Exein's $270 million round tests whether embedded security can become the control layer for physical AI. Rome-based Exein said on September 15 that it has raised $270 million at a $1.7 billion post-money valuation, a large financing for a company focused on the part of cybersecurity most software buyers rarely see: the firmware and runtime layers inside connected devices. The round matters because it signals where investors think the next security bottleneck sits as AI moves off the screen and into robots, vehicles, industrial systems, medical equipment, and grid-connected hardware. According to Exein's announcement, the round was led by Headline and included Sofina, Goldman Sachs, the EIB Group through the European Tech Champions Initiative, KfW Capital, T.Capital, and existing backers. Exein said the financing was significantly oversubscribed and that the proceeds will support expansion in the U.S. and Asia-Pacific, acquisitions, and a product roadmap aimed at what it calls physical AI security. The company is also expanding a revolving credit facility led by J.P. Morgan, with KfW joining as an additional lender. The real question for readers is not whether investors can produce another European unicorn. It is whether an embedded-security vendor can become a meaningful control point for physical AI systems - and what a device maker or infrastructure operator should verify before treating that claim as part of a safety or resilience program. Why investors are backing the device layer now. Exein, founded in 2018, sells embedded and runtime security for connected devices. Its Photon product is described as a kernel-level runtime architecture designed to stop malicious execution before it occurs. That pitch lands differently in physical AI than it does in enterprise SaaS. When a cloud application is compromised, the damage is often confined to data, accounts, or business processes. When a robot, drone, controller, vehicle, or medical device is compromised, the consequences can spill into uptime, operations, and safety. That helps explain why capital is flowing toward firmware, runtime enforcement, machine telemetry, and the OEM-and-silicon relationships needed to get security into devices before they ship. It also helps explain why regulation is becoming part of the commercial backdrop. As TechCrunch reported, Exein is targeting U.S. and Asia-Pacific expansion, with Asia-Pacific already accounting for about half of its revenue. At the same time, the EU's Cyber Resilience Act has begun adding reporting obligations in 2026 and is scheduled to apply fully in December 2027, increasing pressure on manufacturers to show that connected products can be monitored, updated, documented, and defended. That does not make Exein the default answer. But it does create a stronger commercial reason for OEMs, component suppliers, and operators to ask whether device-level controls are sufficient, auditable, and economical. The gap between a big funding round and deployment proof. Exein says its technology is deployed across more than two billion connected devices spanning industrial automation, automotive, energy, healthcare, semiconductors, aerospace, and robotics. It also says it sees about 5,000 new, non-repetitive attacks per week across that network, five times last year's volume. TechCrunch independently corroborated the funding, valuation, the more-than-two-billion-device figure, the kernel-level positioning, and Exein's plan to release its first physical-AI foundation models in the first quarter of 2027. What those numbers do not yet answer is the procurement question. Coverage to date does not establish how many of those devices actively run Photon, how Exein defines an "attack" or "non-repetitive," what share of those events were blocked, or which customers are paying for which level of service. A device count, even a very large one, can reflect different kinds of deployment: broad but shallow integrations through silicon or OEM partners, deeper installations in narrower fleets, or a mix of monitoring and prevention modes. For buyers, those distinctions are more important than the valuation. The same caution applies to the roadmap. Exein says an agentic security architecture will ship by the end of 2026 and that its first physical-AI foundation models are expected in Q1 2027. That is a signal about where the company thinks the category is going: from static protection toward more automated analysis of machine behavior and threat telemetry. But it is still a roadmap, not field proof. What OEMs and operators should ask before they buy. The embedded-security business is won or lost in integration work. Exein's model depends on working with original-equipment manufacturers and silicon vendors, which means the technology must fit device-development cycles, certification processes, support contracts, and low-margin hardware economics. For engineering teams, the first questions are technical and concrete. Which operating systems and chip architectures are supported? How does Photon interact with real-time constraints? What latency, CPU, memory, and power overhead does it add? What are the failure modes if the protection layer crashes, misclassifies behavior, or blocks a legitimate process? Can policies be tuned per device class without creating a support nightmare? Then come lifecycle controls. How are patches delivered? What rollback options exist if an update breaks a field deployment? How do secure boot, signed updates, hardware roots of trust, and runtime enforcement work together? A kernel-level product can be valuable here, but it is not a substitute for those other controls. Buyers should treat it as one layer in a system that still needs segmentation, asset inventory, human incident response, and disciplined software maintenance. Telemetry governance matters just as much. Who owns the machine data generated by detection and response? Where is it stored? How long is it retained? Can operators keep analysis on premises or within a specific geography? If a device is part of critical infrastructure or healthcare, the security stack has to fit data-handling rules as well as threat models. Commercial diligence is equally important. What incident-response commitments are attached to the service? Is there a documented escalation path when a field device shows anomalous behavior? Does the vendor help generate SBOM-related evidence, vulnerability documentation, and reporting support relevant to the Cyber Resilience Act? And for commodity or low-margin devices, does the per-unit economics work once integration, support, and update obligations are included? The most persuasive proof would be repeatable deployment evidence: named reference customers where possible, clear descriptions of integration effort, measured performance overhead, audited security outcomes, and examples showing how runtime protection reduced operational risk without destabilizing the device. Exein has the capital to chase that proof at scale. The funding round shows that investors believe the control layer for physical AI could sit closer to the machine, not just at the network edge or in the SOC. Whether Exein turns that belief into a durable business will depend less on the headline valuation than on something harder to manufacture: evidence that OEMs can integrate the software cleanly, operators can trust its behavior under stress, and regulators will accept its outputs as part of a real compliance and resilience program. Emily Johnson, a seasoned journalist with a penchant for tech innovations and digital culture, has been enlightening BizTech Weekly's readers since its inception. With a background in computer science and a master's in journalism, Emily bridges the gap between complex tech concepts and everyday usability, making her columns a must-read for tech enthusiasts and novices alike.

Physical AI security startup Exein raises $270M at $1.7B valuation. Italian cybersecurity startup Exein SpA today announced that it has raised $270 million at a valuation of $1.7 billion to build security for robots, vehicles and other machines that run artificial intelligence. The company described the round as significantly oversubscribed. Exein was valued at $700 million as recently as December, when it closed a €100 million round, according to TechCrunch. The Rome-based company has been around since 2018, and its early work centered on putting security software inside the firmware of internet of things devices so they could protect themselves without leaning on the network around them. The idea, founder and Chief Executive Gianni Cuozzo told TechCrunch, is that "every device should be able to defend itself." More than 2 billion devices now carry Exein's code, in sectors that include automotive, energy and robotics. Photon, released earlier this year, runs at the operating system kernel and is meant to stop malicious code before it executes. Across that installed base, Exein said, it now sees about 5,000 new, nonrepetitive attacks a week, five times the level of a year ago. Frontier models are "pushing the patch window to zero," Cuozzo said. In his view, defense now has to run at the same machine speed as the attacks. Two years of telemetry from those devices is being used to train a proprietary foundation model for physical AI security. An agentic security architecture is due to ship by the end of the year, and the first of the foundation models should follow in the first quarter of 2027. Asia-Pacific accounts for around half of Exein's revenue, and the company said annual recurring revenue in the first half of the year came in at four times the level of a year earlier. Exein has set up a regional headquarters in Taiwan and a legal entity in Japan, where it plans to expand in the fourth quarter, and a South Korea office is slated to open by 2027. Exein named the U.S. as a priority for the new capital, and an office in the Bay Area will open as part of that push. Acquisitions in Europe and the U.S. are another use for the money. To help pay for those deals, Exein has upsized a revolving credit facility that JPMorgan Chase & Co. leads, and German state development bank KfW has come in as an additional lender. Headline Management GmbH led the round, and partner Clarey Zhu said securing the physical world "will become one of the defining cybersecurity challenges of the next decade" as AI moves into robots, vehicles and critical infrastructure. The rest of the investor list runs to 13 names. New backers Sofina SA, Goldman Sachs Group Inc., the European Investment Bank Group through its European Tech Champions Initiative, KfW Capital GmbH & Co. KG and T.Capital came in alongside existing investors Balderton Capital, HV Capital, Intrepid Growth Partners, 33N Ventures, Lakestar, Supernova Invest, Blue Cloud Ventures and Geodesic Capital. Investors have now put more than $600 million into Exein, according to SecurityWeek. Image: Exein. A message from John Furrier, co-founder of SiliconANGLE: Support its mission to keep content open and free by engaging with theCUBE community. Join theCUBE's Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities. * 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more * 11.4k+ theCUBE alumni - Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from its Marketplace portal page and links: https://siliconangle.com/aws-marketplace/. About SiliconANGLE Media. SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios - with flagship locations in Silicon Valley and the New York Stock Exchange - SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Its new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.

Command palette. 3 hours ago Italian cybersecurity startup Exein has closed a $270 million funding round led by Headline, elevating the Rome-based company to a $1.7 billion valuation. The oversubscribed investment marks a thirty-fold valuation increase since the firm's Series B two years ago, reflecting strong investor confidence in Exein's strategic pivot from internet of things protection to cybersecurity for physical AI. Under the direction of CEO and co-founder Gianni Cuozzo, the company is engineering a defensive architecture designed to operate autonomously on edge devices, independent of external network security. Exein's core offering, Photon, delivers kernel-level runtime security that neutralizes threats before they compromise hardware. Since its founding in 2018, the startup has prioritized direct collaboration with original equipment manufacturers and silicon vendors, embedding protection mechanisms directly into the supply chain. This vendor-first strategy has enabled Exein to secure more than two billion connected devices across critical infrastructure sectors, including aerospace, industrial automation, automotive manufacturing, energy, healthcare, and semiconductors. The firm attributes its current expansion to the rapid commercialization of physical AI, which relies on identical hardware ecosystems to power robotics, autonomous vehicles, drones, and smart appliances. Security threats are accelerating alongside this hardware shift. Cuozzo reports a measurable increase in machine-speed attacks, driven by unregulated open-source AI models that reduce the cost and complexity of targeting physical endpoints. To counter this threat landscape, Exein is developing a foundational AI security model trained on device telematics and operational data, with full deployment targeted for the first quarter of 2027. The newly raised capital will primarily finance strategic mergers and acquisitions to consolidate its product portfolio, alongside recruiting initiatives to accelerate market penetration in the United States and Asia Pacific, regions that currently generate half of the company's annual revenue. Cuozzo notes that scaling operations across three continents has presented logistical challenges, though the multinational footprint has contributed to a 400 percent year-over-year growth rate. External regulatory developments are further amplifying market demand for Exein's solutions. The European Union's Cyber Resilience Act entered its initial reporting phase last week and will be fully enforceable by December 2027. The legislation mandates rigorous security standards for all digital products, compelling manufacturers to integrate robust protection mechanisms directly into hardware design. Exein's hardware-embedded, vendor-agnostic approach positions the company to capitalize on both this compliance wave and the expanding global footprint of physical AI across industrial and consumer markets. This news is intelligently aggregated by AI to deliver industry updates efficiently. It does not constitute opinions or advice. TechCrunch