AI supply chain security: what governance teams are missing

TL;DR: Enterprise AI supply chains now expose reused models, shared prompts, internal apps and third-party dependencies to risks that traditional software controls miss, according to Pluto Security, while the company also reports $42 million in total funding. The governance gap is that AI artifacts behave like security-sensitive runtime assets, so inventory, integrity checks and prompt controls must move ahead of deployment scale.

Editorial analysis by NHI Mgmt Group, based on content published by Pluto Security: “AI Supply Chain Security”.

By the numbers:

• Pluto Security reported $42 million in total funding.

Key questions

Q: What should organisations do first to govern AI supply chain risk?

A: Start by building an AI inventory that lists models, agents, prompts, skills, MCP servers and the dependencies around them.

Q: Why do reused prompts and shared AI artefacts create security risk?

A: Because prompts and related artefacts act like runtime policy, not harmless text.

Q: How can organisations tell whether AI dependencies are becoming a supply chain problem?

A: Watch for opaque model provenance, frequent dependency drift, unmanaged external APIs and AI apps that connect to enterprise systems without clear ownership.

Practitioner guidance

• Build an enterprise AI asset inventory Register models, prompts, fine-tuned artefacts, internal AI apps and their owners so security teams can see what exists before they assess risk.
• Treat prompts as controlled security artefacts Store prompts in version-controlled repositories, require peer review before deployment and separate system prompts from user input to limit hidden behavioural changes.
• Enforce model integrity checks at deployment Use cryptographic signing, checksum validation and restricted registry access to reduce the chance that altered model artefacts move into production.

Bottom line: AI supply chains combine models, prompts, datasets and dependencies into a control problem that traditional software scanning does not fully cover.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →