xorlab Raises €5M for European Email Security Platform

xorlab, a Swiss cybersecurity firm, has successfully closed a €5 million Series A+ funding round. The investment, led by existing backer Spicehaus Partners with participation from Grapha Holding, EquityPitcher Ventures, and ZKB Start-up Finance, will fuel the company's expansion across the DACH region, Benelux, and Nordic countries.

This capital infusion arrives as European organizations increasingly seek to reduce their reliance on U.S.-based IT security providers, a trend amplified by growing concerns over data sovereignty and geopolitical instability. The cybersecurity market, particularly for email security, is experiencing significant shifts. Phishing and Business Email Compromise (BEC) attacks remain a primary vector for cyber threats, with attackers leveraging sophisticated AI to craft highly convincing campaigns that bypass traditional defenses.

xorlab differentiates itself by offering an advanced email security platform designed to proactively thwart these evolving threats. Unlike conventional solutions that often react to known malware signatures, xorlab's technology focuses on behavioral analysis and contextual understanding of communication patterns. This approach aims to identify and block AI-driven phishing and BEC attacks that lack malware and mimic legitimate correspondence, often slipping past filters like those integrated into Microsoft 365.

The company's CEO and co-founder, Antonio Barresi, articulated a vision for European cybersecurity leadership, stating, "Europe needs its own enterprise cybersecurity champions. Not mere imitations of established U.S. vendors, but companies capable of shaping the next generation of enterprise security. European organizations require security solutions that combine best-in-class protection with control over their data and infrastructure." This sentiment resonates with the increasing regulatory pressure from frameworks like DORA and NIS2, which mandate greater resilience and digital supply chain accountability for critical infrastructure and financial institutions.

xorlab's platform employs a behavior-based AI that learns an organization's unique communication norms to detect anomalies before they can lead to a breach. This contextual intelligence is crucial for identifying sophisticated attacks that appear benign when viewed in isolation. The company emphasizes flexibility in deployment, offering options for fully on-premises, hybrid, or cloud-based solutions utilizing European data centers and personnel, ensuring compliance with GDPR, DORA, and NIS2 regulations.

The demand for such solutions is evident. xorlab reported its most successful fiscal year to date in 2025, with demand doubling again in 2026. The platform serves a wide range of organizations, from those with 500 employees to enterprises exceeding 37,000, including notable clients such as Julius Bär, Swisscom, G+D Netcetera, Vontobel, and CERN.

Daniel Andres, Founding Partner at Spicehaus Partners, highlighted the significant market opportunity: "We firmly believe that the convergence of AI-driven threats, escalating regulatory demands, and Europe's drive for digital sovereignty presents a generational opportunity in cybersecurity." This strategic investment positions xorlab to capitalize on these converging market forces, offering a compelling European alternative in the global cybersecurity arena.