Exein Runtime & Analyzer (Physical AI Security)

Exein SpA is an embedded and IoT security company founded in 2018 and headquartered in Rome, Italy, with offices in Germany, Taiwan and the US. It secures connected devices, industrial machines, robots and other Physical AI systems, which often run Linux or real-time operating systems with no room for traditional endpoint security.

Exein Runtime is an agent written in Rust that uses eBPF to run inside the operating system kernel, where it detects and blocks malicious behaviour on the device before it executes and reports incidents across the fleet with forensic timelines and LLM-written explanations. Exein Analyzer runs in the build pipeline to analyse firmware binaries, ingest SBOMs, score reachability of vulnerabilities and map findings to the EU Cyber Resilience Act. Customers and partners include chip makers, industrial computer vendors, rail and energy companies.

• Kernel-level runtime agent: Blocks malicious behaviour on the device before it executes.
• Fleet monitoring: Tracks, blocks and traces incidents across all deployed devices.
• AI incident explanations: Fine-tuned LLMs describe the cause of each incident and how to prevent it.
• Firmware Analyzer: Performs binary analysis and SBOM ingestion in the build environment.
• Reachability scoring: Prioritises vulnerabilities that can actually be exploited.
• Compliance reporting: Maps findings to the EU CRA, IEC 62443 and ETSI EN 303 645.

A Vietnamese maker of industrial gateways or smart cameras can embed the runtime agent to block attacks on devices in the field. An electronics exporter can use the Analyzer to produce CRA evidence for each firmware release. A robotics or automation integrator can monitor security incidents across its installed machine fleet.

Device makers get on-device protection that blocks attacks in real time rather than only alerting after damage. The lightweight Rust and eBPF design fits resource-constrained hardware without changing kernel source code. Firmware analysis and CRA-mapped reports shorten compliance work for products sold in Europe. Exein reports more than one billion devices protected at runtime and over one million high-severity vulnerabilities uncovered.

Robots, smart machines and connected industrial equipment are spreading quickly, and each device becomes a target that IT security tools cannot cover. Regulations such as the EU CRA and the US Cyber Trust Mark push manufacturers to build security into devices. Asia, including the electronics supply chains in Taiwan, Vietnam and Southeast Asia, is a priority market for embedded security vendors.

Founded in 2018 by Gianni Cuozzo, headquartered in Rome with offices in Germany, Taiwan and the US. Raised 270 million USD at a 1.7 billion USD valuation in September 2026, led by Headline; APAC headquarters in Taiwan and a Japan entity opened. ISO 9001 and ISO 27001 certified; Embedded World 2023 Best in Show winner.