Cybersecurity teams are facing a growing operational challenge: the faster businesses detect threats, the greater the pressure to investigate and resolve them before attackers can cause damage. Italian startup CyberKord wants to close the gap between identifying a problem and actually fixing it. The Milan based company has raised €2.7 million in pre seed funding to develop an artificial intelligence platform that can investigate IT incidents, simulate corrective actions and carry out approved fixes with limited human intervention.
The funding round was led by 360 Capital, with participation from Plus Partners, Addendum Capital and Vento. The investment will support platform development, team expansion and the launch of pilot projects with large European businesses.
Automating the Work After Threat Detection
Founded in Milan in 2026 by Alessandro Maggio, Dragos Tanasa and Cosimo Michelagnoli, CyberKord is developing technology designed to automate routine IT and cybersecurity operations.
Most organisations already use tools that detect suspicious activity, identify vulnerabilities and generate security alerts. However, responding to those alerts often involves several manual steps. Security professionals must investigate the affected systems, understand the potential impact, identify the underlying cause and decide which corrective action is safe to implement.
These processes can create delays, particularly when companies manage complex infrastructure spread across cloud services, internal systems and numerous software applications.
CyberKord aims to automate this operational work so security teams can spend less time handling repetitive incidents and more time on strategic responsibilities.
A Digital Twin of Company Infrastructure
The company’s platform uses artificial intelligence alongside a Digital Twin of an organisation’s IT environment. This creates a representation of the company’s infrastructure, helping the system understand connections between assets, identify affected systems and evaluate how a proposed change could influence the wider environment.
The process begins when the platform receives information from security alerts, vulnerability scans, support tickets or communication channels such as Microsoft Teams and Slack.
It then investigates the issue, assesses which assets are affected and simulates a potential solution on a copy of the environment before applying changes. This simulation is intended to help identify possible disruptions before corrective action reaches live systems.
Once the proposed response has been evaluated, the system can act according to the permissions and rules established by the organisation. Every action is recorded, allowing teams to review what happened and understand the decisions made by the AI.
Companies Retain Control
CyberKord is designed to work with existing cloud based and on premise infrastructure, meaning businesses do not need to replace their current IT systems to adopt the platform.
Importantly, organisations can decide how much independence the AI receives. They can initially use it to simulate actions and generate reports without granting permission to modify production systems. As confidence grows, companies can allow it to execute approved changes or operate with greater autonomy for selected tasks.
The company’s approach is built around making automated actions visible and reviewable rather than treating AI decisions as a black box.
According to co founder and CEO Alessandro Maggio, the goal is to remove repetitive operational work from specialists so they can concentrate on architecture, projects and decisions that require their expertise.
European Enterprise Expansion
With the fresh capital, CyberKord plans to develop its technology further and begin pilot projects with large European organisations. Its target sectors include manufacturing, technology, healthcare and telecommunications, where complex IT environments can create significant demands on operational and security teams.
The startup also plans to expand its workforce, particularly across technical development and commercial operations.
CyberKord is entering a market where businesses are increasingly looking beyond threat detection towards faster incident response and automated remediation. Its ambition is to make the journey from security alert to corrective action more efficient, while allowing organisations to retain control over how their infrastructure is managed.
The €2.7 million investment gives the young company resources to test that approach with enterprise customers and develop its platform for broader adoption.