xorlab, a Swiss email security company developing sovereign cybersecurity infrastructure for European organizations, has raised €5 million in a Series A+ round led by existing investor Spicehaus Partners, with participation from Grapha Holding, EquityPitcher Ventures and ZKB Start-up Finance. The funding will accelerate expansion across Europe, initially targeting DACH, Benelux and the Nordics.
Expanding Sovereign Email Security
The investment comes as European enterprises seek greater control over security infrastructure and data amid rising AI-powered cyberattacks and regulatory requirements including DORA and NIS2. xorlab reported a record year in 2025, while inbound demand from European enterprises doubled again in 2026.
"Europe needs its own cybersecurity champions. Not European copies of US incumbents, but companies capable of defining the next generation of enterprise security," said Antonio Barresi, CEO and co-founder of xorlab. "Email remains one of the most critical attack surfaces, and AI is fundamentally changing the threat landscape. European organizations need security that combines world-class protection with control over their data and infrastructure. There is no better place to build the European leader in email security than in the heart of Central Europe."
Detecting AI-Powered Email Attacks
xorlab uses behavioral AI to detect phishing and business email compromise campaigns that can bypass traditional filters and Microsoft 365 protections. The technology analyzes communication patterns and identifies unusual senders, requests and payment activity before malicious messages reach employees.
"xorlab has built something rare: differentiated technology solving a mission-critical problem, validated by some of Europe's most demanding enterprise customers," said Daniel Andres, Founding Partner at Spicehaus Partners. "We have very high conviction that the combination of AI-driven threats, increasing regulatory pressure, and Europe's push for digital sovereignty is creating a generational opportunity in cybersecurity. xorlab has the technology, customer trust, and market position to build a European category leader, and we are doubling down on that ambition."
Scaling Across Europe
xorlab offers on-premises, hybrid and cloud deployments, with European data centers and Europe-based operations available for cloud customers. The platform supports DORA, NIS2 and GDPR compliance and serves organizations across financial services, healthcare, critical infrastructure, telecommunications and the public sector.
Customers include Julius Bär, Swisscom, Vontobel, G+D Netcetera and CERN, while six of Switzerland’s ten largest banks use the platform.