Kikimora.io is a clear example of an agent-first approach to a vertical domain—in this case, Security Operations (SecOps). While most security tools are reactive dashboards, Kikimora introduces an AI Agent that actively orchestrates tasks across a distributed stack. This agent handles the 'connective tissue' between tools like AWS Security Hub and GitHub, performing the correlation tasks that previously required human manual labor.
Within the agent ecosystem, Kikimora is active in the remediation and orchestration layer. They are championing the idea that an agent should not just inform a user, but also prepare the fix. Their focus on 'one-click remediation' highlights a move toward autonomous defense where the agent identifies the problem, formulates the solution, and only waits for human approval to execute. This makes them a relevant player for those interested in the real-world application of agents in high-stakes, multi-tool environments.
Modern security teams operate in an environment where data is scattered across ten or more streams. A single organization might run workloads on AWS, protect their edge with Cloudflare, and manage code on GitHub. Each of these platforms generates its own alerts, logs, and vulnerability reports. For a small to medium-sized enterprise, the work required to log into these disparate consoles, cross-reference risks, and execute a response creates a bottleneck that leads to high breach costs and low analyst productivity.
Kikimora.io, founded in 2022 and based in Sofia, Bulgaria, aims to solve this coordination problem. The platform is a central point of decision for security operations. It moves away from the traditional model of vulnerability management, which typically involves static lists and manual spreadsheets, and toward a model of unified intelligence. The core of this transition is the Kikimora Agent, an AI-driven tool that unifies context across the entire stack.
The Kikimora Agent is designed to act as an orchestrator rather than a simple scanner. In a traditional workflow, a security analyst must manually check Azure Defender, review Cloudflare WAF logs, and then correlate that risk with active deployments. This process takes minutes or hours per incident. Kikimora's simulation data suggests their agent can perform these same steps—orchestration, checking, reviewing, and correlation—in near-real-time.
The interface is built around 'conversational orchestration.' This allows users to talk to their security stack, asking questions about infrastructure, code, and logs. The agent provides solutions rather than just listing symptoms. If a risk is identified, the agent presents a remediation plan that the user can approve with a single click. This human-in-the-loop approach aims to reduce the reliance on deep internal security expertise, making it a viable option for organizations that lack a massive SOC team.
The company emerged from the Sofia tech ecosystem, with connections to SoCyber, a cybersecurity firm also founded by Krasimir Kotsev. Kotsev, who leads the team, has built Kikimora with an initial focus on SMEs that are frequently underserved by enterprise-grade security tools. The company raised a $1.1M seed round in early 2024 to expand its reach, specifically targeting regions like Nigeria for international growth.
Kikimora's product includes a 'Smart Score,' a proprietary ranking system that helps teams prioritize remediation based on actual organizational impact rather than generic severity scores. This is paired with continuous monitoring via endpoint agents, ensuring that compliance and infrastructure changes are tracked in real-time. By aggregating multiple scanners and techniques into one dashboard, they aim to eliminate the blind spots that exist between specialized security tools.
Kikimora sits at the intersection of vulnerability management and autonomous security. While many companies offer dashboards that aggregate data, Kikimora is part of a new cohort focusing on the 'agentic' layer—the part of the stack that actually takes action or prepares remediation. They compete against both legacy vulnerability scanners and modern Security Orchestration, Automation, and Response (SOAR) platforms. Their differentiator is the simplicity of setup and the conversational interface, which is designed to lower the barrier to entry for effective security operations.
An AI agent that unifies security operations and automates remediation.
Kikimora.io is hiring.