Start up

Cleafy closes a 12 million round led by United Ventures and eCapital

The deal brought the total funding raised by the Milan-based cybersecurity company specialising in banking to EUR 22 million

by Mo.D.

www.simonabertogliatti.it

3' min read

Translated by AI
Versione italiana

3' min read

Translated by AI
Versione italiana

Round da raised EUR 12 million for Cleafy, led by United Ventures and Germany's eCapital. The deal brought the total funding raised by the Milan-based cybersecurity company specialising in the banking sector to EUR 22 million. The start-up serves over 150 financial institutions in Europe and Latin America and protects more than 250 million end users; customers include Ing, Bcc Iccrea Group, Illimity Bank and Bps (Suisse).

"Cleafy represents the kind of European technology leadership we need to protect critical infrastructure. As fraud becomes more sophisticated, anticipating and stopping attacks before they materialise is no longer a competitive advantage, but a necessity. Cleafy's solid growth and outstanding customer loyalty prove that Cleafy has built something truly unique. We are proud to accompany the company in this new chapter,' observes Fabio Pirovano, partner at United Ventures.

Loading...

Future Developments

"With this transaction, Cleafy consolidates its position in the industry as a platform capable of reconstructing and stopping the entire chain of a fraudulent cyber-attack days in advance of when the damage occurs. The new capital will be deployed to accelerate the development of the predictive platform, enhance threat analysis on a global scale, and drive expansion into key banking markets in Europe and Latin America," reads the company's statement.

"Cleafy has a clear technical differentiation: it takes cross-channel telemetry and threat analysis and turns them into a clear picture of who is attacking, how and with what tools. The solution is also designed to work in concrete terms in complex banking environments, not just in theory. We are happy to join Cleafy in making this technology a cornerstone of critical financial infrastructure protection,' says Lucas Merle, partner at eCapital.

Cleafy works by reconstructing how attacks are born, evolve and spread across digital channels and internal systems. By combining web, mobile, backend and network telemetry with real-time global threat analysis, the platform is able to detect hostile infrastructures, attackers' intentions and their patterns in time - transforming prevention from exception to rule. With the launch of Cleafy for Workforce, the approach now also extends to the detection of insider threats and compromised accounts within corporate systems.

The round comes at a time when European regulations - such as DORA (Digital Operational Resilience Act) and the cybersecurity requirements introduced by NIS2 - are raising the bar on digital resilience in the financial sector.

"While fraudsters exploit AI to launch attacks at an ever-increasing scale and speed, European banks are still defending themselves with outdated, reactive tools. Cleafy was created to reverse this logic: we reconstruct how an attack is formed and stop it weeks before it can cause damage. The fact that we have never lost a customer in over ten years proves that this approach works,' comments Matteo Bogana, CEO and co-founder of the start-up.

Practical example

A group of criminals buys stolen credentials on the dark web and probes the login portal by entering only usernames - not passwords - to map active accounts. Cleafy detects behaviour in the reconnaissance phase, before a single account is touched. The attackers change tactics and spread a counterfeit app on unofficial stores, infecting some 20 devices with mobile malware (documented variants: TrikMo, DroidBot);

Cleafy identifies them within hours. The bank intervenes with targeted measures only on the risky sessions, making the attack unreplicable on a scale: the campaign is abandoned before it generates losses, which in similar documented cases could have reached EUR 7.5 million.

The entire response is managed by a team of three, which now covers end-to-end anti-fraud operations that previously required significantly more resources.

Copyright reserved ©
Loading...

Brand connect

Loading...

Newsletter

Notizie e approfondimenti sugli avvenimenti politici, economici e finanziari.

Iscriviti