xorlab secures €5M to scale its email security platform across Europe

xorlab has pulled in €5 million in a Series A+ round to grow across Europe and keep building its email security platform. Spicehaus Partners led the round, and Grapha Holding, EquityPitcher Ventures and ZKB Start-up Finance also stayed in the mix.

The timing makes sense. European organisations are looking harder at US-based cybersecurity vendors, while email attacks are getting more convincing. AI is helping criminals churn out phishing and business email compromise campaigns that can look clean, come with no malware and leave conventional filters staring at the wrong clues.

xorlab’s pitch is that it doesn’t chase signatures first. Its platform uses behavioural AI to study messages in the context of how an organisation normally communicates, then flags oddities like unfamiliar senders, unexpected requests or first-time payment instructions. That’s the kind of thing security teams care about when the message itself looks harmless.

Deployment is part of the sell too. Customers can run it on-premises, in a hybrid setup or in the cloud, with processing in European data centres and operations handled by Europe-based staff. The company says that setup is meant to fit DORA, NIS2 and GDPR, which matters for banks and critical infrastructure operators that are suddenly being asked to prove their digital supply chains are resilient.

The customer list is already solid: Julius Bär, Swisscom, Vontobel, G+D and CERN, plus several major Swiss banks. xorlab plans to use the money to expand first in the DACH region, Benelux and the Nordics. And CEO and co-founder Antonio Barresi is making the broader case bluntly: Europe should build its own cybersecurity champions instead of just copying US incumbents.