Exein raises €70m Series C to build the digital immune system for IoT devices

Why is Exein’s €70 million Series C funding round seen as a critical inflection point for embedded IoT cybersecurity and regulatory compliance?

Exein SpA, the Italian embedded IoT cybersecurity specialist, has secured €70 million in a Series C funding round announced on July 16, 2025, marking a pivotal moment in its mission to build what it describes as a “digital immune system” for connected devices. The round was led by Balderton Capital, with participation from Supernova and Lakestar, and follow-on investments from existing backers 33N, United Ventures, and Partech. Exein’s valuation, estimated at around €500 million as of April 2025, reflects growing institutional conviction in its approach to securing IoT devices at the firmware and runtime levels.

The latest capital injection comes just one year after Exein’s €23 million Series B round in July 2024, underscoring its accelerated growth trajectory. According to internal disclosures, the cybersecurity innovator recorded 450 percent year-over-year growth in annual recurring revenue, with a forecast to reach €20 million in 2025. Institutional investors view this round as a signal of the company’s strengthening creditworthiness and its ability to capture market share as demand for on-device security intensifies across industries that are heavily dependent on connected infrastructure.

How does Exein’s embedded runtime security differ from traditional cybersecurity models for IoT and AI devices?

Exein has built its reputation by focusing on a security architecture that begins at the device level rather than the network perimeter. Its platform embeds lightweight, real-time monitoring and response mechanisms directly into the firmware of IoT and embedded devices. By functioning like a digital immune system, the solution continuously scans, detects, and neutralizes threats locally without requiring persistent cloud connectivity or external network intervention.

This model is particularly significant as IoT adoption rises in critical sectors such as healthcare, transportation, and energy, where latency and offline operation are often crucial. The system’s AI-driven threat intelligence enables it to evolve with new attack vectors, offering autonomous adaptation in real time. Analysts tracking cybersecurity trends describe Exein’s model as a potential blueprint for the next generation of endpoint protection, especially in industrial IoT environments where downtime caused by network disruptions can have cascading operational impacts.

Exein’s platform has already been adopted by major technology and hardware manufacturers, including MediaTek, Supermicro, Kontron, SECO, and AAEON. According to company data, its technology now protects over one billion devices at runtime globally, signaling its maturity as a commercially deployed solution rather than a purely experimental framework.

Why is investor confidence in Exein surging, and what institutional sentiment drives its current valuation?

Investor sentiment around Exein has been buoyed by two primary factors: regulatory alignment and the rising frequency of IoT-related breaches. Security researchers estimate that nearly one in three major cyber incidents now originates from compromised IoT endpoints, with attacks increasingly targeting industrial control systems, medical devices, and connected consumer electronics. Analysts argue that this threat evolution positions Exein as a first-mover in embedded runtime security, offering a defensible niche compared to cloud-centric cybersecurity providers.

The participation of Balderton Capital, alongside Supernova and Lakestar, reflects a broader investor belief that embedded IoT security will become non-negotiable as new regulations take effect. Elena Moneta, Principal at Balderton, indirectly noted that Exein’s approach of embedding real-time protection directly into the hardware is “addressing the threat where it begins,” an observation consistent with the company’s marketing narrative. While no formal public listing timeline has been disclosed, institutional investors reportedly expect Exein to reach IPO readiness by 2029–2030 if current growth rates persist.

How does Exein plan to use its €70 million funding to strengthen its AI and IoT cybersecurity capabilities?

The Series C capital will be deployed across three primary strategic priorities. First, Exein will expand globally, targeting the United States, Japan, Taiwan, and South Korea, regions where IoT device density and regulatory oversight are both increasing. Its European base will also receive additional investment to reinforce R&D and compliance services for clients operating under the forthcoming EU Cyber Resilience Act and RED 3.3 requirements.

Second, Exein will accelerate the development of security solutions for AI infrastructure, including runtime protection for large language models (LLMs) and on-device AI chips. As enterprises shift sensitive AI workloads closer to the edge, analysts predict that runtime observability and security will become critical in preventing data poisoning and model manipulation attacks. Exein’s ability to operate directly on hardware gives it a unique advantage in this emerging subsegment of AI security.

Third, the company is actively scouting acquisition targets within the broader cybersecurity ecosystem to strengthen its position as a full-stack embedded security provider. Strategic M&A activity, analysts say, could help Exein expand its capabilities into adjacent areas such as secure boot, hardware-based encryption, and post-quantum cryptography.

What regulatory tailwinds and market trends are driving Exein’s rapid adoption among global manufacturers?

Compliance pressures are accelerating Exein’s adoption across multiple sectors. With Europe’s Cyber Resilience Act set to take effect in 2026 and similar frameworks like the U.S. Cyber Trust Mark pushing manufacturers to certify device security, Exein’s technology offers an immediate path to compliance. By embedding security at the firmware level, manufacturers can meet evolving regulatory standards without extensive redesigns of their product lines.

Furthermore, IoT deployments are no longer limited to consumer electronics. Industrial automation, energy infrastructure, and transportation networks are increasingly reliant on connected devices, expanding the attack surface dramatically. Institutional sentiment suggests that manufacturers will gravitate toward embedded solutions to reduce liability exposure and ensure regulatory adherence, creating a favorable demand environment for Exein’s platform.

What does the future hold for Exein in terms of growth, competition, and potential public offering?

Looking ahead, Exein’s growth will depend on its ability to balance rapid scaling with product reliability. Analysts expect the firm to continue reporting triple-digit growth in annual recurring revenue for at least the next two fiscal years, driven by its entry into high-density IoT markets in Asia and North America. However, competition is emerging from both specialized startups and established cybersecurity vendors entering the embedded security space through acquisitions.

Institutional investors suggest that Exein’s first-mover advantage could sustain its market leadership if it continues to integrate AI-driven capabilities and expands its M&A strategy. Should revenue projections hold, Exein could position itself for a public listing in the latter half of this decade, potentially becoming one of Europe’s leading cybersecurity IPOs.

In the words of CEO Gianni Cuozzo, as paraphrased from his recent statements, the company views itself not merely as a security vendor but as a foundational pillar for ensuring trust in connected devices worldwide. Analysts agree that if Exein delivers on its roadmap, it may set the standard for how cybersecurity is built into IoT and AI systems from the ground up.