xorlab, a Zurich-based cybersecurity company, has raised €5 million in a Series A+ round led by Spicehaus Partners, with participation from Grapha Holding, EquityPitcher Ventures and ZKB Start-up Finance, as the company positions itself within Europe's push for greater cybersecurity sovereignty.
The company's email-security software uses behavioural analysis to identify phishing attempts, business-email compromise and other targeted attacks based on abnormal communication patterns, rather than relying solely on matching against known threat signatures — an approach designed to catch novel attack techniques that signature-based systems typically miss.
xorlab's existing customer base includes prominent Swiss and European institutions such as Julius Bär, Swisscom, Vontobel and the physics research organisation CERN, according to current reporting — a client roster that reflects the premium European financial and research institutions increasingly place on cybersecurity vendors capable of guaranteeing local data processing and residency.
That emphasis on data residency has taken on growing strategic significance across Europe, as regulatory frameworks including the EU's Digital Operational Resilience Act and NIS2 directive, combined with public-sector procurement preferences, have created meaningful commercial opportunities for European cybersecurity vendors able to offer local processing alongside competitive technical capability.
The new funding will finance xorlab's expansion across the DACH region (Germany, Austria and Switzerland), the Benelux countries and the Nordic markets — a deliberately European growth strategy that plays to the company's core positioning around data sovereignty, rather than an immediate push into the United States market where competition among email-security vendors is considerably more crowded.
The round adds to a broader pattern of European cybersecurity start-ups attracting sustained investor interest throughout 2026, as heightened geopolitical tension and growing regulatory emphasis on strategic technological independence have made sovereignty-focused vendors increasingly attractive both to enterprise customers and to the investors backing them.
For xorlab, the path forward centres on demonstrating that behavioural-AI-based email security can outperform larger, more established international vendors on detection accuracy, while offering the data-residency guarantees that have become an increasingly non-negotiable requirement for European financial institutions, research organisations and public-sector customers navigating an evolving regulatory landscape.
