Bynario raises €2.1M Pre-Seed to build an autonomous platform for vulnerability discovery and remediation

Bynario (Milan) has raised €2.1 million in a pre-seed round led by 360 Capital Partners, with participation from PranaVentures. Founded in 2025 by Alfredo Pesoli (CEO), Giancarlo Russo, and Lorenzo Cavallaro, the company is building an autonomous application security platform designed to do what most vulnerability scanners do not: distinguish between vulnerabilities that are theoretically present in a codebase and those that are actually exploitable in the customer's specific deployment environment.

The exploitability question

The dominant problem in enterprise application security is not a shortage of vulnerability data — it is the opposite. Automated scanners routinely surface thousands of potential exposures per application, generating alert fatigue: security teams cannot prioritise remediation work when everything appears equally urgent. Bynario's stated differentiator is a platform that identifies vulnerabilities across code, cloud infrastructure, and the software supply chain, then validates which are genuinely exploitable in a given deployment context, prioritises by real-world risk, and drives remediation autonomously.

Alfredo Pesoli: "Attackers are fundamentally incentive-driven. As AI continues to reduce the cost of vulnerability research and exploitation, more exploitable vulnerabilities become attractive targets. The challenge for defenders is only becoming more acute."

The Verizon 2026 Data Breach Investigations Report provides the market context: software vulnerabilities are now the most common initial access vector in enterprise breaches, accounting for 31% of incidents — a sharp increase from prior years and a category that is growing faster than the tooling designed to address it.

The Apple disclosure

In August 2026, Bynario's AI research identified serious vulnerabilities in Apple macOS Screen Sharing technology. The team disclosed the findings to Apple following responsible disclosure protocols; Apple acknowledged the report and issued patches. The Financial Times reported the disclosure. It is the kind of credibility signal that a pre-seed company in cybersecurity cannot manufacture: independent validation of the platform's capability against a widely-scrutinised production system, completed before the company's first institutional round.

Cesare Maifredi of 360 Capital Partners: "Bynario's approach of autonomous vulnerability discovery, validation, prioritisation, and remediation is what is needed in modern cybersecurity. We are proud to stand alongside them as they build this game-changing AI-based platform from the ground up."

The use of funds points to platform development, engineering team growth, and scaling to enterprise demand. Founded one year ago, the round size is modest relative to the problem scope — but the Apple disclosure and the Verizon data give Bynario a demand signal most pre-seed security companies do not carry into their first institutional round.