xorlab Email Security Platform

xorlab is a Swiss email security company founded in 2015 by two ETH Zurich computer science graduates and based in Zurich. It addresses phishing and business email compromise that pass Microsoft 365 and traditional filters, including AI-written messages without malware.

The platform applies behavioral AI that judges each message against an organization's normal communication patterns, such as unusual senders or first-time payment requests. Products include Inbound Email Security, Abuse Mailbox Automation, Attachment Sandbox, Contextual Banners and Self-Service Quarantine. It runs fully on-premises, hybrid or in the cloud with European data centers, and serves banks and large enterprises.

• Behavioral AI detection: scores each email against the organization's normal communication context.
• Inbound Email Security: blocks phishing and business email compromise before delivery.
• Abuse Mailbox Automation: processes employee-reported messages automatically.
• Attachment Sandbox: analyzes suspicious attachments.
• Contextual Banners: warns users inside the mailbox about risky messages.
• Self-Service Quarantine: lets users review held messages themselves.

Banks and securities firms in Vietnam can screen vendor-invoice and payment-change emails for fraud. Large enterprises on Microsoft 365 can add a behavioral layer and automate the abuse mailbox for the SOC.

Detects targeted phishing and payment-fraud emails that pass Microsoft 365 filters.

Lets the buyer choose on-premises, hybrid or cloud deployment with European data hosting.

Automates handling of reported abuse mailbox messages to reduce SOC workload.

Provides contextual banners and self-service quarantine for employees.

AI-written phishing and business email compromise are growing and often carry no malware, so signature-based filters struggle. Regulations such as NIS2 and DORA push financial and critical-sector firms to strengthen email defenses. Vietnamese and Southeast Asian banks face the same payment-fraud pattern.

Founded in 2015 in Zurich by Antonio Barresi and Matthias Ganz, a spin-off from ETH. Raised CHF 6.1 million Series A in 2021 and EUR 5 million Series A+ in September 2026. Address: Binzmühlestrasse 170d, 8050 Zurich.