Milan Startup’s Bet: Assume the Breach, Then Trap the Attacker
Most security tools try to keep hackers out. Beelzebub, an Italian AI-native cybersecurity startup, operates on a darker assumption: the bad guys are already in. And instead of just detecting them, the company wants to trap them.
That bet just got a serious cash infusion. The Milan-based firm announced it raised €3 million (roughly $3.4 million) in a seed round led by VC United Ventures. With this latest injection, the company’s total funding now stands at $3.8 million.
The Beelzebub Platform: A Closed Loop for Intruders
Founded in 2025, Beelzebub has built a platform that fuses red-team and blue-team tactics into a single response system. The core idea is simple: if you can’t stop every intrusion, make the intrusion itself a losing game for the attacker.
The platform’s approach is built on a few key pillars:
- Continuous adversary emulation – It actively probes for attack paths before real criminals exploit them.
- Runtime deception technology – LLM-powered traps that lure attackers into a controlled environment.
- Autonomous threat intelligence – When an attack is intercepted, the system automatically converts it into actionable defenses.
- AI analyst – Dissects malware, generates full incident reports, and contains affected systems instantly.
The whole loop is designed to isolate a threat, trigger incident response, and learn from the encounter — all without waiting for a human analyst to catch up.
On-Premises for the Paranoid (and the Regulated)
One of the more interesting angles is deployment flexibility. The platform works as a SaaS, but it can also run entirely on-premises. That’s a critical feature for organizations in sensitive environments — think critical infrastructure or government-adjacent sectors — that can’t send data to cloud-based tools.
NIS2-Ready and Backed by a Global Threat Intel Network
Beelzebub isn’t just building traps; it’s also plugged into a live intelligence feed from over 60 independent researchers worldwide. That’s a significant network for a startup that’s barely a year old.
The platform is also designed to be NIS2-ready out of the box. For European organizations scrambling to meet the EU’s updated cybersecurity directive, that’s a selling point that could open doors.
Where the Money Goes: Rome, San Francisco, and a Bigger Research Team
Founder and CEO Mario Candela has clear plans for the fresh capital. The company will expand its research team, open new offices in Rome and San Francisco, and aggressively pursue clients across Europe — with a focus on NIS2-regulated organizations.
“Cybersecurity is a nonstop battle, and one that humans can no longer fight alone,” Candela said. “AI-powered attackers are too powerful, too competent, too fast, and too numerous, meaning the only way to fight back is at the same pace and intensity.”
He emphasized that the product adapts to new malware and stays updated to match the current state of the most sophisticated attacks.
The Bigger Picture: AI vs. AI in Cybersecurity
Beelzebub’s approach reflects a broader trend in the industry. As attackers weaponize AI to automate their campaigns, defenders are being forced to respond with AI of their own. The days of relying solely on human analysts to spot and stop intrusions are fading fast.
The funding round also signals growing investor confidence in deception-based defense. It’s a niche but increasingly vital segment of the market, and Beelzebub’s hybrid red/blue team model gives it a distinctive position.
For those tracking the space, it’s worth watching how the company scales its threat intelligence network and whether its on-premises offering gains traction with NIS2-regulated firms.
Related coverage: AI-powered email security funding and composable security operations platforms have also drawn significant investment recently.
