Exein Raises $270M at $1.7B to Secure Physical AI
Update, Oct. 20: a month on, Exein's raise still reads as the month's European cyber headline — tech.eu listed the $270M round among September 2026's top 10 European tech deals. Fresh detail on the installed base has also surfaced: TMC Insight reports Photon is now present across more than 2 billion chips from vendors including Nvidia, Arm, MediaTek and AWS, underscoring the distribution moat the funding is meant to widen. The next milestones remain the agentic security architecture due by end-2026 and the first proprietary foundation models in Q1 2027.
Europe has a new cybersecurity unicorn — and it is betting that the next big security war won't be fought in the cloud. It will be fought inside the machines.
Italian startup Exein announced this week that it has raised $270 million at a $1.7 billion valuation to build what it calls the security layer for physical AI: the robots, drones, vehicles and factory systems that use artificial intelligence to perceive, decide and act in the real world.
The round, led by US investor Headline and significantly oversubscribed, values the Rome-based company at thirty times what it was worth just two years ago — and makes Exein, by its own account, the most valuable cybersecurity startup in Europe. (PitchBook ranks it third, behind Nord Security and Terra Quantum, which agreed a $3.5 billion SPAC deal in May.)
Alongside the equity round, the company upsized its existing revolving credit facility led by J.P. Morgan, with KfW joining as an additional lender. Total funds raised now exceed $600 million.
From IoT to physical AI
Exein has been preparing for this moment since 2018. Founded in Rome, the company started by embedding cybersecurity code directly into internet-of-things devices rather than guarding them from the network. The philosophy, as founder and CEO Gianni Cuozzo told TechCrunch: every device should be able to defend itself, regardless of whether it is connected to a secure network or not.
That conviction drove an unusual go-to-market strategy. Exein worked directly with device manufacturers and silicon vendors — a slow, partnership-heavy route that has now compounded into remarkable reach. The company says its code ships on more than 2 billion connected devices, in sectors where a cyberattack could be paralyzing: aerospace, industrial automation, automotive manufacturing, energy, health care and semiconductors.
Physical AI — intelligent machines running models on the edge — uses the same supply chain. That is the bet behind the $270 million: the factories already building connected devices are the same ones now shipping AI-powered robots and vehicles, and Exein is already inside.
The patch window is closing
The urgency is not theoretical. Across its installed base, Exein says it now sees about 5,000 new, nonrepetitive attacks per week — five times the level of a year ago. Frontier AI models are "pushing the patch window to zero," Cuozzo says. "Attacks now happen at machine speed, so defense has to as well."
AI is cutting both ways. The same open-source models that power innovation run without guardrails, Cuozzo notes, making it dramatically cheaper and easier to target physical devices with novel attacks. A compromised sensor or a hijacked robotic arm is not a data breach — it is a safety incident.
Photon: security at machine speed
Exein's answer is Photon, its preemptive runtime security architecture, launched earlier this year. Photon operates at the operating system's kernel level and blocks malicious code before it executes — stopping an attack in real time, before it can have an impact.
The approach suits autonomous machines precisely because it assumes the worst: no reliance on a connection to a security operations center, no waiting for a patch, no human in the loop. For a self-driving car or an industrial robot, security that cannot respond at machine speed is security theater.
A foundation model for machine defense
With the new funding, Exein plans to go deeper. The company is training a proprietary foundation model on two years of machine telemetry from its more than two billion secured devices — real-world data about how machines actually behave when they are attacked.
The model will power autonomous security agents that protect the systems they run on without human intervention. An agentic security architecture is due to ship by the end of this year, with the first of the foundation models following in the first quarter of 2027.
"AI is moving out of the cloud and into the physical world, and this is the transition Exein was built for," Cuozzo said. "We've developed deep expertise in how machines operate, invested heavily in the technology needed to protect them, and built a global footprint that gives us an understanding of machines at a scale few others can match."
The numbers behind the bet
The round's investors span the Atlantic: Sofina, Goldman Sachs, the European Investment Bank Group's ETCI program, KfW Capital and T.Capital joined Headline, with previous backers including Balderton, HV, Intrepid Growth Partners, 33N Ventures, Lakestar, Supernova Invest, Blue Cloud Ventures and Geodesic Capital all participating.
The commercial engine is real. Annual recurring revenue in the first half of 2026 came in at four times the level of a year earlier. Asia-Pacific accounts for around half of Exein's revenue; the company has set up a regional headquarters in Taiwan and a legal entity in Japan ahead of a fourth-quarter expansion, with a South Korea office slated for 2027.
The trajectory: a $1.7 billion valuation, up thirty-fold in two years, and more than double the $700 million valuation from a €100 million equity-and-debt round as recently as December 2025.
Europe finally has an AI-security flagship
Exein's round is also a data point in a larger story: Europe's attempt to build AI champions that aren't headquartered in California. The continent produces world-class robotics and industrial research, but has historically watched its most promising companies list or sell abroad. A $1.7 billion valuation for a Rome-based cybersecurity company — Europe's most valuable by its own accounting — is the kind of headline European policymakers have been hoping for.
The investor mix tells the same story. The round pairs American capital (Headline, Goldman Sachs) with European institutional money — the European Investment Bank Group's ETCI program, Germany's KfW Capital, Belgian investor Sofina. It is the financing equivalent of the physical-AI thesis: American frontier models, European industrial depth.
That said, the field is getting crowded. As AI accelerates into robotics and autonomous systems, every major cybersecurity vendor — and a swarm of startups — is racing to define the category. Exein's advantage is distribution: two billion devices already carry its code, giving it the telemetry and the OEM relationships that newcomers would need years to replicate. The risk is execution: a proprietary foundation model for security is an ambitious product, and the first versions arrive in 2027, into a market that will not stand still.
Why this matters now
Exein's raise is the latest signal that the AI boom's second act is physical. As AI moves out of data centers and into autonomous agents, robots and vehicles, the attack surface is expanding from servers to the streets — and the security industry is scrambling to catch up.
Traditional cybersecurity assumes a perimeter: firewalls, network monitoring, a SOC full of analysts. Physical AI breaks every one of those assumptions. A robot on a factory floor cannot phone home for help when the network is down; a drone under attack has milliseconds, not minutes.
That is the argument investors just paid $1.7 billion to own: that machine-speed attacks demand machine-speed defense, and that the company best positioned to build it is the one that spent eight years learning how machines actually work.
Exein vs. the field: who else is racing to secure physical AI?
Exein is not the only company that sees physical AI as the next security frontier, but its approach differs from most of the field. Network-side industrial-security players such as Claroty and Armis watch traffic and hunt intrusions from outside the machine; ServiceNow's $7.75 billion acquisition of Armis, reported by ai-market-watch, shows how much that vantage point is worth. Exein bets the opposite way: security that lives inside the device, at the kernel layer, so a robot or vehicle can defend itself with no network and no human in the loop. That distinction matters because AI is already rewriting the attacker's playbook, and machine-speed attacks leave no time for a remote response. The funding context helps too: Exein is another European-born AI unicorn proving that frontier AI companies can be built outside California, and its silicon-layer bet sits alongside ex-Intel veterans raising $100M to fix AI's hardware weaknesses — the same thesis, from the chip side rather than the device side.
Exein FAQ: what to know about Europe's physical-AI security unicorn
How much did Exein raise, and at what valuation?
$270 million at a $1.7 billion valuation — thirty times its value two years earlier — in a round led by Headline, with total funds raised now above $600 million. The round sits inside the funding spree pouring into AI hardware, where investors are paying up for companies that own a layer of the physical-AI stack.
What is physical AI, and why is it a security problem?
Physical AI means robots, drones, vehicles and factory systems that use AI to perceive, decide and act in the real world. A breach there is not a data leak — it is a safety incident, because a compromised sensor or hijacked robotic arm can cause physical harm.
What is Photon?
Photon is Exein's kernel-level preemptive runtime, launched in March 2026. It blocks malicious code before it executes, so defense happens at machine speed with no connection to a security operations centre and no human in the loop.
What is Exein building next?
A proprietary foundation model trained on two years of machine telemetry, powering autonomous security agents; the agentic security architecture is due by end-2026, with the first foundation models in the first quarter of 2027.
Where does Exein's code run today?
On more than 2 billion devices, per the company — and TMC Insight reports Photon is now present across more than 2 billion chips from vendors including Nvidia, Arm, MediaTek and AWS.
Sources
TechCrunch (Sept 15, 2026); PitchBook (Sept 15); SiliconANGLE (Sept 15); SecurityWeek (Sept 15); Exein company announcement (via Morningstar/Business Wire, Sept 15).
Comments
Post a Comment