Most security alerts are noise. The expensive, exhausting kind that wakes up an engineer at 3 a.m. to chase a ghost in the machine. The promise of AI in this space has always been to sort the signal from the noise, but the real prize is what comes next: actually fixing the problem. CyberKord, a Milan-based startup founded this year, is betting that the key to safe automation isn't just smarter detection, but a digital playground where every proposed fix gets a trial run first [Tech.eu, November 2026].
Their platform acts as an intelligence layer, connecting to a company's existing security and IT tools to correlate alerts across systems. When an incident is flagged, the AI doesn't just suggest a remediation step. It first executes that step inside a digital twin, a simulated replica of the customer's IT infrastructure, to see what breaks [Startupbusiness.it, November 2026]. Only after the simulation proves safe does the platform apply the fix to the live environment. Every action is logged, creating an audit trail for the security team [CyberKord]. The goal is straightforward: answer alerts at machine speed, day and night, without waiting for a human and without causing a cascading outage [CyberKord].
The Wedge of the Digital Playground
The company's wedge is this simulation layer. In a landscape crowded with AI-powered security information and event management (SIEM) tools and automated response platforms, the digital twin is the differentiator that addresses the core fear of IT leaders: automation gone wrong. The platform is designed to start from an alert, a ticket, or even a message in Slack or Microsoft Teams, then identify the root cause, simulate the fix, and apply it using the tools already in place [Riccardo Murgia - NTT DATA | LinkedIn, retrieved 2026]. By positioning itself as a connective layer that reads from existing data sources without moving the data, CyberKord aims for a lower-friction implementation than a rip-and-replace system [Data Research Analysis, Unknown].
The Team and the First Round
The founding trio,Alessandro Maggio, Dragos Tanasa, and Cosimo Michelagnoli,launched the company in Milan in 2026 [Tech.eu, November 2026]. While detailed prior career biographies are not extensively documented in public sources, CEO Alessandro Maggio has a background that includes roles at Lilly and Ferrari, suggesting experience with complex, regulated operational environments [CB Insights]. In November 2026, they closed a €2.7 million (approximately $2.9 million) pre-seed round to move from concept to pilot. The round was led by 360 Capital, with participation from Plus Partners, Addendum Capital, and Vento [Tech.eu, November 2026].
The capital is earmarked for further platform development and, crucially, for launching initial pilot projects. CyberKord is targeting large European companies in sectors where IT downtime carries an extreme cost: manufacturing, technology, healthcare, and telecommunications [The SaaS News, November 2026].
Pre-Seed Round | 2.7 | M EUR
The Risks in a Crowded Field
The ambition is clear, but the path is lined with technical and commercial hurdles that go beyond writing clever code. Building an accurate, dynamic digital twin of a modern, hybrid IT estate is a monumental systems engineering challenge. The platform's utility is directly tied to the fidelity of its simulation; a model that misses key dependencies could green-light a catastrophic change.
On the commercial side, CyberKord is entering a market where established incumbents in security orchestration, automation, and response (SOAR) and AIops are already embedding similar automation features. Their initial wedge must be sharp enough to convince security chiefs to add yet another tool to an already bloated stack. The company's early focus on regulated, high-stakes industries like healthcare is a double-edged sword: the pain point is acute, but sales cycles are long and compliance scrutiny is intense.
Success will likely hinge on three early signals:
- Pilot proof points. Demonstrable reductions in mean time to resolution (MTTR) and, just as importantly, zero incidents caused by the platform's own automated actions in a live pilot.
- Integration depth. Moving beyond simple API connectors to deeply understand and simulate the behavior of legacy systems common in their target verticals.
- Team build-out. Attracting engineering talent with deep experience in infrastructure modeling and enterprise security sales to complement the founding vision.
The Unit Economics of Sleep
The bet, when you strip it back, is on the cost of human attention versus the risk of machine error. A senior security engineer might cost a company €150,000 per year in salary and overhead. If they spend 20% of their time on tier-one alert triage, that's €30,000 annually in wasted high-value labor. For a large enterprise with a team of ten, the math quickly scales into the hundreds of thousands.
CyberKord's platform must prove it can reliably handle a meaningful portion of that load without introducing new risk. Its ultimate competitor isn't another AI startup; it's the internal playbook, the runbook, and the well-paid human who follows it. The company must become more reliable and less expensive than that person's midnight intervention. If their digital twin can simulate that reality, they won't just be selling automation. They'll be selling back a good night's sleep.
Sources
- [Tech.eu, November 2026] CyberKord raises €2.7M to automate IT and cybersecurity operations with AI | https://tech.eu/2026/11/03/cyberkord-raises-eur27m-to-automate-it-and-cybersecurity-operations-with-ai/
- [CyberKord] Company Website | https://www.cyberkord.com/
- [Startupbusiness.it, November 2026] CyberKord secures €2.7 million for AI applied to IT and cybersecurity | https://www.startupbusiness.it/en/cyberkord-27-milioni-di-euro-per-ia-applicata-a-it-e-cybersecurity/211394/
- [The SaaS News, November 2026] CyberKord raises €2.7M Pre-seed | https://www.thesaasnews.com/news/cyberkord-raises-2-7m-pre-seed/
- [Riccardo Murgia - NTT DATA | LinkedIn, retrieved 2026] LinkedIn Post | https://www.linkedin.com/in/riccardomurgia/
- [Data Research Analysis, Unknown] Unnamed Article |
- [CB Insights] Company Profile | https://www.cbinsights.com/company/cyberkord/people
- [Vestbee, November 2026] CyberKord lands €2.7M to automate IT and cybersecurity operations with AI | https://www.vestbee.com/insights/articles/cyber-kord-lands-2-7-m