutonium and that the community around it has become an important source of feedback and prospective customers.
She said 70% of Pluto’s sales pipeline now comes from inbound interest, although she didn’t break down how much of that comes directly through Plutonium.
Pluto said it plans to invest the new capital in developing its product, expanding its security research efforts, and growing its presence in the U.S. It has 40 employees in the U.S. and Israel.
Topics
AI, AI agents, ai security, Fundraising, jump capital, Security, TLV Partners
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
