xorlab
Email security against phishing, BEC and malware for Microsoft 365 or on-premises mail.
- Swiss CompanyThe operating company is headquartered and legally incorporated in Switzerland.
- Swiss OwnedThe ultimate controlling owner is Swiss (Swiss persons, companies, foundations or public bodies).
- Swiss DevelopedThe product is primarily developed by a team operating from Switzerland.
- Swiss Data OptionSwiss hosting is available as an option or for part of the service, but is not the default for everything.
- Self-hostableCan be installed on your own servers or on-premises.
xorlab.com
Overview
xorlab is an email security platform developed by xorlab AG in Zurich. It analyses inbound email for phishing, business email compromise, credential theft, QR-code phishing and malware, using behavioural models of each organisation’s normal communication patterns together with link, content and attachment analysis. Add-ons include an attachment sandbox, contextual warning banners and a self-service quarantine for end users; a second product automates the triage of suspicious emails reported by employees. xorlab also sells an email attack simulation as a service.
The platform works with Microsoft 365 or can replace or supplement an on-premises secure email gateway; it integrates with SIEM and SOAR tools and offers an API and SAML login. It is available as a SaaS operated by xorlab or as virtual machines run on the customer’s own infrastructure. For Swiss SaaS customers, xorlab’s sub-processor list names Microsoft Azure’s Swiss region and Green Datacenter in Switzerland; customers elsewhere are served from Germany and Azure West Europe.
xorlab targets organisations with high security requirements, including financial institutions, healthcare organisations, critical-infrastructure and telecommunications operators and public-sector bodies, and states that six of the ten largest Swiss banks use it. No prices are published.
Why it may be a Swiss alternative
xorlab is operated by xorlab AG, which is headquartered in Zürich. Swiss-headquartered, Swiss-owned company; product developed (wholly or largely) in Switzerland.
Swiss hosting is available for part of the service or as an option — check the hosting details below before relying on it.
May replace
- ProofpointProofpoint, Inc. · USFocuses on inbound email protection and abuse-mailbox automation for Microsoft 365 and on-premises mail; email archiving and outbound data loss prevention are not among the listed products.
- MimecastMimecast Services Limited · GBCovers inbound filtering, attachment sandboxing, warning banners and self-service quarantine; email archiving and continuity services are not among the listed products.
Foreign products with overlapping functionality. An alternative is not necessarily a one-to-one replacement.
Swiss footprint
Five independent questions. A Swiss company is not automatically Swiss-hosted — and vice versa. How the footprint is assessed
Swiss native. Swiss-headquartered, Swiss-owned company; product developed (wholly or largely) in Switzerland.
- HeadquartersIs the operating company headquartered in Switzerland?
- Zürich, Zurich (ZH), SwitzerlandVerified[1]
- Legal jurisdiction
- OwnershipIs the company ultimately Swiss-owned?
- YesInferred[3]
Venture-backed; the shareholder structure is not published. The EUR 5 million Series A+ round announced on 1 September 2026 was led by the existing investor Spicehaus Partners, with Grapha Holding, EquityPitcher Ventures and ZKB Start-up Finance participating; all disclosed investors are based in Switzerland. Co-founder Antonio Barresi is CEO and chairman of the board. No acquisition was found in reporting or register publications up to October 2026.
- DevelopmentIs the product developed in Switzerland?
- YesInferred[2]
xorlab AG and its leadership team are based in Zurich, it offers support from Swiss-based technical experts, and the company carries the swiss made software label. xorlab itself describes the product as built in Europe.
- HostingIs customer data hosted in Switzerland?
- Partly — SwitzerlandVendor claim[4]
Recorded as partly because customers outside Switzerland are served from Germany. According to xorlab's sub-processor list, SaaS customers in Switzerland are served from Microsoft Azure's Swiss region (mail transfer agent, language analysis, logs) and Green Datacenter in Switzerland (sandbox, attachment parsing, reputation service). Customers outside Switzerland are served from Hetzner in Germany and Azure West Europe. Cloudflare handles DNS. On-premises customers process and store email data on their own infrastructure.
- InfrastructureIs the hosting infrastructure operated by a Swiss-owned provider?
- No — Microsoft Azure (Switzerland region) and Green Datacenter · United StatesVendor claim[4]
Features & platforms
- Platforms
- Deployment
- Made for
- Interface languages
- Unknown / not verified
Privacy & security
- Single sign-on (SAML/OIDC)
- Yes
- Public API
- Yes
- Not verified
- End-to-end encryption, Encryption at rest, Encryption in transit, Multi-factor authentication, SCIM provisioning and Data export
- Certifications
- None listed
Pricing
- Pricing model
- On request
- Free plan
- No
- Free trial
- Unknown / not verified
- Enterprise plan
- Yes
- Billing in CHF
- Unknown / not verified
Open source
- Open source
- NoInferred
No source code is published.
Company
Zurich-based company, founded as an ETH Zurich spin-off, that develops email security software for organisations with high security requirements.
Sources & verification
Every claim on this page is marked as verified, vendor claim or inferred. Unknown means we could not confirm it — not that the answer is “no”.
- Verified Confirmed by an independent or official source such as the commercial register.
- Vendor claim Stated by the vendor in its own documentation, website or legal terms.
- Inferred Derived by the editors from indirect evidence — see the note.
- [1]
- [2]
- [3]
- [4]
- [5]
- [6]
- [7]
- [8]
xorlab AG
- [1]
- [2]
- [3]
- [4]