AegisAI Secures $36 Million to Combat AI-Driven Spear Phishing

The landscape of cyberattacks is rapidly evolving as attackers increasingly leverage generative AI to launch large-scale, highly sophisticated operations. In response to these threats, AegisAI, a startup founded by former Google security executives, has completed a $36 million Series A funding round. The company offers technology that uses AI agents to detect and defend against sophisticated spear phishing emails.

How AI Has Changed the Nature of Attacks

Attackers now use generative AI to swiftly gather and analyze personal information about their targets. With details such as colleagues’ names, ongoing projects, and recent travel itineraries, they can craft highly convincing impersonation emails.

According to Marina Temkin of TechCrunch AI, Cy Khormaee, co-founder of AegisAI, warns, “AI-driven attacks bypass existing defenses more than 50% of the time—double the success rate of previous methods.” Attackers meticulously research their targets and launch fully customized, highly effective attacks.

The Limitations of Rule-Based Systems

AegisAI was founded by Cy Khormaee and Ryan Luo, who both contributed to the development of Google’s Safe Browsing technology and reCAPTCHA. With nearly a decade of experience securing Gmail, they recognized the growing ineffectiveness of traditional rule-based security systems against AI-generated phishing emails.

These systems rely on “if-then” logic, which struggles to identify the subtle anomalies present in AI-generated content. To address this, AegisAI developed an AI agent that analyzes each message as a human would, identifying threats by focusing on minute irregularities that even the most detailed checklists might overlook.

Achievements in Less Than a Year

Founded in 2025, AegisAI has already secured dozens of customers within its first year. Notable adopters include Mesh, a cryptocurrency payment firm; LangChain, an AI startup; and Lokker, a privacy compliance platform.

According to Khormaee, AegisAI’s AI agent captures threats that traditional email security tools completely miss. For instance, it can detect malicious files masquerading as legitimate PDF attachments, even when these files are embedded with passwords or CAPTCHAs designed to bypass standard spam filters.

Series A Investors and Valuation

Battery Ventures led the Series A round, joined by existing investors Accel and Foundation Capital. With this latest funding, AegisAI’s total capital raised now stands at $49 million.

Dharmesh Thakker, General Partner at Battery Ventures, noted the increasing prevalence of email-based attacks and the inadequacy of aging email security tools. “Attackers are using AI at a pace that outstrips our ability to defend against them. For many companies, upgrading to AI-based email defense will become a top priority,” said Thakker.

Thakker also highlighted that AegisAI’s leadership team, with its deep expertise in securing Gmail, positions the company as a strong contender to lead the next wave of anti-hacking innovation.

Competitive Landscape and Market Dynamics

AegisAI is part of a growing cohort of startups leveraging AI to analyze email context and detect scams and impersonation attempts. Competitors include Ocean, backed by Lightspeed, as well as established players like Proofpoint, Mimecast, and the emerging Abnormal Security.

For years, the email security market has been dominated by established vendors. However, the evolution of generative AI-driven attacks has accelerated the entry of new players. Companies advocating AI-based defenses aim to tackle advanced threats that rule-based systems cannot handle, employing machine learning and agent technology to stay ahead.

Editorial Opinion

This funding round signals that the AI security market will likely see intensified activity in the next three to six months. Products developed by teams with experience in securing large-scale email systems, like Gmail, are well-positioned to gain trust from enterprise customers. The demand to replace traditional rule-based products could extend from mid-sized companies to large enterprises.

From a long-term perspective, the structure of the email security market itself may undergo a transformation. If established giants like Proofpoint and Mimecast fail to transition to AI-based defenses, they risk losing market share to new players. Simultaneously, as attack methods become more sophisticated, AI agents on the defensive side must also continue to evolve.

This field is poised to significantly reshape the competitive dynamics of the security industry over the next one to three years. However, one critical point remains the verifiability of AegisAI’s claims that their AI agents detect anomalies “like a human.” Independent evaluations and benchmarks are essential to assess how effectively the company’s product identifies previously unknown threats.

References

• “AegisAI, founded by former Google security execs, lands $36M to stop AI-driven spear phishing”, by Marina Temkin — TechCrunch AI, 2026-07-23T18:38:34.000Z (ARR)
• Source URL: https://techcrunch.com/2026/07/23/aegisai-founded-by-former-google-security-execs-lands-36m-to-stop-ai-driven-spear-phishing/