Exein raises $270 million at $1.7 billion valuation to build security layer for physical AI

Exein, the Rome-headquartered cybersecurity company that specializes in protecting artificial intelligence systems operating in the physical world, announced on September 15, 2026 that it has raised $270 million (EUR 234 million) in a funding round led by Headline at a $1.7 billion (EUR 1.4 billion) valuation. The company said the round closed significantly oversubscribed, and it now claims the title of Europe's most valuable cybersecurity startup. The deal marks a thirty-fold increase in valuation over two years, according to Exein, and more than doubles the valuation from equity and debt secured in December 2025.

Founded in 2018, Exein began by embedding cybersecurity code directly into internet of things devices rather than guarding them only at the network level. That approach has evolved into what the company now calls Physical AI security, a category aimed at robots, drones, self-driving cars, sensors and smart appliances that run AI models on the edge. "The concept of Exein is that every device should be able to defend itself, regardless if they are connected to a secure network or not," CEO and founder Gianni Cuozzo told TechCrunch.

The urgency behind the raise is measurable. Exein says it now sees around 5,000 new, non-repetitive attacks across its network each week, five times the level recorded a year earlier. The company's technology spans more than two billion connected devices across aerospace, industrial automation, automotive manufacturing, energy, healthcare, semiconductors and robotics. Its latest product, Photon, is a preemptive runtime security architecture that runs at the kernel level to block malicious execution before an attack can run.

The funding round was led by Headline, with participation from Sofina, Goldman Sachs, the European Investment Bank Group through the European Tech Champions Initiative (ETCI), KfW Capital and T.Capital. Returning investors included Balderton, HV, Intrepid Growth Partners, 33N Ventures, Lakestar, Supernova Invest, Blue Cloud Ventures and Geodesic Capital. Alongside the equity round, Exein is upsizing its existing revolving credit facility led by J.P. Morgan, with KfW joining as an additional lender.

Key Facts

TechCrunch reported on September 15, 2026 that Exein's $270 million round was led by Headline at a $1.7 billion valuation on the promise of providing a cybersecurity layer for physical AI. The report noted that the company has worked closely with manufacturers since its inception, partnering directly with original equipment manufacturers and silicon vendors. Exein says its technology has secured more than two billion connected devices.

Tech.eu reported on September 15, 2026 that Exein's AI-powered technology spans more than two billion connected devices, and that the company's first half of 2026 annual recurring revenue was up four times year on year. The round was significantly oversubscribed, and Exein's valuation has increased thirty-fold in two years. The company launched Photon earlier this year, describing it as a kernel-level runtime security architecture designed to block malicious execution before an attack can run.

EU-Startups reported on September 15, 2026 that Exein raised EUR 234 million at a EUR 1.4 billion valuation, and that the company had previously raised a EUR 15 million Series B in 2024 and EUR 170 million across two announcements in 2025, including EUR 100 million in December 2025. Around 50 percent of Exein's revenue comes from Asia-Pacific, and the company established its APAC headquarters in Taiwan. Exein plans to introduce its new agentic security architecture by the end of 2026, with first foundation models expected in the first quarter of 2027.

PitchBook reported on September 15, 2026 that Exein's round is the largest to have closed this year, surpassing Israeli sovereign AI and cyber-defence startup Dream's $260 million investment in June. The report also noted that Exein launched Photon in March and that the system is designed to block malicious code before it executes. With the new funding, Exein plans a proprietary foundation model trained on two years of machine telemetry from over two billion connected devices.

Exein said in its own announcement on September 15, 2026 that the round funds United States and Asia-Pacific expansion as it builds the security layer for robots, drones, vehicles and other machines that use AI to act in the physical world. The company also confirmed that it is training a foundation model for Physical AI security on machine data and telemetry, and that it will power autonomous security agents. Exein opened a legal entity in Japan, with expansion planned for the fourth quarter of 2026, and a new office in South Korea is set to open by 2027.

Analysis

The bigger picture here is that Exein is not simply selling another endpoint security tool. It is betting that the next wave of cybersecurity demand will come from machines that take physical actions, not just from networks that store data. A compromised laptop can leak information, but a compromised robot, vehicle or power grid can cause immediate physical harm. That distinction is driving both the company's product roadmap and its valuation.

The numbers support the thesis, at least at the level of market interest. A thirty-fold valuation increase in two years, a fourfold rise in the first half of 2026 annual recurring revenue, and a round that closed significantly oversubscribed all suggest that investors see a large gap between the need for machine-time security and the supply of credible solutions. Exein's claim of 5,000 new non-repetitive attacks per week across its network, five times the volume from a year earlier, adds a concrete data point to the argument that attacks are scaling faster than traditional defences.

What this really means is that physical AI security is moving from a niche concern to a board-level priority. As AI models move out of the cloud and into robots, drones and industrial equipment, the patch window shrinks to near zero. Cuozzo said as much in a statement, noting that attacks now happen at machine speed, so defence has to as well. Exein's answer is to embed security at the kernel level through Photon and to train a foundation model on two years of machine telemetry so that autonomous agents can respond without human intervention.

The competitive landscape is also shifting. Exein's round is the largest to close this year in its category, ahead of Dream's $260 million in June, according to PitchBook. That size gives Exein room to pursue mergers and acquisitions across Europe and the United States, hire aggressively, and open a Bay Area office. It also puts pressure on rivals to match both the technical depth of a kernel-level runtime architecture and the breadth of a two-billion-device footprint.

Why It Matters

Europe has produced relatively few cybersecurity companies at this scale, and Exein's unicorn status is a signal that the continent can build category leaders in deep technical fields. The involvement of the European Investment Bank Group through the European Tech Champions Initiative, alongside KfW Capital, suggests that European public financial institutions are willing to back late-stage technology champions rather than leaving that role to United States investors alone. Headline, a United States investor, led the round, but the cap table now includes a mix of European and American capital.

The regulatory backdrop adds tailwinds. The European Union's Cyber Resilience Act, whose reporting obligations kicked off the week before the announcement and which comes into full force in December 2027, will require connected products to meet cybersecurity standards. For manufacturers of physical AI devices, compliance will be mandatory, and Exein's approach of embedding security directly into devices could become a default choice rather than an optional add-on.

For the wider technology industry, the raise underscores that AI's move into the physical world creates a new attack surface that cannot be secured by cloud-only tools. Healthcare equipment, energy grids, automotive systems and semiconductor manufacturing all depend on machines that make real-world decisions. If those machines can be compromised at machine speed, the consequences extend beyond data loss to safety, availability and public trust. Exein's bet is that security must be built into the machine, not bolted on afterward.

Next Up

Over the next two years, Exein plans to increase hiring, customers and partnerships in the United States, and it aims to open a new office in the San Francisco Bay Area. The company will also continue its Asia-Pacific expansion, building on its Taiwan headquarters and its planned Japan entity in the fourth quarter of 2026 and South Korea office by 2027. Around half of its revenue already comes from Asia-Pacific, so the region is not a future bet but a current engine.

On the product side, Exein intends to ship its agentic security architecture by the end of 2026, with first foundation models expected in the first quarter of 2027. The foundation model is being trained on two years of machine telemetry from more than two billion devices, data that Exein argues is fundamentally different from human-generated text because it captures how machines actually behave. If the company can turn that telemetry into autonomous security agents that protect the systems they run on, it will have moved beyond device-level defence toward a broader security layer for physical AI. The coming quarters will show whether the valuation reflects durable demand or a temporary surge in enthusiasm.