AegisAI Raises $36M to Deploy AI Agents Against AI-Driven Phishing
Google security veterans launch AegisAI with $36M Series A to counter increasingly sophisticated AI-powered email attacks that bypass traditional defenses.
Last verified:
Phishing-as-a-Service: Why Legacy Email Tools Are Failing
AI-powered phishing attacks have become dramatically more effective, with malicious actors now using language models to automate the reconnaissance and personalization work that once required manual effort. According to TechCrunch, attacks powered by AI bypass traditional email security controls more than half the time, nearly doubling their success rate compared to rule-based phishing campaigns. The shift reflects a fundamental mismatch: defenders still rely on checklist-driven logic (“if subject contains ‘urgent,’ flag it”), while attackers use generative models to craft contextual messages that reference a target’s recent projects, travel history, and professional relationships—details aggregated in seconds from public data.
Why Rule-Based Defenses Can’t Keep Pace
Existing email security vendors—including established players like Proofpoint and Mimecast—use signature-matching and rule-based heuristics designed for an era when phishing was manual and repetitive. According to TechCrunch, AegisAI’s founders realized this architecture cannot catch the small behavioral anomalies that distinguish a legitimate message from a convincing forgery. The startup’s approach uses AI agents to analyze each incoming message the way a seasoned security analyst would, flagging subtle inconsistencies in tone, sender patterns, or attachment characteristics that traditional filters overlook. Examples include malicious PDFs disguised with embedded passwords and CAPTCHA challenges—techniques specifically designed to evade automated scanning.
AegisAI’s Market Entry and Traction
AegisAI, launched in 2025 by former Google security executives Cy Khormaee and Ryan Luo, announced a $36 million Series A led by Battery Ventures on July 23, according to TechCrunch. Khormaee and Luo previously developed Safe Browsing technology and reCAPTCHA at Google, giving them credibility on email-threat infrastructure at scale. The funding round includes participation from earlier investors Accel and Foundation Capital, bringing total capital to $49 million. According to TechCrunch, the startup has already signed dozens of customers in less than a year, including crypto payments platform Mesh, LangChain (an AI infrastructure startup), and Lokker (a privacy-compliance vendor).
Why This Matters
The $36M Series A reflects a widening gap between attack sophistication and defense capabilities. Battery Ventures partner Dharmesh Thakker publicly stated that companies now treat email defense as a first-line priority because “the bad guys are using email to attack us using AI at a much faster pace than we can keep up with.” This shift creates an opportunity for vendors willing to replace legacy rule-based systems with agentic threat detection—a category that now includes AegisAI alongside competitors like Lightspeed-backed Ocean. For security teams, the practical implication is that traditional email-security tools may no longer be sufficient. Organizations handling sensitive cross-functional projects or high-value targets will likely need to evaluate whether their current defenses can detect AI-crafted impersonation attacks that mention specific colleagues, projects, and timelines.
Frequently Asked Questions
What problem does AegisAI solve?
AegisAI detects AI-crafted spear-phishing emails that bypass rule-based email security systems. Traditional 'if-then' logic filters fail against personalized attacks that leverage aggregated personal data about targets.
Who founded AegisAI and what's their background?
Co-founders Cy Khormaee and Ryan Luo both held security roles at Google, where they worked on Safe Browsing technology and reCAPTCHA before launching AegisAI in 2025.
How much total funding has AegisAI raised?
AegisAI has raised $49 million in total capital, with the $36 million Series A led by Battery Ventures and participation from earlier backers Accel and Foundation Capital.
Who is using AegisAI?
According to TechCrunch, customers include Mesh (a crypto payments platform), LangChain (an AI startup), and Lokker (a privacy compliance platform).
What is AegisAI's competitive landscape?
The startup competes with Ocean (backed by Lightspeed) and established vendors like Proofpoint, Mimecast, and Abnormal Security in the email security market.