Exein Raises $270M to Secure Physical AI Systems

A connected device used to report conditions and wait for a person. Physical AI changes that handoff: the machine can interpret its environment and act before a security team knows an attacker has changed the decision.

Exein has raised $270M in new funding at a company-stated $1.7B valuation, giving the Rome cybersecurity company fresh capital to expand its Physical AI security platform, develop autonomous security agents, and pursue growth across the United States and Asia-Pacific. Headline led the September 15, 2026 round, which Exein said was significantly oversubscribed.

Exein's answer is to push security closer to execution. The company combines firmware analysis, on-device runtime protection, and a new kernel-level architecture called Photon, then plans to use machine telemetry from its installed footprint to train specialized security models.

What Exein Announced

The $270M financing was led by Headline, with Sofina, Goldman Sachs, the European Investment Bank Group through the European Tech Champions Initiative, KfW Capital, and T.Capital participating. Existing investors Balderton, HV, Intrepid Growth Partners, 33N Ventures, Lakestar, Supernova Invest, Blue Cloud Ventures, and Geodesic Capital also joined the round.

Exein did not disclose a Series label, security type, primary or secondary allocation, or investor check sizes. The company separately announced an upsizing of its revolving credit facility, led by J.P. Morgan with KfW joining as an additional lender, but it did not disclose the facility's size. The $270M equity financing and the credit facility should therefore be treated as distinct parts of the capital plan.

The current round follows a €70M Series C announced in July 2025 and €100M in additional funding announced that December. Exein said those 2025 financings totaled €170M. Because the company did not publish a new cumulative total and the rounds span euros and dollars, no cross-currency lifetime-funding figure is inferred here.

Why Physical AI Changes the Security Clock

Traditional software security often assumes some interval between detection and consequence. A team sees an alert, investigates it, creates a fix, and distributes a patch. Physical AI compresses that sequence because machines can perceive, decide, and act continuously in the environments around them.

A security failure in a chatbot can expose data or misuse a connected tool. A security failure inside a vehicle, robot, power system, or medical device can affect motion, uptime, safety, or physical access. That difference turns runtime protection into an operating requirement for manufacturers and infrastructure providers, not merely another monitoring layer for the security department.

Exein says it now sees about 5,000 new, non-repetitive attacks each week across its network, 5x the level of a year earlier. The company also reports that its technology spans more than 2B devices and that annual recurring revenue grew 4x year over year in the first half of 2026. Those are company-reported metrics rather than audited performance figures, but they explain why investors are financing a security model built around machine-speed response.

How Exein's Security Stack Works

Exein Runtime is designed to provide continuous detection and response on Linux and real-time operating systems, including resource-constrained devices. Exein Analyzer examines firmware and software bills of materials inside the build environment, using binary analysis and reachability scoring to identify vulnerabilities that may be exploitable and map findings to compliance requirements.

Photon moves the response point deeper into the operating system. Exein describes Photon as a preemptive, kernel-level runtime architecture that can stop malicious execution before it runs. The claim matters because many security tools report suspicious behavior after the operating system has already allowed some action to begin.

The company is also training a proprietary foundation model for Physical AI security on 2 years of machine telemetry drawn from its device footprint. Exein plans to use the model to power autonomous security agents that understand and defend the systems on which they operate. The agentic architecture is planned for the end of 2026, with the first foundation models expected in Q1 2027, so their effectiveness and deployment scale remain future tests rather than completed proof.

The People and Expansion Plan

Gianni Cuozzo founded Exein in 2018 and remains CEO. The current leadership page also names Giovanni Alberto Falcione as CTO, Gerardo Gagliardo as CFO, and Gary Walshe as CCO. Exein is headquartered in Rome and lists offices in San Francisco, Karlsruhe, and Taipei.

Exein says about 50% of its revenue now comes from Asia-Pacific. The new capital will support further expansion in the region, including activity in Japan beginning in Q4 2026 and a planned South Korea office by 2027. In the US, the company plans to increase hiring, customers, and partnerships while adding a Bay Area office.

The upsized credit facility gives Exein a separate instrument for acquisitions across Europe and the US. That distinction is important because product research, international hiring, and acquisitions create different demands on a balance sheet. Equity can fund long-horizon development and expansion, while committed credit can help a company move when an acquisition target becomes available.

What the Funding Puts to Work

The investment case rests on more than the number of devices Exein says it protects. It depends on whether telemetry from those devices can improve detection, whether kernel-level enforcement can stop malicious behavior without disrupting legitimate workloads, and whether manufacturers can integrate the system across diverse hardware and operating environments.

Exein also operates where security and regulation increasingly meet. The company's products address requirements connected to the European Union's Cyber Resilience Act, RED 3.3, IEC 62443, ETSI EN 303 645, and the US Cyber Trust Mark. Regulation may push manufacturers to document and maintain device security across a product lifecycle, but compliance evidence and effective runtime defense remain different jobs.

That leaves Exein with a demanding expansion problem. It must turn a large company-reported device footprint into durable customer trust across industries where security software can affect production, safety, and certification. The $270M round gives the company more room to build that proof while its customers keep putting AI into machines that cannot wait for the next patch cycle.