XFA Raises €1.5M to Secure the Unmanaged Workplace

Antwerp-based XFA has raised €1.5 million in seed funding to scale its platform and address a growing gap in workplace cybersecurity. The round was led by ScaleFund and Curiosity, with participation from PMV, Seeder Fund, and a group of operators investing through Investee. The company is focused on a problem many security teams struggle with but rarely solve well: the rise of unmanaged devices in hybrid, remote, and AI-driven work environments.

Traditional device security models assume corporate ownership and control. That assumption no longer holds. A large share of work today happens on personal laptops, contractor devices, or hardware that never touches an MDM agent. These devices are often outdated, partially visible, or completely unknown to IT, creating blind spots that don’t show up in standard endpoint reports. XFA is positioning itself as an alternative to invasive device management by verifying device security at the moment of login, without requiring prior enrollment or persistent control.

Founded in 2023 by cybersecurity advisor Lars Veelaert and cryptography researcher Gijs Van Laer, XFA has built a privacy-first approach that focuses on verification rather than ownership. The platform is designed to detect every device accessing corporate systems and assess whether it meets security requirements in real time. Deployment is lightweight, with the company claiming organizations can reach full coverage within weeks rather than months.

The new funding will support platform expansion and further investment in cryptography and AI. XFA is also aligning itself with compliance-driven workflows, integrating with platforms like Vanta to help customers generate device security evidence for frameworks such as ISO 27001, SOC 2, and NIS2. With customers already spread across Europe, North America, and Asia, the company is betting that the future of endpoint security is less about locking devices down and more about deciding, quickly and reliably, whether they can be trusted at all.