Cleafy

Cleafy argues that digital banking fraud starts before login and continues through payment, so it watches each session rather than only the transaction. It calls the approach Fraud xDR and stitches signals across sessions, users and devices into one attack narrative.

The company says it was born in Milan in 2014 and launched Cleafy SaaS in 2019. The site footer names Cleafy S.p.A. at Via Meravigli 16, Milan.

Whole sessions, not single payments

Cleafy watches web, mobile and API sessions from pre-login to payment, tracking each step an attacker takes. Account takeover, authorised push payment scams and live session manipulation are the cases it names.

Every case arrives with evidence attached, according to the vendor, rather than as an opaque score.

Shared threat intelligence

A pattern seen at one bank is propagated across the network, so the next target does not see the same attack land. This is a collective-defence model, so your attack data contributes to the network.

The company lists banks including BCC Iccrea Group among references.

Nyx autonomous operations

Nyx is presented as autonomous AI investigation that runs continuously and reduces the human throughput ceiling in fraud operations. The page makes the claim without published benchmarks.

Treat it as a roadmap item to test in a pilot.

Limitations to Consider

Cleafy targets banks, payment institutions and lenders, so it is not a fit for an online shop that wants to screen checkouts. There is no public price and the entry point is a contact request. The autonomous Nyx claims come without published evaluation data on the page read.

Who Should Use Cleafy

Banks and payment providers that need to detect account takeover and scams inside digital sessions and want an Italian vendor with shared threat intelligence.