Autonomous SOC & NOC — Custom AI, On-Premise, Fully Compliant
Ed Dulharu — CTO & Founder
Munich, Germany | ed@vexpertai.com
Two crises converging — one kills uptime, one kills security
Not a cloud API. Not a wrapper. A purpose-built, on-premise AI defence platform.
Classifies every alert via 4-track ML engine. Eliminates noise before it reaches humans. Sub-30 second detection.
Evidence-grounded root cause analysis. Pulls real data from SIEM, EDR, and network flows. Every verdict requires citations.
Detects AI-generated threats via behavioural ML, byte-level malware analysis, semantic phishing detection, and TLS fingerprinting.
Proactive threat hunting across the network graph. Connects dots across hosts, users, and time that no individual alert reveals.
Executes containment with human approval gate and pre-registered rollback. Every action is reversible. Nothing touches production unvalidated.
On-premise deployment is not a feature — it is the compliance architecture.
All model weights, training data, and inference run on customer infrastructure. No third-party AI provider dependency. No cloud vendor lock-in. No cross-border data transfer. This is the only architecture that simultaneously satisfies DORA, NIS2, EU AI Act, and GDPR requirements.
Each layer compounds the next; no competitor can replicate the full stack
Not a GPT wrapper. Six specialist models fine-tuned on proprietary NOC/SOC operational data — each optimised for its specific role. Model weights are vExpertAI IP. No generic model achieves this precision.
Domain expertise accumulated over 20+ years at AT&T, Infosys, and Kyndryl — encoded into proprietary fine-tuning datasets no competitor can replicate. 100K+ training entries per domain model.
Zero data leaves the customer network. This is the only reason telcos, energy utilities, and financial institutions will trust an AI system with live critical infrastructure — and it is a structural barrier to cloud-native competitors.
Every remediation action is tested against a Containerlab replica of the live network before touching production. No hallucinated configurations on live networks. Ever.
Miss this window and hyperscalers own the category
2026 marks the first large-scale deployment of AI-generated cyberattacks against critical infrastructure. Human-speed SOC is already insufficient. Every day without AI defence is measurable risk.
DORA became fully applicable in January 2025. NIS2 enforcement is active across 18 sectors. The EU AI Act high-risk provisions apply now. Regulated entities must act — and cloud AI tools cannot meet these requirements.
AWS, Microsoft, and Google all have network management and security AI products in active development. The window to build a defensible, domain-specific model closes in 18 months. First-mover with proprietary data wins.
The EU faces a 500,000+ cybersecurity professional shortage. Telecom operators cannot hire NOC engineers fast enough. Automation is not a nice-to-have — it is an operational necessity, right now.
Every prospect is in a DORA/NIS2-regulated vertical — compliance urgency is the opening
| Organisation | Sector | Stage | Est. Value | Notes |
|---|---|---|---|---|
| European Defence & Aerospace Group | Defence | Engagement in Progress | €150K | AI Champions training — 192-hour curriculum submitted |
| Luxembourg Energy Grid Operator | Energy / NIS2 | Warm Intro | TBD | Met at STARTUPLAND Köln — follow-up in progress |
| French IT Consultancy Multinational | Telecoms / NIS2 | Meeting Confirmed | €80–120K | AI upskilling program — Paris meeting April |
| UK IT Infrastructure Consultancy | IT Services | Early Conversation | TBD | IT infrastructure consultancy — early stage |
| Global Energy Technology Group | Energy / DORA | Inbound Interest | TBD | Network & cloud ops — senior technical contact engaged |
Target: €600K ARR end-2026 → €3M ARR end-2027 → €12M ARR end-2028
Annual platform license per MSP or mid-market operator. Recurring, high-margin. On-premise deployment means no cloud infrastructure cost for vExpertAI.
Multi-year contracts with Tier-1 telcos and critical infrastructure operators. Per-network deployment. DORA/NIS2 compliance requirement drives multi-year commitment.
Deployment, integration, custom model fine-tuning, and compliance documentation. One-time per customer. Accelerates time-to-compliance for regulated clients.
License vExpertAI NET domain models to system integrators and security vendors who need on-premise AI inference without building from scratch.
Hiring with this round to execute go-to-market and accelerate model development
CTO & Founder, vExpertAI GmbH · Munich, Germany
20+ years network & security architecture at AT&T, Infosys, Kyndryl | MSc IT Security, Military Technical Academy Bucharest | Lecturer in AI for Networks, Politehnica Bucharest | Builds and fine-tunes reasoning models and AI agents from first principles on proprietary NOC/SOC data
| Role | FTE | Focus Area |
|---|---|---|
| Founder / CTO | 1.0 | Product, AI architecture, enterprise sales leadership |
| Business Development / Sales | 2.0 | Telco, MSP, energy sector — DORA/NIS2 pipeline |
| Data Scientists | 1.5 | Model fine-tuning, domain dataset expansion |
| AI Research Interns | 1.5 | vExpertAI NET model development, benchmarking |
| Legal Compliance & IP | 0.5 | EU AI Act conformity assessment, DORA/NIS2 documentation, IP protection |
| Marketing & Social | 0.5 | Thought leadership, conference presence, pipeline support |
| Penetration Tester Pro | 0.5 | Red team validation, customer proof-of-value testing |
This round funds the team and infrastructure to close the pipeline already in conversation.
Six specialist models fine-tuned on 20+ years of proprietary NOC/SOC data. No generic LLM achieves this precision. The model weights are vExpertAI IP.
Zero data leaves the customer network. This is not a feature — it is the architecture that makes vExpertAI the only viable AI security platform for DORA, NIS2, and EU AI Act regulated entities.
The founder built the infrastructure he is now automating. The regulatory window is open. The pipeline is real. The market is mandatory.
Ed Dulharu — CTO & Founder
ed@vexpertai.com · Munich, Germany · vexpertai.com
AI-Speed Defence for AI-Speed Threats — Built in Europe, Compliant by Design.