European email security company xorlab has raised €5 million in a Series A+ financing round to support its expansion across Europe and further develop its email security platform. The round was led by existing investor Spicehaus Partners, with continued participation from Grapha Holding, EquityPitcher Ventures and ZKB Start-up Finance.

The financing comes as European organisations increasingly look to reduce their reliance on US-based cybersecurity providers while responding to more sophisticated email threats.

Email remains a major entry point for cyberattacks, with AI enabling attackers to create increasingly convincing phishing and business email compromise (BEC) campaigns at scale. These attacks can contain no malware or known malicious signatures and often resemble legitimate communications, making them difficult for conventional email filters to identify.

At the same time, regulations including the Digital Operational Resilience Act (DORA) and NIS2 are increasing requirements around the resilience of digital supply chains, particularly for financial institutions and critical-infrastructure operators.

xorlab develops an email security platform that uses behavioural AI to analyse messages within the context of an organisation's normal communication patterns. Rather than relying primarily on known signatures, the technology looks for anomalies such as unusual senders, unexpected requests or first-time payment instructions that could indicate phishing or BEC attempts.

Customers can deploy the platform on-premises, with local processing and storage, through a hybrid configuration or in the cloud, where processing takes place in European data centres and operations are managed by Europe-based staff. The platform is designed to support requirements under DORA, NIS2 and GDPR.

Europe needs its own cybersecurity champions. Not European copies of US incumbents, but companies capable of defining the next generation of enterprise security. Email remains one of the most critical attack surfaces, and AI is fundamentally changing the threat landscape,

said Antonio Barresi, CEO and co-founder of xorlab.

The company serves financial institutions, healthcare organisations, critical-infrastructure operators, telecommunications providers and public-sector entities. Its customers include Julius Bär, Swisscom, Vontobel, G+D and CERN, as well as several major Swiss banks.

The company plans to use the funding to expand across European markets, initially focusing on the DACH region, Benelux and the Nordics.

Related articles