Security tooling is good at raising alarms. It is far worse at the part that eats the working week: investigating what fired and fixing it, one ticket at a time. CyberKord has raised a €2.7M pre-seed to hand that loop to an agent.
Simulate first, act second
The Milan company built a digital twin of a customer’s IT estate. When an alert, support ticket or Slack message arrives, the platform traces the underlying cause, tests a proposed remedy against the simulated copy of the infrastructure, then applies it using the tools the company already runs. Everything is logged and reviewable, and administrators set how much autonomy the agent gets, from suggesting to executing.
The round
360 Capital led, with Plus Partners, Addendum Capital and Vento participating. The cash funds product work and the first pilots with large European companies in manufacturing, technology, healthcare and telecommunications. It follows a familiar Italian pattern this year, after Cato’s €6M for automating public tender hunts and Complaion’s €13.5M compliance round.
The real target is the ticket queue
Co-founder and chief executive Alessandro Maggio argues that infrastructure, software and AI agents arrive every week while operational work grows faster than any team, so specialist hours disappear into patches, access requests and incidents. Whether an agent can be trusted to patch production systems without human review is the question every buyer will ask, and the answer depends on how convincing the digital twin proves to be.
CyberKord was founded in 2026 by Maggio with Dragos Tanasa and Cosimo Michelagnoli.
