Europe just printed a cyber mark the continent has been waiting for. Question whether it is Physical AI security — or IoT runtime with better branding.
On September 15 Rome-based Exein raised $270 million led by Headline at a $1.7 billion valuation, according to TechCrunch and Tech.eu. Both outlets frame it as Europe’s most valuable cybersecurity scaleup claim. The round was significantly oversubscribed. TechCrunch, citing the company, says valuation is up thirty-fold since Series B roughly two years ago and more than doubled since the December 2025 equity-and-debt raise that followed Series C.
Tech.eu lists participants: Sofina, Goldman Sachs, European Investment Bank Group through ETCI, KfW Capital, and T.Capital, with prior backers Balderton, HV, Intrepid Growth Partners, 33N Ventures, Lakestar, Supernova Invest, Blue Cloud Ventures, and Geodesic Capital. Alongside equity, Tech.eu reports an upsizing of Exein’s revolving credit facility led by J.P. Morgan, with KfW joining as an additional lender. That is a growth-stage capital stack, not a seed story with a Physical AI sticker.
Product: Photon, a kernel-level runtime security architecture. CEO Gianni Cuozzo told TechCrunch the concept is that every device should defend itself whether or not it sits on a secure network. Company claims via TechCrunch and Tech.eu: more than 2 billion connected devices secured across aerospace, industrial automation, automotive, energy, healthcare, semiconductors, and (Tech.eu) robotics. Treat the device count as a company claim until an independent audit lands.
Growth numbers that are disclosed — and still not ARR dollars: Cuozzo told TechCrunch the company is growing 400% year on year, with Asia-Pacific driving about half of revenue. Tech.eu adds that H1 2026 ARR was up 4x year on year. CyberMerge will underwrite the multiples and the APAC mix. The outlets did not print an ARR dollar figure.
Threat color from the company via Tech.eu: roughly 5,000 new, non-repetitive attacks across its network each week — five times the level a year ago. Response roadmap: a proprietary foundation model for Physical AI security trained on machine telemetry from that installed base; architecture by end of 2026, first models in Q1 2027 (Tech.eu / TechCrunch). Use of proceeds per Tech.eu: M&A to complete the product portfolio, hiring for U.S. and APAC expansion, and an aim to open a San Francisco Bay Area office. Regulatory tailwind named by TechCrunch: EU Cyber Resilience Act reporting obligations kicked off last week; full force in December 2027.
POV: $1.7B is a durable Physical AI control-plane mark only if Photon plus the forthcoming foundation model become the default runtime layer OEMs and silicon vendors ship into robots, vehicles, and edge agents. It is a rebranded IoT runtime story if buyers hear “Physical AI” and still buy the same kernel agent they would have bought for connected devices in 2024. Robotics FOMO is real. So is the CRA calendar. Underwrite the disclosed mark, the 30x / 2x valuation path, the APAC revenue mix, and the 4x ARR multiple — not a fantasy TAM. Sources: TechCrunch Sep 15 and Tech.eu Sep 15.
Underwrite sheet — sourced only: $270M led by Headline at $1.7B (TC + Tech.eu); oversubscribed; 30x since Series B ~2 years; more than doubled since Dec 2025 equity+debt (TC); Sofina, Goldman Sachs, EIB/ETCI, KfW Capital, T.Capital + prior Balderton/HV/Intrepid/33N/Lakestar/Supernova/Blue Cloud/Geodesic (Tech.eu); upsized RCF led by J.P. Morgan with KfW joining (Tech.eu); Photon kernel-level runtime (Cuozzo via TC); >2B devices (company via TC/Tech.eu); ~50% revenue APAC; 400% YoY growth (Cuozzo via TC); H1 2026 ARR 4x YoY (Tech.eu); ~5,000 new non-repetitive attacks/week = 5x year ago (company via Tech.eu); foundation model architecture end-2026 / first models Q1 2027 (Tech.eu/TC); M&A + US/APAC hire + SF Bay office aim (Tech.eu); CRA reporting live / full force Dec 2027 (TC). The mark is public. The ARR dollars are not.