Pomegra
Milan cybersecurity startup Bynario closes a €2.1M pre-seed led by 360 Capital, building an AI platform that confirms which software vulnerabilities are genuinely exploitable in enterprise environments.
- Bynario raised €2.1M pre-seed led by 360 Capital, with Prana Ventures co-investing, announced September 10, 2026.
- Its Atlas platform confirms whether vulnerabilities are actually reachable in a customer's deployment - not just theoretically flagged.
- Founders previously used AI to surface macOS Screen Sharing flaws estimated to be worth $100K-$200K on underground exploit markets.
Lead
Milan-based Bynario closed a €2.1 million pre-seed round on September 10, 2026, to push its AI-driven application security platform toward commercial scale. The round was led by 360 Capital, with Prana Ventures participating. Valuation was not disclosed. Founded in 2025 by Alfredo Pesoli, Giancarlo Russo, and Lorenzo Cavallaro, the company targets enterprise security teams buried in vulnerability backlogs they cannot realistically clear without smarter triage.
What Does Bynario's Platform Actually Do?
Atlas, the company's core product, scans code repositories, cloud infrastructure, and software supply chains - then does something most scanners skip: it confirms whether a given flaw is actually reachable in a specific customer environment. The result is a filtered, prioritized list rather than a raw count of theoretical exposures.
The distinction matters in practice. Vulnerability backlogs at large enterprises routinely run into the tens of thousands. Existing triage methods - CVSS severity scores, asset classification, manual review - still demand significant analyst time. Bynario's claim is that AI-driven reachability analysis can compress that cycle, letting security teams act on what is genuinely dangerous rather than what is merely present.
What Convinced Investors to Back a 2025-Founded Startup?
The pre-seed case rests less on product maturity than on a concrete proof of capability: before raising, Bynario's researchers used frontier AI models to identify previously undisclosed vulnerabilities in Apple's macOS Screen Sharing technology. Those flaws were reported to Apple and subsequently patched. CEO Pesoli put the underground market value of the exploit chain at between $100,000 and $200,000 - a dollar figure that grounds the research in real-world risk rather than academic exercise.
For early-stage cybersecurity bets, demonstrated offensive capability typically carries more weight than a feature roadmap. Investors backing a team that already found real bugs in a globally deployed OS face a different risk profile than those backing a team that has only described what it might find. It also creates a recruiting signal: security researchers tend to follow teams with proven track records.
360 Capital's participation continues a visible pattern of European venture funds increasing exposure to applied-AI security tooling. Italy's cybersecurity startup ecosystem remains comparatively thin, which gives Bynario less local competition while still allowing it to draw talent from universities with strong systems-security programs - including researchers with backgrounds at institutions where two of the co-founders have worked.
How Crowded Is the Market?
Application security posture management and vulnerability prioritization have drawn sustained capital over the past three years. Established platforms and better-funded startups already occupy the enterprise sales cycles Bynario is entering. Several competitors have also claimed AI-native reachability analysis as their differentiator, with varying results in production environments.
What separates Bynario's early narrative is specificity: a named target company, a named technology, patched CVEs, and an underground valuation. Most early-stage security vendors offer positioning statements. Bynario offered receipts. Whether that translates into signed enterprise contracts is a separate question the €2.1M will need to answer before the company can approach a seed round.
Outlook
Bynario will deploy the capital toward engineering headcount and Atlas development. The pre-seed size constrains runway - 12 to 18 months is a reasonable upper bound depending on team size - which means the company needs to move from pilots to paying contracts quickly. The Apple research gives it credibility in sales conversations, but enterprise buyers will expect Atlas to deliver the same precision inside their own environments that Bynario demonstrated against a global technology company. If it can, the next round writes itself. If the platform proves harder to generalize, it joins a long list of impressive security research projects that never fully crossed into product.
