360 Capital backs Bynario’s €2.1M raise to turn AI bug-hunting into a full-stack security platform — TFN

• Milan’s Bynario raised €2.1 million in pre-seed funding led by 360 Capital Companions.

• Its AI-assisted Apple bug almost went unreported amid a bug bounty backlog.

• Vulnerability exploits now trigger 31% of breaches, edging out stolen credentials.

In August, the Monetary Occasions reported that Apple had began capping what number of vulnerability studies particular person researchers might undergo its bug bounty program, after a wave of fabricated findings — what safety researchers now name “AI slop” — overwhelmed Apple’s assessment staff. 

Caught in that backlog was a seven-person Milan startup that had been utilizing AI fashions to hunt for macOS bugs of its personal. Bynario’s chief govt, Alfredo Pesoli, advised the FT the flaw his staff had present in Apple’s Display screen Sharing know-how might fetch as much as $200,000 on the black market. Apple finally reviewed the submission and patched it.

Bynario has now turned that scrutiny into cash: the corporate has raised €2.1 million in pre-seed funding, led by 360 Capital Companions, with participation from PranaVentures.

Constructing the repair no one else gives

Bynario, based in 2025 by Alfredo Pesoli, Giancarlo Russo and Lorenzo Cavallaro, builds an autonomous software safety platform referred to as Atlas that scans code, cloud infrastructure and software program provide chains for exploitable flaws. 

Quite than flagging each doable challenge the way in which most scanners do, Atlas is constructed to verify which vulnerabilities are literally reachable in a buyer’s particular atmosphere, then prioritise and assist repair them. A scanner may flag a whole lot of theoretical weaknesses in an organization’s cloud setup. Briefly, Bynario’s pitch is to inform a safety staff which handful an attacker might exploit that week.

The pre-seed spherical will go towards increasing Bynario’s engineering staff and constructing out the platform for enterprise prospects, although the corporate has not disclosed particular hiring targets. 

It comes from 360 Capital Companions, a Paris- and Milan-based enterprise agency with greater than €700 million below administration and a portfolio of over 80 firms, together with robotics unicorn Exotec and fellow Italian cybersecurity startup Equixly. PranaVentures, the spherical’s different backer, merged with fund supervisor P101 SGR earlier this yr to kind a platform overseeing greater than €600 million.

“Defence at scale wants the identical depth as offense. Attackers are essentially incentive-driven. As AI continues to scale back the price of vulnerability analysis and exploitation, extra exploitable vulnerabilities develop into engaging targets. The problem for defenders is barely turning into extra acute,” mentioned Pesoli. 

AI is altering the cybersecurity arms race

Bynario is coming into a safety market the place almost each latest funding spherical has an AI angle, even when the targets differ. 

Escape raised $18 million in March to run AI brokers in opposition to dwell manufacturing techniques, looking for logic flaws that solely present up as soon as code is deployed. Qevlar AI raised $30 million the identical month to automate the alert investigations that swamp company safety operations centres. Mindgard raised $30 million in August to red-team AI fashions and brokers themselves, turning up flaws in instruments like Cursor and ChatGPT. 

Not one of the three covers what Bynario is making an attempt to personal: the complete loop from discovering a vulnerability, to proving it’s exploitable, to really closing it.

“Bynario’s method of autonomous vulnerability discovery, validation, prioritisation, and remediation is what is required in trendy cybersecurity,” mentioned Cesare Maifredi, associate at 360 Capital. 

Giancarlo Russo, Bynario’s co-founder and chief working officer, pointed to the staff’s combined background as the corporate’s edge: “We’ve assembled a staff of safety researchers, engineers, entrepreneurs, and teachers who perceive each the speculation and follow of cybersecurity. That mixture permits us to bridge the hole between cutting-edge safety analysis and sensible options that organisations can deploy at scale,” he added.

Bynario desires enterprises to belief AI to seek out and repair their vulnerabilities sooner than attackers can exploit the. Whether or not autonomous validation is the repair, or whether or not the business finally ends up needing people to referee the AI referees, is the open query.