Exein raised $270 million in a Series C at a $1.7 billion valuation on 15 September, led by Headline with participation from Sofina, Goldman Sachs, EIB Group, and KfW Capital, alongside a concurrent credit facility expansion through J.P. Morgan and KfW. The Rome-founded company builds kernel-level runtime security for physical AI systems — robots, drones, autonomous vehicles, and medical devices — through its Photon product, and reports securing more than two billion connected devices across aerospace, automotive, energy, and healthcare. The round was significantly oversubscribed; the valuation has increased 30-fold from Exein's Series B two years ago on 400 per cent year-on-year growth.

The regulatory tailwind is specific and dated. The EU Cyber Resilience Act, with full enforcement commencing December 2027, requires manufacturers of connected digital products to ensure devices are secure against known vulnerabilities and receive security updates throughout their commercial lifecycle. Kernel-level runtime monitoring — Exein's core architecture — provides the device-level telemetry layer that compliance with the Act's ongoing security requirements demands. The regulation applies to any physical product with digital components sold in the EU, which encompasses the majority of industrial automation, robotics, and medical equipment manufactured globally.

The planned Q1 2027 product — a foundation model trained on telemetry from Exein's two billion device population — extends the category from reactive threat detection to predictive physical AI security: a model trained on anomaly patterns across the entire device fleet rather than rule-based signature matching on individual devices. At two billion devices, the training dataset is structurally larger than any prior security foundation model's physical-world telemetry corpus. APAC generates half of current revenue, positioning Exein ahead of anticipated EU regulatory expansion into Asian manufacturing supply chains. Physical AI is the next hardware attack surface; Exein's Series C is a bet that the security layer for it will be a category unto itself.