Email security that Swiss banks trust
Behaviour-based AI stops phishing, CEO fraud and ransomware before they reach your inbox.
xorlab ActiveGuard
The email security platform that detects the threats others miss.
As a certified xorlab partner, we implement the very same solution trusted by 7 of the 10 largest Swiss banks. ActiveGuard analyses communication relationships and behavioural patterns with AI, detecting targeted attacks that conventional spam filters and Microsoft Defender let through.
4x higher detection rate · 0.06% false-positive rate · 91% time saved on email triage · 60% fewer phishing incidents after deployment
4x higher detection rate · 0.06% false-positive rate · 91% time saved on email triage · 60% fewer phishing incidents after deployment
Why conventional email filters fail
AI-generated attacks
Attackers use generative AI to craft deceptively real phishing emails. Static rules and signature-based filters no longer reliably detect these threats.
CEO fraud and BEC
Business Email Compromise is the costliest cyber threat worldwide. Forged payment instructions and manipulated senders cause damage running into the millions for Swiss SMEs.
Incident overload in the SOC
Security teams spend hours manually triaging reported emails. Real threats are lost in the flood of false positives.
Enterprise email security in 3 steps
1. Security assessment
We analyse your current email infrastructure and uncover vulnerabilities that your existing filter misses. Free and without obligation.
2. Seamless integration
xorlab ActiveGuard is layered as an additional protective shield over your existing Microsoft 365, Google Workspace or on-premise system. No disruption, no migration project.
3. Proactive protection
From day 1, the behaviour-based AI analyses every incoming email. Our Swiss expert team monitors, optimises and is available to you as a direct point of contact.
We analyse your current email infrastructure and uncover vulnerabilities that your existing filter misses. Free and without obligation.
2. Seamless integration
xorlab ActiveGuard is layered as an additional protective shield over your existing Microsoft 365, Google Workspace or on-premise system. No disruption, no migration project.
3. Proactive protection
From day 1, the behaviour-based AI analyses every incoming email. Our Swiss expert team monitors, optimises and is available to you as a direct point of contact.
Swiss Hosted. DORA- and NIS2-compliant.
xorlab is developed and hosted in Switzerland. Your email data never leaves Switzerland. Certified to the highest European standards.
GDPR-compliant · NIS2-compliant · DORA-compliant · ISO-certified · Swiss Made Software · Cybersecurity Made in Europe
Also trusted by: Die Post, CERN, Julius Bär, Swisscom, Implenia, Vontobel, Coop, USZ
GDPR-compliant · NIS2-compliant · DORA-compliant · ISO-certified · Swiss Made Software · Cybersecurity Made in Europe
Also trusted by: Die Post, CERN, Julius Bär, Swisscom, Implenia, Vontobel, Coop, USZ
Why ActiveGuard detects more than your spam filter
Behaviour-based AI
Analyses sender-recipient relationships, communication patterns and hundreds of signals per email. Detects anomalies rather than just known signatures.
CEO fraud & BEC protection
Identifies forged sender identities and manipulated payment instructions through behavioural analysis, before financial damage occurs.
QR code & link analysis
Analyses embedded QR codes, shortened URLs and obfuscated links in real time. Also stops quishing attacks that classic filters fail to detect.
Automated email triage
Emails reported by employees are automatically analysed, classified and escalated. Your security team saves up to 91% of the previous triage time.
Contextual warning banners
Dynamic warnings directly within suspicious emails raise employee awareness at the right moment for more informed decisions.
Self-service quarantine
End users review and release quarantined emails on their own. Fewer IT tickets, faster business processes, happier employees.
Part of our phishing protection ecosystem
xorlab ActiveGuard is a central building block of our multi-layered phishing defence. Combine the AI protection with our proven services for maximum impact:
✔ Phishing Outlook Add-in · employees report suspicious emails with a single click directly from Outlook
✔ Phishing Analysis Service · reported emails are automatically analysed, assessed and escalated where needed
✔ Phishing simulations · realistic training campaigns strengthen your employees' security awareness
✔ Phishing Outlook Add-in · employees report suspicious emails with a single click directly from Outlook
✔ Phishing Analysis Service · reported emails are automatically analysed, assessed and escalated where needed
✔ Phishing simulations · realistic training campaigns strengthen your employees' security awareness
Find out which threats your current spam filter lets through. Free security analysis in 30 minutes.
Frequently Asked Questions about email security
01
What is the difference to Microsoft Defender / EOP?
xorlab complements Microsoft 365 as an additional protective layer. While EOP and Defender filter known threats, xorlab uses behaviour-based AI to also detect novel, targeted attacks, and with a 4x higher detection rate.
02
How fast is the integration?
The integration takes place without any disruption to your operations. xorlab can initially run in parallel in "Proof of Value" mode, so you can see the results before you switch over.
03
Are there many false alarms?
No. With a false-positive rate of just 0.06%, false alarms are virtually ruled out. That means: no blocked business emails, no frustration for employees.
04
Which company sizes is the solution suitable for?
xorlab protects organisations from 50 to 37,000 employees. As your local partner, we configure and support the solution specifically for Swiss SMEs.
05
What does the solution cost?
The cost depends on the number of mailboxes and the desired scope of services. Contact us for a free initial consultation and an individual quote.
Request a free initial consultation
We show you which threats your current spam filter lets through