Start here
Pick the path that matches your role.
For Admins
Set up xorlab
Integrate with Microsoft 365 or on-premise, then tune detection and set up user quarantine.Start the setup →
For Analysts
Investigate & respond
Get oriented in a 15-minute walkthrough, then start triaging reported email.Get started →Evaluate xorlab
For teams that have not chosen xorlab yet.
See what xorlab catches before you switch anything on
It runs alongside the filtering you already have and reports what it would have done — no MX record change, and nothing blocked until you decide.
How a trial runs →Not decided yet? What xorlab Changes for Analysts and What Integrating xorlab Involves answer the two questions that come before a trial. Unfamiliar with a component or a term? Look it up in the Terminology glossary.
Popular guides
Feature Overview
Every feature, from detection layers to end-user self-service
Self-Service Quarantine
Let users manage their own quarantine
Multi-Tenancy
Manage multiple tenants in one console
Upgrade Guide
Move to the latest version safely
Security & Compliance
Which parties can process your data depends on whether you run xorlab on your own infrastructure or use it as a SaaS. List of Data Sub-Processors names them for each, and Data Flow Overview describes what each service receives while an email is analyzed.