Former Google Security Leaders Raise 36 Million Series A to Counter AI Driven Email Attacks with Agentic Defense

AegisAI, a cybersecurity startup founded by former Google security executives, has successfully secured $36 million in a Series A funding round led by Battery Ventures, signaling a significant shift in how enterprises approach the escalating threat of AI-powered spear phishing. This latest injection of capital, which includes participation from existing investors Accel and Foundation Capital, brings the company’s total funding to $49 million less than a year after its public launch. The investment comes at a critical juncture as cybercriminals increasingly leverage generative artificial intelligence to bypass traditional security protocols, creating a new "arms race" in the digital landscape where defense must evolve as rapidly as the methods of attack.

The core mission of AegisAI is to dismantle the effectiveness of spear phishing—a highly targeted form of phishing that uses personal or professional details to trick specific individuals into revealing sensitive information or deploying malware. While traditional email security has relied on rigid, rule-based systems, AegisAI utilizes "agentic" AI to analyze incoming messages with the nuance and contextual understanding of a human security expert. This approach is designed to counter a new generation of threats that are increasingly difficult for legacy software to detect.

The Evolution of the Threat Landscape

The emergence of AegisAI is a direct response to a fundamental shift in the cyber-threat environment. For decades, email security relied on identifying known malicious signatures, blacklisted IP addresses, or simple "if-then" logic. If an email contained a known bad link or came from a suspicious domain, it was flagged. However, the advent of large language models (LLMs) has empowered hackers to automate the creation of highly personalized, error-free, and contextually relevant messages at an unprecedented scale.

Cybercriminals now use AI to aggregate vast amounts of personal data from social media, corporate websites, and previous data breaches. By synthesizing information about a target’s recent travel, active projects, and professional relationships, attackers can craft "bespoke" emails that appear entirely legitimate. According to Cy Khormaee, co-founder of AegisAI, AI-powered attacks now bypass existing security controls more than 50% of the time, making them nearly twice as effective as traditional phishing attempts. These attacks do not just target the average employee; they are often directed at high-level executives or finance departments in what is known as Business Email Compromise (BEC).

The financial implications of these attacks are staggering. According to the FBI’s Internet Crime Complaint Center (IC3), Business Email Compromise remains one of the most financially damaging online crimes. In 2023 alone, reported losses from BEC exceeded $2.9 billion. As AI lowers the barrier to entry for sophisticated social engineering, these figures are expected to rise, prompting a desperate need for defensive technologies that can match the sophistication of the attackers.

A Pedigree of Security Innovation

The credibility of AegisAI is rooted in the professional background of its founders, Cy Khormaee and Ryan Luo. Both were pivotal members of Google’s security team, where they worked on some of the world’s most widely used protective technologies. Khormaee and Luo were instrumental in the development and scaling of Google Safe Browsing—a service that protects billions of devices from malicious websites—and reCAPTCHA, the ubiquitous system used to distinguish humans from bots.

Their experience at Google provided them with a unique vantage point on the limitations of current security infrastructure. They observed that even the most robust systems often failed when faced with social engineering that lacked "technical" red flags. Having spent a decade preventing hacks on the world’s most popular email platform, Gmail, the duo realized that the next generation of security would require moving away from static checklists toward dynamic, intelligent agents.

Dharmesh Thakker, a general partner at Battery Ventures who led the Series A round, cited this expertise as a primary reason for the firm’s investment. Thakker noted that as attackers adopt AI at a pace faster than traditional vendors can keep up with, the industry requires a fundamental shift toward "agentic-driven defense." He believes that the founders’ history of securing Gmail positions AegisAI to become a dominant force in the next era of cybersecurity.

From Rule-Based Logic to AI Agents

The technical differentiator for AegisAI lies in its departure from "if-then" logic. Traditional Secure Email Gateways (SEGs) operate on a set of predefined rules. For example, a rule might state: "If an email contains an attachment from an external sender and uses the word ‘invoice,’ flag it for review." While effective against mass-produced spam, these rules are easily circumvented by AI that can vary language, use legitimate-looking file names, and host malicious content on trusted platforms like Google Drive or SharePoint.

AegisAI’s "agents" function differently. They are designed to perform deep investigations into the context of every message. The AI analyzes the relationship between the sender and the recipient, the tone of the communication, and the historical patterns of the organization. If a "CEO" sends an urgent request for a wire transfer while on a plane, the AI agent doesn’t just look for a spoofed address; it looks for anomalies in the request’s timing, the language used compared to previous communications, and whether such a request aligns with established corporate workflows.

Furthermore, AegisAI is designed to catch sophisticated technical deceptions that often fool standard filters. This includes malicious PDF attachments that appear legitimate and even incorporate built-in passwords or fake CAPTCHAs. These elements are often used by hackers to prevent automated scanners from "seeing" the malicious content inside the file. AegisAI’s agents are capable of interacting with these elements—effectively "solving" the CAPTCHA or entering the password—to inspect the payload within, just as a human analyst would.

Market Adoption and Competitive Landscape

Despite being in operation for less than a year, AegisAI has seen rapid adoption across various sectors. The company’s client roster already includes crypto payments firm Mesh, the prominent AI startup LangChain, and privacy compliance platform Lokker. The diversity of its customer base suggests that the threat of AI-driven phishing is a universal concern, spanning from high-growth tech startups to established financial and legal entities.

However, AegisAI is entering a crowded and highly competitive market. Established giants like Proofpoint and Mimecast have dominated the email security space for years, though they are now scrambling to integrate AI into their legacy stacks. Meanwhile, newer "cloud-native" players like Abnormal Security have already made significant inroads by using machine learning to detect behavioral anomalies.

Another emerging competitor is Ocean, a startup backed by Lightspeed that also focuses on context-aware AI analysis to fight phishing. The competition reflects a broader industry consensus: the era of the "static firewall" is over. The winner in this space will likely be the company that can provide the most accurate detection with the lowest rate of "false positives," which can disrupt business operations and lead to "alert fatigue" among security teams.

Analysis of Implications and Future Outlook

The success of AegisAI’s funding round highlights a broader trend in the venture capital landscape: the "AI vs. AI" arms race. As generative AI becomes a tool for disruption, it must also become the primary tool for defense. For enterprises, the implication is clear—relying on legacy security software is increasingly becoming a liability.

The move toward "agentic" security also addresses a critical labor shortage in the cybersecurity industry. There is a global deficit of millions of cybersecurity professionals. By deploying AI agents that can perform the heavy lifting of initial investigations, companies can empower their existing security teams to focus on high-level strategy rather than sifting through thousands of suspicious emails manually.

Looking ahead, AegisAI does not intend to limit its scope to email. While email remains the primary vector for 90% of cyberattacks, the founders have expressed plans to expand their agentic defense model to other areas, such as broader data security and internal network protection. The goal is to create a comprehensive "investigative layer" that sits across an entire organization’s digital footprint.

As Khormaee noted, the ability to build customized, highly advanced agents capable of autonomous investigation will likely determine the next generation of dominant security firms. With $49 million in total capital and a team of seasoned experts, AegisAI is positioned to be at the forefront of this transition, attempting to turn the tide against an increasingly sophisticated and AI-empowered criminal element.

The next few years will be a testing ground for these technologies. As hackers continue to refine their use of LLMs to create "deepfake" text and even voice or video communications, the definition of a "secure" perimeter will continue to shift. For now, the focus remains on the most vulnerable entry point of any organization: the inbox. By applying the lessons learned from securing the world’s largest email network, AegisAI is betting that the best way to stop a machine-driven attack is with a more intelligent, more vigilant machine-driven defense.