Summary
- Exein has raised $270 million at a $1.7 billion valuation in a round led by Headline.
- The company plans further US and Asia-Pacific expansion while developing security technology for robots, vehicles, drones, and industrial systems.
- Exein says its technology reaches more than two billion devices and is observing around 5,000 new non-repetitive attacks each week.
Italian cybersecurity company Exein has raised $270 million at a $1.7 billion valuation as investors put more capital behind security technology designed for connected machines rather than conventional enterprise endpoints.
The Rome-based company said the round was led by Headline, with participation from Sofina, Goldman Sachs, the EIB Group through the European Tech Champions Initiative, KfW Capital, T.Capital, and existing investors. Exein said the financing will support expansion in the US and Asia-Pacific as well as further product development.
Exein develops security technology intended to operate close to the firmware and runtime environments controlling connected products. It is targeting systems including robots, drones, vehicles, industrial equipment, and other machines that increasingly use AI to influence physical processes.
The company says its technology is deployed across more than two billion devices and that it is observing around 5,000 new, non-repetitive attacks each week across its network, five times the volume it recorded a year ago. Those are Exein’s own operational metrics rather than independently audited industry figures.
Its latest expansion is centred on what the company calls physical AI — machines in which software and AI models can influence movement or other activity in the physical world. Exein is also developing a proprietary model trained on telemetry from connected devices and says an agentic security architecture is due by the end of 2026, with initial foundation models expected in the first quarter of 2027.
The category raises security questions that differ in consequence from those surrounding many conventional business applications. Compromise of a SaaS platform can expose information or provide access to connected systems; weaknesses in autonomous vehicles, industrial machinery, robotics, or healthcare equipment can also affect availability, production, and physical operations.
Long product lifecycles complicate that problem. Industrial and embedded equipment can remain deployed for years, often with constrained computing resources and software components that are difficult to replace after installation. Manufacturers therefore have to account for vulnerability management, update mechanisms, third-party components, and the security of software running close to hardware.
European regulation is also increasing pressure on manufacturers to treat product cybersecurity as an operating requirement. The Cyber Resilience Act’s first reporting obligations began applying on 11 September 2026, requiring manufacturers within scope to report actively exploited vulnerabilities and severe incidents. The Act’s main product-security obligations follow in December 2027.
That creates a market extending beyond malware prevention. Manufacturers will need processes for vulnerability handling, software maintenance, technical evidence, and security support across product lifecycles, while buyers of connected equipment face increasing pressure to understand how those capabilities are maintained after deployment.
Exein’s funding round sits at the intersection of expanding investment in AI-enabled machinery and a more regulated European product-security environment. Both trends increase the cost of treating cyber controls as something that can be added after hardware and software have already been designed.
The company’s $1.7 billion valuation is an investor judgement, while its attack and device figures remain company-reported. The scale of the financing nevertheless gives Exein substantially more capital to compete for manufacturers, engineering talent, partnerships, and acquisitions as security moves deeper into the software controlling connected equipment.
