xorlab Raises EUR 5 Million to Build Europe’s Leading Sovereign Email Security Platform

ZURICH, Switzerland September 1^st, 2026 — xorlab, the European email security platform trusted by six of the ten largest Swiss banks, today announced it has raised EUR 5 million in a Series A+ financing round. The round was led by existing investor Spicehaus Partners, with continued participation from Grapha Holding, EquityPitcher Ventures, and ZKB Start-up Finance. The capital will accelerate xorlab's expansion across Europe as the company builds the continent's leading sovereign email security platform, starting with DACH, Benelux, and the Nordics.

The financing comes amid rapidly growing demand from European organizations seeking to reduce their dependence on US-based IT security providers.

European organizations face a dual challenge. Email remains a major entry point for cyberattacks, and those attacks are growing more sophisticated as adversaries use AI to craft convincing phishing campaigns at scale. At the same time, geopolitical tensions have made European organizations, decision makers and regulators increasingly concerned about fully relying on US-controlled infrastructure and security providers.

Regulations such as DORA and NIS2 add further pressure, holding financial institutions and critical-infrastructure operators directly accountable for the resilience of their digital supply chains.

xorlab gives European organizations something they increasingly cannot compromise on: best-in-class protection against the most advanced email attacks without sacrificing control over their data, infrastructure or digital sovereignty. That demand is reflected in the company's growth. xorlab closed its strongest year to date in 2025, and inbound demand from European enterprises has already doubled again in 2026.

"Europe needs its own cybersecurity champions. Not European copies of US incumbents, but companies capable of defining the next generation of enterprise security," said Antonio Barresi, CEO and co-founder of xorlab. "Email remains one of the most critical attack surfaces, and AI is fundamentally changing the threat landscape. European organizations need security that combines world-class protection with control over their data and infrastructure. There is no better place to build the European leader in email security than in the heart of Central Europe."

xorlab helps security teams stop the new generation of email attacks: AI‑crafted phishing and business email compromise (BEC) campaigns that carry no malware, match no known signature, read like legitimate messages, and often slip past Microsoft 365 and traditional filters into employee inboxes.

Because these attacks look normal in isolation, xorlab evaluates every message in context: its behavioral AI understands what legitimate communication looks like for each organization and catches what doesn't fit - an unusual sender, an out-of-pattern request, a first-time payment request - before anyone can click.

"xorlab has built something rare: differentiated technology solving a mission-critical problem, validated by some of Europe's most demanding enterprise customers," said Daniel Andres, Founding Partner at Spicehaus Partners. "We have very high conviction that the combination of AI-driven threats, increasing regulatory pressure, and Europe's push for digital sovereignty is creating a generational opportunity in cybersecurity. xorlab has the technology, customer trust, and market position to build a European category leader, and we are doubling down on that ambition."

And because every organization's risk and regulatory posture is different, customers choose how xorlab runs: fully on-premises, with local processing and storage; in a hybrid configuration; or in the cloud, where processing takes place in European data centers and operations are managed by Europe-based staff.

The platform supports customers' DORA, NIS2, and GDPR compliance requirements and serves financial institutions, healthcare organizations, critical-infrastructure operators, telecommunications providers, and public-sector entities. xorlab is trusted by organizations whose workforces range from 500 to more than 37,000 employees - including Julius Bär, Swisscom, Vontobel, G+D Netcetera, and CERN.

About xorlab

xorlab is a European email security platform that blocks the advanced phishing attacks Microsoft 365 and on-premises filters miss.

The company helps organizations move from reactive defense to proactive threat prevention with a behavioral AI solution built for complex, high-security, and highly regulated environments.

The platform continuously learns and improves across its entire customer base while preserving the privacy of each individual organization. Beyond enhanced threat prevention, it provides the capabilities modern SOC teams require — from complete visibility into email flows to AI-driven automation such as abuse-mailbox handling.

Trusted by organizations ranging from 500 to 37,000+ employees, xorlab counts Julius Bär, Swisscom, Vontobel, G+D Netcetera, and CERN among its customers.

Organizations can deploy xorlab on-premises with fully local processing and storage, in hybrid configurations, or in the cloud, where processing takes place in European data centers and operations are managed by Europe-based staff. xorlab is compliant with DORA, NIS2, and GDPR.

Learn more at www.xorlab.com.

Media Contact
Candid Wüest, Principal Security Advocate at xorlab.
candid.wueest@xorlab.com

About Spicehaus Partners

Spicehaus Partners is an independent venture capital firm backing the next generation of Swiss technology champions. The firm invests in early-stage B2B technology companies that have demonstrated initial revenues and have the potential to scale internationally. Spicehaus combines institutional investment expertise with an entrepreneurial approach and actively supports founders in scaling their businesses beyond Switzerland.

Spicehaus Partners AG
Daniel Andres
Founding Partner