AegisAI Raises $36 Million to Combat AI-Powered Phishing

When Email Becomes a Battlefield

Hackers no longer rely on crude, traditional tricks to breach corporate systems. Artificial intelligence has given them a remarkably precise tool: the ability to aggregate personal information about a target — from colleagues and ongoing projects to recent travel schedules — and use that data to craft convincing emails that appear to come from entirely trusted sources. This type of attack, known as spear phishing, represents a growing threat that many traditional security systems are ill-equipped to handle.

AegisAI: Born from Google's Ranks

To meet this challenge, Cy Khormaee and Ryan Luo — former Google executives who spent years developing Safe Browsing technologies and the reCAPTCHA system — founded a startup called AegisAI in 2024. The co-founders bring a decade of experience in email security, which gave them firsthand insight into the shortcomings of rigid, rule-based systems that follow "if this, then that" logic. Such systems simply cannot keep pace with the speed and adaptability of AI-generated attacks.

The team's solution relies on AI agents capable of analyzing every incoming email with the same depth a seasoned human investigator would apply, while detecting the subtle anomalies that slip past even the most comprehensive checklists.

A $36 Million Series A and a Growing Customer Base

In less than a year since launch, AegisAI has attracted dozens of customers, including crypto payments company Mesh, AI development platform LangChain, and data privacy compliance tool Lokker. This real-world traction paved the way for a $36 million Series A funding round led by Battery Ventures, with participation from existing investors Accel and Foundation Capital, bringing total capital raised to $49 million.

Why Traditional Security Systems Fall Short

Khormaee reveals a troubling reality: AI-powered attacks bypass existing protection systems in more than half of all cases, making them twice as effective as they were just a few years ago. Among AegisAI's key detection capabilities are:

• Malicious attachments disguised as seemingly legitimate PDF files
• Password-protected files with embedded credentials, designed to deceive spam filters
• Fake CAPTCHA pages used to smuggle malicious content without raising suspicion

A Competitive Market and a Bet on Expertise

AegisAI is not alone in this space. Other companies, such as Lightspeed-backed Ocean, are challenging established players like Proofpoint and Mimecast, alongside newer entrants like Abnormal Security. However, Dharmesh Thakker, General Partner at Battery Ventures, believes AegisAI's competitive edge lies in its founders' background — having helped secure Gmail, the world's most widely used email platform.

"Attackers are using AI to assault our email inboxes faster than we can keep up," Thakker says, adding that defending against these attacks will be a top priority for the majority of organizations in the period ahead.

Beyond Email

AegisAI does not view email as its final destination. The company has its sights set on expanding into broader security domains, including data protection. Khormaee summarizes their vision: "The core idea is to build specialized agents with advanced investigative capabilities — that is the path that will determine who leads the next generation of security companies."

In a world where attackers are armed with the latest AI tools, defending with legacy systems is no longer a viable option. The battle now demands intelligence against intelligence.

✦ بقلم فريق دروب أيديا