Antwerp-based cybersecurity firm XFA has closed a $1.7 million Seed funding round to scale its device security platform and build a safety net for the modern, hybrid, and AI-native workplace. The investment was led by Belgium’s ScaleFund and Dutch firm Curiosity, with participation from PMV, Seeder Fund, and entrepreneurs grouped under Investee.
Addressing the Modern Workplace Security Gap
The modern work environment, shaped by remote teams and BYOD usage, creates a significant security challenge for businesses. Traditional device security approaches often rely on invasive management software, which is increasingly incompatible with flexible work environments due to privacy concerns and logistical complexity.
XFA points to a major visibility gap: current approaches cover about 40% of devices, leaving the remaining 60%, often personal or unmanaged devices, outside IT control. The company also cites research suggesting the average work device can be hundreds of days out of date on security updates.
A Privacy-First Verification Solution
XFA’s technology verifies the security of any device at the moment of login, without invasive management software or prior knowledge of the device. The company says its approach detects devices used for work, guides users to make required security updates, and verifies security instantly while respecting user privacy.
The platform is designed for fast deployment, with XFA stating it can be rolled out organization-wide with a single 15-minute setup, helping businesses reach complete device security coverage within a few weeks.
Strategic Investment and Market Expansion
XFA was founded in 2023 by Lars Veelaert (CEO and co-founder) and Gijs Van Laer (CTO and co-founder). Investors backing the round highlighted the need for a simple, reliable way to determine whether a device can be trusted the moment it connects.
The company says the funding will help it expand beyond its current platform and leverage advances in cryptography and AI. XFA also works with compliance platforms like Vanta to streamline device security evidence for certifications such as ISO 27001, SOC 2, and NIS2, and reports having customers across Europe, North America, and Asia.