The Pitch: Fight AI With AI
Email security startup AegisAI has raised a $36 million Series A led by Battery Ventures, with participation from Accel and Foundation Capital, bringing total funding to $49 million since the company was founded in 2025.
The timing is not coincidental. As large language models have made it trivially cheap to craft personalized, grammatically polished phishing emails — the kind that used to require hours of manual research and social engineering — legacy email security tools built on signatures, rules, and pattern matching are increasingly out of their depth. AegisAI's bet is that defending against AI-generated attacks requires AI-native defenses.
Who's Behind It
AegisAI was co-founded by Cy Khormaee and Ryan Luo, both former Google security engineers with backgrounds in reCAPTCHA, Safe Browsing, and Web Risk. Their thesis is direct: traditional secure email gateways and awareness training programs were designed for a world where phishing required human-scale effort to produce. That world no longer exists.
How the Platform Works
Rather than inspecting individual emails against a list of known-bad indicators, AegisAI deploys a network of AI agents that evaluate message intent and sender authenticity at a behavioral level:
- Intent analysis assesses whether a message is attempting manipulation, impersonation, or social engineering, rather than just checking for malicious URLs or attachments.
- The Vanguard agent (currently in limited rollout, moving toward GA) goes further by simulating human interaction with suspicious links and attachments, generating full threat reports within minutes.
- API-native integration with Microsoft 365 and Google Workspace means deployment requires no MX record changes — a significant friction reduction compared to legacy secure email gateways (SEGs) that require rerouting your entire mail flow.
The zero-MX-change deployment model is a deliberate market strategy. Many organizations have avoided modern email security tooling because replacing an SEG is a high-stakes infrastructure operation. AegisAI's API approach removes that barrier.
The Market Context
Business email compromise (BEC) and AI spear phishing have become among the highest-cost attack categories for enterprises. The FBI's Internet Crime Complaint Center has consistently ranked BEC as the leading source of financial losses from cybercrime — losses measured in the billions annually.
CEO Cy Khormaee's framing cuts to the core: "You cannot patch human trust." Awareness training can reduce the attack surface, but it cannot eliminate the human judgment that sophisticated, AI-personalized attacks are designed to exploit. Automated AI analysis that operates before a message reaches a human inbox is the logical response.
The $49 million raised in under two years, from investors with proven enterprise software track records, signals conviction that this is a major emerging market rather than a niche product.
What's Next
AegisAI plans to use the Series A funding to:
- Expand its agent portfolio beyond email into adjacent communication channels
- Advance the Vanguard agent to general availability
- Scale enterprise sales and customer success
For security teams evaluating their email security stack in the context of an AI-accelerated threat landscape, AegisAI represents the direction the market is moving: agent-based, behavioral, and designed to operate at the speed AI attacks are deployed.