AegisAI raises $36M to fight AI-powered email attacks

{ "title": "AegisAI Raises $36M to Fight AI-Powered Email Attacks with AI Agents", "body": "AegisAI, a startup founded by former Google security executives, has raised $36 million in Series A funding to defend against a rising tide of AI-crafted email attacks. The company, launched less than a year ago by Cy Khormaee and Ryan Luo, develops AI agents designed to detect spear phishing messages that traditional security tools often miss.\n\nThe funding round was led by Battery Ventures, with existing backers Accel and Foundation Capital also participating. The new capital brings AegisAI’s total funding to $49 million. The startup already counts dozens of customers, including crypto payments company Mesh, AI startup LangChain, and privacy compliance platform Lokker.\n\n## The AI Arms Race in Email Security\n\nHackers are increasingly using AI to aggregate personal information—such as co-workers, projects, and travel itineraries—to craft highly convincing emails. “They’ve researched you, they understand everything about you, and they’re targeting attacks that are perfectly bespoke to you,” said Khormaee.\n\nExisting email security systems rely on rule-based if-then logic, which is too slow and rigid to counter AI-generated messages. Standard spam filters can be fooled by malicious PDF attachments that include built-in passwords and CAPTCHA challenges. AegisAI’s agents analyze messages like a human would, catching small anomalies that other systems may miss entirely. The agents can detect subtle signs such as unusual sender behavior, slight deviations in language patterns, or mismatched metadata that would slip past conventional filters.\n\n“AI-powered attacks bypass existing controls more than half the time now, which means they’re almost twice as effective as they used to be,” Khormaee said. He noted that the sophistication of these attacks has grown rapidly, with attackers using generative AI to mimic writing styles and reference internal company jargon. The result is a wave of hyper-personalized spear phishing that targets specific individuals within an organization.\n\n## Founders with Deep Google Roots\n\nKhormaee and Luo spent a decade at Google, where they helped secure Gmail and worked on safe browsing technology and reCAPTCHA. Their experience in preventing email hacks at scale gives them a unique perspective on the problem. At Google, they dealt with billions of messages daily and developed systems to block phishing attempts before they reached users.\n\nDharmesh Thakker, general partner at Battery Ventures, said he noticed a sharp increase in email attacks and began searching for an AI-vs-AI defense startup. He believes AegisAI has the best shot at becoming the leading hack-prevention company due to its founders’ Gmail expertise. Thakker spent months evaluating potential investments before settling on AegisAI.\n\n“The bad guys are using email to attack us using AI at a much faster pace than we can keep up with,” Thakker said. “Defending against that is going to be a number one priority for a lot of companies.” He added that the speed of AI-generated attacks means human analysts can no longer keep pace, making automated defenses essential.\n\n## Competition and Market Landscape\n\nAegisAI is not the only startup targeting this space. Ocean, a Lightspeed-backed competitor, also uses AI for email context analysis. Established vendors include Proofpoint and Mimecast, while Abnormal Security is a newer player. AegisAI aims to replace legacy email security tools with what it calls agentic-driven defense. Unlike traditional systems that apply static rules, AegisAI’s agents can adapt to new attack patterns in real time.\n\n“The core idea of building customized, highly advanced agents that can do investigations is going to [determine] who becomes the next dominant security company,” Thakker said. He believes the market is ripe for disruption, as legacy tools struggle to keep up with the volume and sophistication of AI-powered threats. The company’s approach involves deploying multiple specialized agents that work together to analyze email context, user behavior, and external threat intelligence.\n\n## Beyond Email\n\nKhormaee said AegisAI plans to expand its technology to data security and other defense areas. The company’s agents are designed to be customized for specific investigations, offering a flexible approach to threat detection. Future applications could include monitoring internal communications, detecting data exfiltration attempts, and protecting cloud-based collaboration tools.\n\nWith $49 million in total capital and a growing customer base, AegisAI is positioning itself as a key player in the fight against AI-powered cyberattacks. The startup will showcase its technology at TechCrunch Disrupt in San Francisco from October 13-15. Khormaee said the company is already in talks with several large enterprises and expects to double its customer count within the next six months.\n\n## Related on Neura Market\n\n- Cybersecurity Startups\n- AI Security Tools\n- Email Security Market" }