Zurich-based xorlab secures €5 million to scale sovereign email security across Europe

xorlab, a Zurich-based email security startup, has secured €5 million in its Series A+ financing round to expand its services across Europe. The investment was led by existing investor Spicehaus Partners, with participation from Grapha Holding, EquityPitcher Ventures, and ZKB Start-up Finance. Daniel Andres, Founding Partner at Spicehaus Partners, highlighted that xorlab's differentiated technology and strong customer base present a significant opportunity in the cybersecurity market, driven by AI-driven threats and growing regulatory pressure.

Founded in 2015 by ETH Zurich graduates Antonio Barresi and Matthias Ganz, xorlab's platform offers an AI-powered email security solution for on-premises, hybrid, or cloud environments. The company addresses two key challenges for European organizations: the increasing sophistication of cyberattacks using AI and the concern over reliance on US-controlled infrastructure and security providers.

Regulations such as DORA and NIS2 add further pressure on financial institutions and critical infrastructure operators to ensure digital supply chain resilience.

xorlab's solution protects against advanced email attacks, including AI-crafted phishing and business email compromise (BEC) campaigns, by evaluating each message in context. It detects unusual senders, out-of-pattern requests, and first-time payment requests, which might otherwise bypass traditional filters. The company emphasizes that its platform provides European organizations with protection against sophisticated attacks while maintaining control over their data and infrastructure.

Barresi, CEO and co-founder of xorlab, stated that Europe needs its own cybersecurity champions. He believes that AI is fundamentally changing the threat landscape, and European organizations require security solutions that combine world-class protection with control over their data and infrastructure. xorlab's platform enables customers to choose between fully on-premises, hybrid, or cloud deployment, with processing taking place in European data centers and operations managed by EU-based staff.

The platform supports compliance with regulations such as DORA, NIS2, and GDPR, serving customers from various sectors, including financial institutions, healthcare, critical infrastructure, telecommunications, and public sector entities. Notable customers include Julius Bär, Swisscom, Vontobel, G+D, and CERN.