Exein takes $270M at $1.7B two quarters before its first foundation model ships
Rome's Exein says its valuation is up thirtyfold in two years and first-half recurring revenue up fourfold, and its first foundation models are due in the first quarter of 2027, two quarters after the round closed.
The Investor · Invest desk
What happened
- Exein, the Rome-based device security company, announced $270 million in new funding at a $1.7 billion valuation on 15 September 2026, in a Series C led by Headline that it says was significantly oversubscribed.
- New backers include Goldman Sachs, Sofina, the European Investment Bank Group through ETCI, KfW Capital and T.Capital, alongside returning investors including Balderton, Lakestar and Blue Cloud Ventures.
- About half of Exein's revenue comes from Asia-Pacific, where it has set up an APAC headquarters in Taiwan, and it plans to open a San Francisco Bay Area office and hire more in the US.
Why it matters
- What it limits constraint With growth published as a ratio and no absolute recurring revenue figure, the only checkable measures of the $1.7 billion price are delivery dates.
- Who's exposed exposure The European Investment Bank Group, through ETCI, and KfW Capital are now funding a company whose next two years of hiring and offices are aimed at the United States and Asia-Pacific.
- Who has to decide decision Fresh equity plus a larger revolving facility gives Exein the option to buy adjacent capability instead of building each layer, and it says it will keep pursuing M&A.
- What's now possible capability Agents that act without waiting for human intervention would move the decision to intervene from an operator to a model, on machinery that moves.
Next story · Security · Oct 9
Anthropic sends unreviewed AI bug reports with proofs of concept to open source maintainersConfirmed6 publishers
A valuation of roughly $800 million in December became $1.7 billion in September [23], about 2.1 times in nine months [29]. Stretch the window and the company's own figure is a thirtyfold climb over two years [13], which puts it near $57 million in late 2024 [26]. The revenue disclosure alongside it is a ratio: first-half 2026 annual recurring revenue four times the year-earlier level [6]. Exein did not publish an absolute ARR.
Assume ARR also quadrupled in the twelve months before that. Revenue would then be up 16 times over the two years against a 30-fold valuation, leaving roughly 1.9 times of the price step as multiple expansion [31]. Exein did not disclose that; the 16 times is my assumption.
The equity arrived with debt. Exein said the round runs alongside an upsizing of its existing revolving credit facility led by J.P. Morgan, with KfW joining as an additional lender [5]. The three raises before this one were a EUR 15 million Series B in July 2024, EUR 70 million in July 2025 and EUR 100 million in December 2025, or EUR 185 million together [14][28]; techfundingnews.com wrote that the new $270 million dwarfs all of that combined [22].
Exein says it now sees around 5,000 new, non-repetitive attacks a week across its network, five times the level of a year ago, which places last year near 1,000 a week [16][27]. Founder and chief executive Gianni Cuozzo said: "Frontier models are pushing the patch window to zero. Attacks now happen at machine speed, so defence has to as well." [20] The foundation model behind that argument is trained on machine telemetry from Exein's own installed base rather than human-generated text [15], with the architecture due by the end of 2026 and the first models in the first quarter of 2027 [10]. techfundingnews.com called that an aggressive timeline for a category that barely exists yet outside Exein's own data [12].
The nearest priced comparable is Armis, which ServiceNow is acquiring for $7.75 billion in a deal expected to close in the second half of 2026 [25]. Exein at $1.7 billion is about 22 per cent of that [30]. Armis, Claroty and Nozomi Networks watch industrial networks from the outside for anomalies; Exein has been putting its code on the device since 2018, and Photon works at the kernel level to block malicious execution before it runs [25][11][9]. Clarey Zhu, the Headline partner who led the round, said: "As AI moves into robots, vehicles, and critical infrastructure, securing the physical world will become one of the defining cybersecurity challenges of the next decade." [21]
If ServiceNow folds Armis into platform procurement after the close, device security gets bought as a line item inside a suite and the standalone premium compresses [25]. If the end-2026 architecture or the Q1 2027 models slip, the $1.7 billion is priced on a roadmap [10]. In my view the defensible asset here is the embedded position across more than two billion devices [7], and the model built on top of it is what investors have paid for in advance.
What to watch
- Whether the end-2026 architecture and Q1 2027 foundation model dates hold, since the round is priced ahead of both.
- The ServiceNow-Armis close in the second half of 2026 and what it does to pricing for standalone operational technology security vendors.
- What Exein buys with the $270m and the upsized J.P. Morgan facility, given it says it will keep pursuing M&A.
Information, not investment advice. This story is general information about companies and markets, drawn from cited reporting. It is not a recommendation to buy, sell or hold any security; check the cited sources before acting.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence45
- Adoption40
- Hype gap+30
- Incentives70
- Confidence55
Perspective Coverage
4 publishers- Builder
- Builder 25%
- Operator
- Operator 23%
- Investor
- Investor 52%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Exein announced $270 million in new funding at a $1.7 billion valuation, in a round led by Headline.
- [2]
Exein is based in Rome and was described as one of Europe's most valuable cybersecurity startups.
- [3]
New participants in the round include Sofina, Goldman Sachs, European Investment Bank Group through ETCI, KfW Capital and T.Capital, with previous investors Balderton, HV, Intrepid Growth Partners, 33N Ventures, Lakestar, Supernova Invest, Blue Cloud Ventures and Geodesic Capital also involved.
- [4]
Exein said the round was significantly oversubscribed.
- [5]
The funding comes alongside an upsizing of Exein's existing revolving credit facility led by J.P. Morgan, with KfW joining as an additional lender.
- [6]
Exein's H1 2026 annual recurring revenue was up 4x year on year.
- [7]
Exein's technology spans more than two billion connected devices across industrial automation, automotive, energy, healthcare, semiconductors, aerospace and robotics.
- [8]
The round was announced on 15 September 2026.
- [9]
Exein launched Photon earlier this year, a kernel-level runtime security architecture designed to block malicious execution before an attack can run.
- [10]
Exein plans to introduce the architecture by the end of 2026, with its first foundation models expected in Q1 2027.
- [11]
Founded in 2018, Exein started by embedding cybersecurity code directly onto IoT devices rather than guarding them from the network.
- [12]
techfundingnews.com described the end-2026 and Q1 2027 targets as an aggressive timeline for a category that barely exists yet outside Exein's own data.
- [13]
Exein's valuation has increased thirtyfold in two years.
- [14]
Exein raised a EUR 15 million Series B in July 2024 led by 33N, a EUR 70 million round in July 2025 led by Balderton, and a further EUR 100 million in December 2025 led by Blue Cloud Ventures, bringing its 2025 total to EUR 170 million.
- [15]
Exein is developing a proprietary foundation model for Physical AI security trained on machine telemetry generated through its technology, learning from years of data showing how machines operate rather than the human-generated data behind general-purpose models.
- [16]
Exein says it now sees around 5,000 new, non-repetitive attacks across its network each week, five times the level recorded a year ago.
- [17]
Around 50 per cent of Exein's revenue comes from Asia-Pacific, with operations spanning Europe, Asia-Pacific and the United States.
- [18]
Since its December 2025 round Exein has established its APAC headquarters in Taiwan and secured new partnerships across semiconductors, industrial computing and connected infrastructure.
- [19]
Over the next two years Exein plans to increase US hiring, customers and partnerships, aims to open a new office in the San Francisco Bay Area, and will continue to pursue M&A opportunities.
- [20]
Gianni Cuozzo, founder and CEO of Exein, said: "Frontier models are pushing the patch window to zero. Attacks now happen at machine speed, so defence has to as well."
- [21]
Clarey Zhu, Partner at Headline, said: "As AI moves into robots, vehicles, and critical infrastructure, securing the physical world will become one of the defining cybersecurity challenges of the next decade."
- [22]
techfundingnews.com wrote that this week's $270 million dwarfs all of Exein's earlier rounds combined.
- [23]
The round pushes Exein's valuation from roughly $800 million in December to $1.7 billion now.
- [24]
The first foundation models, expected in Q1 2027, are two quarters after the September 2026 round.
- [25]
Claroty and Nozomi Networks watch industrial networks from the outside for anomalies, and Armis does something similar while being acquired by ServiceNow for $7.75 billion, a deal expected to close in the second half of 2026.
- [26]
A thirtyfold climb to $1.7 billion implies a valuation of roughly $57 million two years earlier.
- [27]
At 5,000 new non-repetitive attacks a week and five times the year-earlier level, the year-earlier figure was about 1,000 a week.
- [28]
The July 2024, July 2025 and December 2025 rounds total EUR 185 million.
- [29]
The step from roughly $800 million in December to $1.7 billion is about 2.1 times over nine months.
- [30]
Exein's $1.7 billion valuation is about 22 per cent of the $7.75 billion ServiceNow is paying for Armis.
- [31]
If ARR quadrupled in each of the last two years, revenue is up 16 times against a thirtyfold valuation, leaving roughly 1.9 times of the price step as multiple expansion.
Sources
4 independent publishers whose own reporting we read for this story.
- eu-startups.comFacing 5,000 new attacks weekly, Italy's Exein raises €234 million for Physical AI cybersecurity | EU-Startups
1 article · September 15, 2026
- tech.euExein raises $270M at $1.7B valuation, claims title of Europe’s most valuable cybersecurity scaleup - Tech.eu
1 article · September 15, 2026
- techfundingnews.comCybersecurity startup Exein secures $270M at $1.7B to protect AI-powered machines
2 articles · September 15, 2026
- ventureburn.comExein Raises $270 Million for Physical AI Security Layer
1 article · September 15, 2026
Topics and entities
Topics
- Cybersecurity Venture Funding
- Operational technology security
- IoT Security
- Physical AI Security