Swiss Cybersecurity Firm Secures €5 Million to Protect European Emails

2026-09-02 digital

Zurich, Wednesday 2 September 2026
Zurich-based xorlab has raised €5 million to expand its AI-powered security platform, capitalising on doubled demand as European firms seek domestic alternatives to US technology.

Expanding Across High-Security Frontiers

The Zurich-based cybersecurity startup secured €5 million in a Series A+ financing round, announced on 31 August 2026 [4]. The investment round was led by Spicehaus Partners, with continued participation from existing insider shareholders Grapha Holding, EquityPitcher Ventures, and ZKB Start-up Finance [5]. This capital injection follows xorlab’s strongest fiscal year to date in 2025, a period that laid the groundwork for inbound demand from European enterprises to double in 2026 [1][3]. The company plans to use the funds to scale its enterprise sales structures across Europe, with an immediate commercial focus on the DACH region, Benelux, and the Nordics [1][5].

Trusted by Critical Infrastructure

Founded in 2015 by ETH Zurich computer science graduates Antonio Barresi and Matthias Ganz [4], xorlab has built a reputable client base that spans highly regulated sectors, including financial services, healthcare, telecommunications, and critical infrastructure [2]. Its current customer portfolio features prominent names such as Swisscom, Julius Bär, Vontobel, G+D, and the European Organization for Nuclear Research (CERN) [1][2]. These clients represent organisations ranging from 500 to over 37,000 employees, all requiring robust defence mechanisms to protect their communication channels [1].

AI-Powered Context and Behavioural Intelligence

The platform, known as ActiveGuard, is designed to intercept sophisticated communication threats, such as business email compromise (BEC), ransomware, and phishing campaigns, which often bypass traditional filters like Microsoft 365 [1][6]. Rather than relying on static, outdated threat databases, xorlab’s cloud-native software uses specialised natural language processing (NLP) and behavioural AI models to map out an organisation’s unique internal communication patterns [2][5]. By establishing a baseline of trusted interactions, the platform can programmatically inspect inbound messages for structural and contextual anomalies [5].

Defeating Generative AI Threats

This context-aware approach allows the software to flag atypical requests, unusual senders, or first-time payment instructions that contain no known malware signatures [2][3]. In an era where malicious actors increasingly employ generative AI to craft highly convincing and personalised phishing attempts, this behavioural analysis is critical [3][4]. The system isolates targeted malicious payloads and blocks look-alike domains before they reach employee inboxes, thereby eliminating data infiltration attempts at the entry point [5].

Regulatory Compliance and Digital Sovereignty

A key differentiator for xorlab is its commitment to European digital sovereignty, offering a clear alternative to US-based cybersecurity incumbents [3][4]. The platform supports flexible deployment configurations, allowing enterprises to run the software fully on-premises, in a hybrid setup, or as a cloud-native solution [2][4]. For cloud deployments, all data processing and storage are strictly handled within European data centres by Europe-based personnel, ensuring compliance with stringent regional regulations [2][4].

Meeting Stringent Standards

This localised infrastructure model is particularly attractive to European enterprises and public institutions grappling with compliance requirements under the General Data Protection Regulation (GDPR), the Network and Information Systems Directive (NIS2), and the Digital Operational Resilience Act (DORA) [2][3][4]. As regulatory pressures mount and corporate concerns over dependency on non-European IT infrastructure grow, homegrown solutions like xorlab are well-positioned to lead the next generation of enterprise security [3][4].

Sources & Ecosystem Partners

venture capital cybersecurity