Exein Raises $270 Million to Build Security for AI-Enabled Machines

Exein has raised $270 million at a $1.7 billion valuation, giving the Rome-based cybersecurity company fresh capital for a high-stakes premise: AI-enabled machines need defenses built into the device itself, not just protections around the network. The Headline-led round makes Exein a unicorn as it pursues security for robots, drones, vehicles and other connected systems.

Defense at the machine’s core

Exein began in 2018 with a focus on vulnerabilities in industrial firmware, the software embedded in hardware. Its current pitch centers on what it calls Physical AI: machines that run AI models, make decisions and interact with the world, including industrial robots, autonomous vehicles, drones, medical equipment and energy infrastructure.

The company’s technical distinction is where it tries to intervene. Photon is a runtime security product that operates at the kernel level—the operating system’s central layer—to prevent malicious execution. In Exein’s framing, that matters when a compromised device could take a physical action rather than merely expose data.

A security model trained on machine behavior

Exein says AI is helping attackers target intelligent devices at greater speed and lower cost. Its response is a proprietary foundation model trained on two years of machine telemetry, which it says will support autonomous security agents that understand and defend the systems on which they run.

The timeline is split in two. Exein says its agentic security architecture is scheduled to ship by the end of 2026, while its first foundation models are expected in the first quarter of 2027. Both systems remain planned rather than released.

Capital for expansion and acquisitions

The equity financing is accompanied by an expanded revolving credit facility led by J.P. Morgan, with KfW joining as an additional lender. Exein says the combined financing will help it pursue acquisitions in Europe and the United States, while the equity round funds hiring and wider operations in the U.S. and Asia-Pacific.

The expansion plan

• Grow the U.S. team and open a Bay Area office.
• Build on an Asia-Pacific base in Taiwan, expand in Japan in late 2026, and open a South Korea office by 2027.
• Use acquisitions to broaden the product portfolio in Europe and the United States.

A growing regulatory tailwind

Exein’s strategy also arrives as Europe raises the security baseline for connected products. Reporting obligations under the European Union’s Cyber Resilience Act began the week before the financing was reported; the act is scheduled to come fully into force in December 2027 and requires manufacturers to ensure digital products are safe from cyber threats.

The regulatory backdrop helps explain investor interest in embedded security, but it does not settle Exein’s execution challenge. The company is betting that its claimed device footprint and kernel-level approach can become a broader platform for rapidly evolving AI threats while it expands across markets and pursues acquisitions. Its planned product releases and expansion will be concrete tests of that strategy.