Finite State lands $27M Series C to secure connected devices
What's the deal? Finite State, a product security and software supply chain risk firm, raised a $27 million Series C led by The O.H.I.O. FundDealroom has a profile for this one. Try Dealroom →. CIBC Innovation BankingDealroom has a profile for this one. Try Dealroom →, Energy Impact PartnersDealroom has a profile for this one. Try Dealroom →, Energize CapitalDealroom has a profile for this one. Try Dealroom →, and National Grid Partners joined the round.
What's the endgame? The Columbus, Ohio company's AI platform analyses the software and firmware inside finished devices — from vehicles and medical devices to industrial equipment and consumer electronics. It flags known and zero-day vulnerabilities and guides manufacturers to fix exploitable ones before attackers strike.
The new capital will fund international expansion and build out the platform's autonomous capabilities. Finite State says the goal is to help manufacturers close the gap between the software they plan to ship and what actually runs in the finished device.
Why now? AI has compressed the time to find a flaw and weaponise it from weeks to hours. In October, AI-powered research uncovered critical flaws in widely used software, including a vulnerability in the PHP language — a surge security leaders have dubbed the "Vulnpocalypse."
Regulation adds pressure. The EU Cyber Resilience Act's vulnerability-reporting rules took effect on September 11, 2026, with broader product-security requirements following in December 2027. FDA premarket rules and vehicle and industrial standards all put the burden of proof on manufacturers, with blocked market access and recalls as the cost of falling short.
Why it matters: Modern devices are assembled, not written from scratch, often mixing open-source libraries, third-party components, and legacy code from many suppliers. "Manufacturers cannot secure what they cannot see," the company said.
Founded in 2017, Finite State has raised roughly $70 million to date, including a $30 million Series B in 2021 and $20 million in growth funding in March 2024. "Governments worldwide are imposing new regulatory pressures on manufacturers, recognizing how quickly AI-enabled attackers can exploit vulnerabilities," said Mike Venerable, founding partner at The O.H.I.O. Fund.
What could go wrong? The round signals investor confidence, but not adoption. Its significance depends on whether Finite State can turn rising regulatory pressure into sustained customer demand and revenue — the funding alone doesn't prove either.
The signal: As AI speeds up both the discovery and exploitation of flaws, visibility into device software is becoming a compliance requirement, not a nice-to-have. This follow-on round bets that new global mandates will push more device makers to pay for that visibility.
Read more: techstartups.com
Image credit: Finite State
