Exein Raises $270M at $1.7B to Secure Robots and Drones
Italian startup Exein has raised a $270 million funding round led by Headline at a $1.7 billion valuation.
The company announced the round from Rome on September 15, 2026. It said the round was significantly oversubscribed, according to the company. The $1.7 billion valuation is more than double its prior $770 million valuation, as reported by the Financial Times.
Headline is a San Francisco-based venture capital firm. It led the round.
The broader context here helps make sense of that math. An oversubscribed raise at more than twice the prior valuation points to continued investor interest in infrastructure for embodied systems, even while late-stage funding stays selective.
Exein was founded in 2018 and is based in Rome. It describes itself as providing a cybersecurity layer for physical AI, a category that covers robots, drones and autonomous machines, according to the company. Its focus is not cloud workloads or office endpoints. It is machines that act in the world.
Its product, Photon, is a runtime security solution meant to stop attacks at the kernel level of a device, as reported by TechCrunch. The kernel is the core software that controls hardware and decides what programs may do. Most IoT and embedded defenses check software ahead of time, with secure boot, signed updates or network policy. Photon sits below the apps and watches during execution, like a guard that checks behavior while work is underway. It aims to catch malicious behavior while it runs, including privilege escalation, where an attacker gains higher control, and tampering that static checks miss.
Exein claims to have secured more than 2 billion connected devices. It says Asia Pacific currently drives half of its revenue.
The company said it intends to use the fresh funding for acquisitions and hiring to accelerate expansion in the U.S. and Asia Pacific.
In my view, the regional plan follows from the current footprint. The installed base is already broad and weighted toward APAC manufacturing and deployment pipelines. Acquisitions would extend reach or capability around the existing Photon base, while hiring supports sales and engineering in the two regions where connected and autonomous hardware is concentrated, rather than a shift in product direction.
The broader context for Photon is why always-on kernel protection is getting renewed attention. A breached server leaks data. A breached actuator moves incorrectly. Update cycles are slower, device lifetimes are longer, and connectivity is intermittent. That mix makes persistent, low-overhead enforcement attractive, especially if it runs across varied chips without rewriting application stacks.
In my view, worth flagging is the operational question that comes with scale. Securing 2 billion devices describes deployment, not uniformity. Heterogeneity is normal in embedded fleets, with different kernels, board support packages and lifecycle limits. The technical test is how evenly Photon policy holds across that variance, and how it handles false positives where a blocked system call stops a machine rather than a process. Investors appear willing to fund that work. Operators will judge it on stability and overhead as much as on prevention.
Over the longer term, if the approach holds steady, the practical upside is clear. Robotics and drone vendors could ship faster without rebuilding safety and security logic for each platform, and enterprise buyers could gain a common control point across fleets that otherwise age unevenly. It is the kind of quiet infrastructure that is less visible than the machines themselves, but it helps decide whether they can be trusted outside the lab.
