In this episode of Cyber Security District podcast, we speak with Marco Ramilli, a cybersecurity visionaire, TEDx speaker, and founder of IdentifAI, a deepfake detection company working at the intersection of AI, trust, and digital identity. From writing early sandboxing papers to leading cyber defense teams and selling his previous startup to VirusTotal (Google), Marco has spent the last two decades safeguarding digital borders.
At IdentifAI, he’s now taking on one of the biggest threats of the AI era: manipulated content. Whether it’s fake insurance claims, fraud in football scouting, or synthetic identities onboarding to banks, his platform uses AI to detect AI: verifying whether images, voices, or videos were generated by humans or machines.
In this episode, Marco shares his founder story, why he believes the shift from deterministic to probabilistic computing will reshape cybersecurity, and how his latest startup scaled to enterprise use cases within a year.
In this episode, we cover:
Marco’s hacking origin story and first run-in with his university
Researching malware and voting systems at UC Davis
Founding his first cybersecurity company in Italy when the market wasn’t ready
Bootstrapping a business through 3+ years of break-even before momentum hit
Early ransomware response and reverse-engineering threats
Getting acquired by Tinexta and integrating into VirusTotal
Building IdentifAI to detect deepfakes using AI-powered forensics
From onboarding fraud to football scouting scams, real use cases
The rise of “digital performers” and the ethics of synthetic content
Why deterministic cybersecurity tools are no longer enough
The philosophical shift security teams must make to handle probabilistic models
Advice for scaling startups, hiring A-players, and letting go as a founder
His signal message to CISOs: curiosity will save us
Timestamps:
00:00 – Intro00:14 – Meet Marco Ramilli01:00 – Hacking the campus network (with a for loop!)02:15 – Getting caught, and hired for cyber research03:10 – Reverse engineering malware at UC Davis04:30 – Cybersecurity in Italy: too early, too expensive05:45 – Why compliance was seen as a cost06:20 – Building a company just to be the “owner of his time”07:00 – Early business struggles & staying focused08:30 – Why saying “no” saved his startup10:10 – On embracing failure and learning from loss11:30 – Curiosity, discomfort, and moving to the U.S.13:00 – Sleeping on floors and working without backup14:00 – Founding Yoroi, growing from 4 to hundreds of employees15:30 – The ransomware era and massive inbound traction16:45 – Sandboxing: research, papers, and real-world applications18:00 – Joining Google via acquisition19:30 – Startup phases and letting go as a founder21:00 – Hiring advice: don’t save money on great people23:00 – Launching IdentifAI: how a fake Pope jacket sparked a real mission25:00 – Building AI to detect AI: early model design27:00 – From 80% to 96% accuracy in deepfake detection28:00 – Why images are more dangerous than text29:45 – The weaponization of synthetic media31:20 – How IdentifAI detects voice, image, and video manipulation32:45 – Use cases: banking KYC, insurance fraud, and football scouting35:00 – API-first strategy and enterprise readiness36:30 – “Digital Performers” and the ethics of representation37:30 – Real-time meeting detection via agents39:00 – Why probabilistic AI is changing the rules40:00 – How cybersecurity must evolve to deal with uncertainty43:20 – Deployment flexibility: on-prem or private cloud46:20 – The philosophical challenge of non-deterministic systems49:30 – Final message to CISOs: stay curious
Connect with the guests:
Marco Ramilli: https://www.linkedin.com/in/marcoramilli/
Website: https://identifai.net/
Follow Cybersecurity District:
Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/
Website: https://www.cybersecuritydistrict.com/
All channels & newsletter: https://beacons.ai/cybersecuritydistrict
Show more...