Exein
Exein secures IoT and embedded devices with kernel-level runtime protection.
Exein develops embedded runtime security that integrates directly into device firmware to detect and prevent threats in real-time at the kernel level. The platform uses eBPF-based observability and AI-driven behavior analysis to protect IoT, industrial, automotive, and aerospace devices without degrading performance or requiring hardware changes. Unlike traditional endpoint security that detects breaches after compromise, Exein blocks malicious execution paths before they can run, eliminating entire attack classes at the edge.
Problem solved
IoT and embedded device manufacturers lack real-time threat detection and prevention at the firmware level, leaving billions of connected devices vulnerable to execution-based attacks that bypass traditional security solutions.
Target customer
Manufacturers of IoT devices, industrial controllers, automotive systems, semiconductor companies, and critical infrastructure operators protecting large device fleets; includes OEMs like MediaTek, Supermicro, Kontron, and system integrators requiring compliance and real-time threat detection.
Founders
G
Gianni Cuozzo
CEO
Founded Exein at 28 with prior cybersecurity experience; remains primary public face and CEO through multiple funding rounds.
Funding history
Seed
$2.3M
November 2018
Led by United Ventures
Series B
$16.2M
July 2024
Led by 33N
· Partech
Series C
$81M
July 2025
Led by Balderton
· Supernova, Lakestar, 33N, United Ventures, Partech
Series C Extension
$117M
December 2025
Led by Blue Cloud Ventures
· HV Capital, Intrepid Growth Partners, Geodesic Capital, JP Morgan
Total raised:
$225M
Industries
Pricing
Not publicly available; likely enterprise SaaS model based on customer testimonials mentioning flexible SaaS arrangements.
Notable customers
SECO, Lattice Semiconductors, IWave, MediaTek, Supermicro, Kontron, AAEON, Daikin; secures over 1 billion devices across approximately 120 customers globally.
Integrations
MediaTek, Kontron, strategic partnerships for embedding Photon runtime security into device firmware and OEM platforms.
Tech stack
React (JavaScript frameworks)
Next.js (Web servers)
Swiper (JavaScript libraries)
Webpack
PWA
Open Graph
TYPO3 CMS (CMS)
Linkedin Insight Tag (Analytics)
Leadfeeder (Analytics)
Google Analytics (Analytics)
Typekit (Font scripts)
Node.js (Programming languages)
PHP (Programming languages)
Google Workspace (Email)
Amazon S3 (CDN)
Amazon Cloudfront (CDN)
HubSpot (Marketing automation)
Google Tag Manager (Tag managers)
Amazon Web Services (PaaS)
Cookiebot (Cookie compliance)
AWS Certificate Manager (SSL/TLS certificate authorities)
Website
Competitors
Armis
Broader IoT security platform; Exein focuses specifically on kernel-level runtime prevention rather than network-based detection.
Upstream Security
Specializes in automotive cybersecurity; Exein provides cross-industry embedded protection for IoT, industrial, and automotive.
SandboxAQ
Focuses on quantum-resistant cryptography and AI security; Exein emphasizes real-time behavioral enforcement and firmware-level protection.
Why this matters: Exein is the fastest-growing embedded security provider, raising $225M in three years and achieving 450% ARR growth while becoming the world's largest provider by devices protected (1B+). The company is pioneering a new category of kernel-level runtime security for AI and edge infrastructure, with strategic partnerships embedding its Photon technology into chipsets at scale.
Best for: Manufacturers of IoT devices, industrial controllers, and automotive systems that need real-time threat prevention at the firmware level without performance degradation or hardware modifications.
Use cases
Industrial HVAC Fleet Protection
Daikin deployed Exein Runtime across a global network of fan coils and temperature controllers to implement real-time threat monitoring, behavioral enforcement, and firmware integrity checks. This prevented unauthorized firmware modifications and command injections across thousands of networked devices without interrupting critical HVAC operations.
Semiconductor Supply Chain Security
MediaTek embeds Exein's Photon runtime security into chipsets to provide manufacturers and end customers with built-in protection against firmware-level exploits. This shifts security from reactive post-compromise detection to preventive execution blocking at scale.
Autonomous and Edge AI Infrastructure
Organizations deploying AI agents and LLMs on edge devices use Exein to detect and neutralize anomalous process behavior that indicates model poisoning or inference-time attacks, protecting against statistically significant deviations in device activity patterns.
Alternatives
Armis
Network-based IoT security platform; better for organizations that can monitor traffic patterns but need broader visibility across heterogeneous device types.
Upstream Security
Automotive-specialized cybersecurity; pick this if you need OEM-level automotive compliance and vehicle network segmentation rather than cross-industry embedded protection.
SandboxAQ
Quantum-resistant cryptography and AI security focus; choose if your primary concern is cryptographic agility and LLM safety rather than runtime firmware protection.
FAQ
What does Exein do? +
Exein develops embedded runtime security that integrates directly into device firmware to detect and prevent cyberattacks in real-time. Using kernel-level observability and AI-driven behavior analysis, it blocks malicious execution paths before they run—protecting IoT, industrial, automotive, and aerospace devices at scale without degrading performance.
How much does Exein cost? +
Pricing is not publicly disclosed. The company uses an enterprise SaaS model with flexible arrangements based on device volume and deployment scope. Contact Exein for custom pricing.
What are alternatives to Exein? +
Armis (network-based IoT security), Upstream Security (automotive-focused), SandboxAQ (quantum-resistant and AI security), and others like Binare, Secure-IC, and Payatu. Each has different strengths depending on industry and threat model.
Who uses Exein? +
Manufacturers including MediaTek, Supermicro, Kontron, AAEON, and system integrators like SECO. Customers operate in industrial, automotive, aerospace, and smart home sectors. Exein secures over 1 billion devices across approximately 120 customers globally.
How does Exein compare to Armis? +
Exein operates at the firmware and kernel level with prevention-first execution blocking; Armis provides network-based detection and visibility. Exein is best for OEMs and manufacturers embedding security into devices; Armis is better for organizations monitoring device behavior across networks.
Tags
embedded security
IoT security
runtime protection
kernel-level prevention
firmware security
edge AI security
industrial cybersecurity