xorlab
xorlab is a Zurich-based cybersecurity company that uses behavioral AI to detect sophisticated phishing, BEC, and malware in email, primarily serving European enterprises in financial services, research, healthcare, and regulated industries.
- Company typePrivate
- Founded2015
- HeadquartersZürich, Switzerland
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What xorlab does
xorlab AG is a Zurich-based, privately held cybersecurity company that builds an AI-powered email security platform designed to stop advanced phishing, business email compromise, malware, and other email-borne attacks that bypass traditional Secure Email Gateways and built-in cloud email defenses. The platform's core is a behavioral AI and Context Intelligence engine that analyzes hundreds of signals—sender-receiver relationships, reputation, content, and behavioral anomalies—to build a per-organization communication model that flags deviations in real time. The product surface comprises the core xorlab Security Platform, an Inbound Email Security module, Abuse Mailbox Automation, and three extensions (Attachment Sandbox, Contextual Banners, Self-Service Quarantine), with deployment options spanning on-premise, Microsoft 365, Google Workspace, and hybrid environments. Customers can additionally purchase Email Attack Simulation services, with a free Light tier and a CHF 1,750 Advanced tier covering 160+ attack scenarios.
The company primarily sells to mid-market and large European enterprises—banks, wealth managers, insurers, research institutions, healthcare providers, and regulated industrial firms—with notable customers including CERN (18,000+ mailboxes), Bank Julius Baer, Vontobel, Swisscom, Swiss Post, Coop, Implenia, Haufe Group, and Universitätsspital Zürich. Go-to-market combines direct enterprise sales with personalized demos, a structured channel program (resellers, MSP/MSSP, technology alliances), and integrations that layer xorlab on top of Microsoft 365 and Google Workspace. The company markets itself explicitly as a European-built, GDPR/DORA/NIS2/ISO 27001-compliant alternative, a positioning that resonates with Swiss and EU regulated buyers. Revenue is subscription-based, priced on organization size and email volume, with reported 97% year-over-year customer retention. The company raised a CHF 6.1 million Series A in October 2021 (total disclosed funding approximately CHF 10–11M across earlier rounds) and employs 11–50 people, including a full C-suite of CEO, CTO, CFO, CRO, and CPO.
xorlab firmographics
Firmographics- Name
- xorlab
- Legal name
- xorlab AG
- Website
- https://xorlab.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- xorlab is a Zurich-based cybersecurity company that uses behavioral AI to detect sophisticated phishing, BEC, and malware in email, primarily serving European enterprises in financial services, research, healthcare, and regulated industries.
- Ownership category
- akta.pro rank
xorlab industry classification
Industry- Product category
- Email Security Software
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Email & Collaboration Threat Detection/Response (ICR/CTDR) (HDADAKAI)
Keywords
Where xorlab is headquartered
LocationHeadquarters
- HQ city
- Zürich
- HQ country
- Switzerland
- HQ region
- Europe
Offices1 record
Markets served
xorlab business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- Email Security Platform Subscription: xorlab generates revenue primarily through subscription-based licensing of their email security platform, with pricing based on organization size and email volume. The platform can be deployed on-premises, in the cloud, or in hybrid configurations.
- Attack Simulation Services: xorlab offers paid attack simulation services including a free Light Simulation (5-10 phishing emails with basic results) and a paid Advanced Simulation at CHF 1,750 for comprehensive testing across 160+ attack scenarios.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | One-time | Light Simulation - Free email security check |
| Subscription | One-time | Advanced Simulation - Comprehensive attack simulation |
Go-to-market motion2 records
Distribution channels6 records
Marketing channels7 records
xorlab product offering
Product offeringCore offering
xorlab develops and sells an AI-powered email security platform that uses Behavioral AI and Context Intelligence to detect and stop advanced phishing, BEC, malware, and AI-generated email attacks. The platform deploys on-premise, in the cloud, or in hybrid configurations and is offered alongside extensions for attachment sandboxing, contextual banners, self-service quarantine, and an abuse-mailbox automation module, plus an Email Attack Simulation testing service.
Product overview
xorlab is a European email security platform built as a unified platform-plus-extensions architecture. The core xorlab Security Platform provides AI-powered inbound email security using behavioral AI and contextual analysis to detect sophisticated phishing, BEC, and malware attacks. Three main extensions extend the platform: Attachment Sandbox for dynamic file analysis, Contextual Banners for employee awareness, and Self-Service Quarantine for end-user quarantine management. The Abuse Mailbox Automation module streamlines security operations. The company also offers Email Attack Simulation as a standalone service with Light (free) and Advanced (paid) tiers for security testing. The platform supports on-premises, Microsoft 365, and Google Workspace environments.
Differentiator
Problem solved
Functional benefit
Products and services
- xorlab Security Platform The core unified xorlab platform delivering AI-powered email security with behavioral AI for detecting advanced phishing, BEC, and malware attacks across on-premise, cloud, and hybrid email environments. Sold to enterprise and mid-market security teams.
- Inbound Email Security AI-powered inbound email protection that stops modern email attacks using behavioral AI and contextual analysis to detect sophisticated phishing threats that bypass traditional Secure Email Gateways or Microsoft 365 built-in security. Sold to enterprise security teams running M365, Google Workspace, or on-premise Exchange.
- Abuse Mailbox Automation Streamlines management of abuse mailboxes and user-reported email workflows with automatic categorization and prioritization, ensuring critical alerts surface while reducing security team workload. Sold to enterprise security operations teams.
- Email Attack Simulation Security testing service that validates email security effectiveness using realistic attack simulations across 160+ scenarios covering phishing, BEC, malware, and extortion, without requiring allow-lists. Offered as a self-service Light tier (free) and a paid Advanced tier with detailed risk analytics report. Sold to enterprise and mid-market security teams.
Quantifiable outcome
- €7 million per year in damages saved on average for each customer
- +7 more outcomes
Companies that use xorlab
Customer profileNamed customers17 records
Segments5 records
Ideal customer profiles3 records
xorlab technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration3 records
AI capability7 records
Feature8 records
xorlab partnerships and signals
Strategic signalPartnerships
18 partnerships are on record, tiered core and minor.
- SwisscomcoreSwisscom partnered with xorlab to bring context-intelligent email security to enterprise customers. Swisscom, as a major telecommunications provider, uses xorlab to meet rising expectations for email security and strengthen their overall security posture. The partnership enables Swisscom to protect customers against emerging threats reliably and effectively.
- Arcade AGcoreArcade AG offers xorlab's email security as a managed service from their data centers in Switzerland. Working with xorlab enables Arcade to offer one of the most advanced email security solutions with advanced technology, local hosting, and real security improvements.
- AvanteccoreAvantec serves as a co-selling partner for xorlab, offering the solution as an ideal complement to Microsoft 365 Email Security. The partnership provides technically strong and commercially attractive solutions with significant future potential.
- Open SystemsminorOpen Systems is listed as a trusted partner offering xorlab email security solutions.
- Clear MediaminorClear Media is listed as a trusted partner for xorlab email security.
- TalusminorTalus is listed as a trusted partner for xorlab email security.
- ITRISminorITRIS is listed as a trusted partner for xorlab email security solutions.
- CerunominorCeruno is listed as a trusted partner for xorlab email security.
- QbitsminorQbits is listed as a trusted partner for xorlab email security.
- R4CminorR4C is listed as a trusted partner for xorlab email security.
- ColitedminorColited is listed as a trusted partner for xorlab email security.
- ZISCminorZISC is listed as a trusted partner for xorlab email security.
- PrinatominorPrinato is listed as a trusted partner for xorlab email security.
- CybovateminorCybovate is listed as a trusted partner for xorlab email security.
- CyprotectminorCyprotect is listed as a trusted partner for xorlab email security.
- ComedminorComed is listed as a trusted partner for xorlab email security.
- Microsoftcorexorlab integrates seamlessly with Microsoft 365 email security, functioning as an additional security layer on top of existing Microsoft 365 subscriptions. Organizations migrating to Microsoft 365 often rethink their security stack, opening opportunities for xorlab's smarter solutions.
- Googlecorexorlab provides email security protection for Google Workspace environments, enabling organizations using Google's productivity suite to enhance their security.
Scale indicators8 records
Recent moves6 records
Expansion highlights6 records
xorlab competitors and assessment
Company assessmentEmerging players
- Valimail: Valimail focuses on email authentication (DMARC, BIMI) and anti-spoofing, an adjacent but partially overlapping approach to preventing the phishing and BEC attacks xorlab's behavioral AI targets.
Direct peers
- Proofpoint: Proofpoint is the leading standalone enterprise email security vendor, offering threat protection, fraud defense, and compliance. It is the most direct large-scale competitor to xorlab's AI-driven inbound email security platform.
- Mimecast: Mimecast provides email security, archiving, and continuity as a unified cloud platform. It competes head-to-head with xorlab in inbound threat detection, BEC protection, and Microsoft 365 augmentation.
- Abnormal Security: Abnormal Security uses behavioral AI modeling of email communications to stop phishing, BEC, and account takeover — an almost identical technological approach to xorlab's relationship-based detection engine.
- IRONSCALES: IRONSCALES delivers AI-powered email security with a focus on phishing simulation, user-reported email triage, and self-service quarantine — overlapping directly with xorlab's Abuse Mailbox Automation and Self-Service Quarantine products.
- Avanan (Check Point Software): Avanan, now part of Check Point, offers cloud-native email security for Microsoft 365 and Google Workspace using AI-based phishing and malware detection, closely matching xorlab's inbound email security use case.
Broad incumbents
- Microsoft Defender for Office 365: Microsoft's built-in email security offering for Microsoft 365 tenants. As the incumbent within the dominant email platform, it represents both the primary integration surface and the most significant competitive threat to xorlab's add-on positioning.
- Trend Micro Email Security: Trend Micro provides email security as part of a broad cybersecurity portfolio including endpoint and network protection. It competes with xorlab in the inbound threat detection space, especially in European enterprise accounts.
- Barracuda Email Security: Barracuda Networks offers email protection gateways and cloud-native email security. It is a broad incumbent in the SEG and cloud email security category where xorlab positions itself as a modern alternative.
- Cisco Secure Email (formerly IronPort): Cisco's email security portfolio, inherited from IronPort, serves large enterprises with on-premise and cloud deployments. It is a broad incumbent competing with xorlab's ability to replace or enhance traditional SEGs.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
xorlab social profiles
Digital presencexorlab compliance and trust
Trust signalCompliance6 records
xorlab financial estimates
Financial estimateRevenue estimate
Valuation estimate
xorlab leadership team
Management profileNumber of profiles
Profiles10 records
xorlab funding detail
Funding detailFunding overview
Funding rounds9 records
Investors8 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
xorlab M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about xorlab
What does xorlab do?
xorlab develops and sells an AI-powered email security platform that uses Behavioral AI and Context Intelligence to detect and stop advanced phishing, BEC, malware, and AI-generated email attacks. The platform deploys on-premise, in the cloud, or in hybrid configurations and is offered alongside extensions for attachment sandboxing, contextual banners, self-service quarantine, and an abuse-mailbox automation module, plus an Email Attack Simulation testing service.
Is xorlab a public or private company?
xorlab is a private company. It is classified as venture growth investor backed and is currently operating.
When was xorlab founded?
xorlab was founded in 2015. It employs 11 to 50 people.
Where is xorlab based?
xorlab is headquartered in Zürich, Switzerland, in the Europe region.
How does xorlab make money?
Two revenue lines are on record. Email Security Platform Subscription is the primary driver. The others are attack Simulation Services.
Who are xorlab's main competitors?
Valimail is listed as an emerging player. Direct peers are Proofpoint, Mimecast, Abnormal Security, IRONSCALES and Avanan (Check Point Software). Broad incumbents are Microsoft Defender for Office 365, Trend Micro Email Security, Barracuda Email Security and Cisco Secure Email (formerly IronPort).
Does xorlab have an API?
No public API is recorded for xorlab.
What industry is xorlab in?
xorlab's product category is Email Security Software. Its primary akta.pro industry code is HDADAKAI, Email & Collaboration Threat Detection/Response (ICR/CTDR). Its NAICS code is 54151 and its SIC code is 7372.