From Teen Hacker to AI Phishing Defender: Ocean's $28M Breakthrough

TL;DR

• Ocean, an AI-driven email security startup founded by former teen hacker and Iron Dome researcher Shay Shwartz, raised $28 million in total funding.
• The company says its agentic system analyzes email context, sender intent, and organizational relationships to detect phishing and impersonation attempts at scale.
• Ocean is positioning itself as a next-gen defense against increasingly convincing AI-powered social engineering attacks.

A Former Teen Hacker Turns to Email Defense

Shay Shwartz’s path to cybersecurity has been anything but typical. Once a teenage hacker, he later moved into Israeli defense research, including work tied to Iron Dome, before founding Ocean, a startup focused on protecting inboxes from modern phishing campaigns.

That background is central to Ocean’s pitch. The company is built around the idea that email threats have evolved faster than legacy defenses, especially with the rise of AI-generated phishing messages that can be polished, personalized, and difficult to distinguish from legitimate correspondence.

Ocean Emerges With $28 Million in Funding

Ocean has now come out of stealth with $28 million in total funding. The latest round was led by Lightspeed Venture Partners, with participation from Picture Capital and Cerca Partners. The company also attracted high-profile angel investors, including Wiz CEO and co-founder Assaf Rappaport, along with Armis co-founders Yevgeny Dibrov and Nadir Izrael.

The funding signals strong investor interest in the growing market for AI-native security tools, particularly in categories where attackers are using large language models to scale social engineering.

Why Email Security Needs a Reset

Email remains one of the most common entry points for cyberattacks, and phishing is still among the most effective ways to compromise organizations. What has changed is the quality and scale of attacks.

AI-generated phishing emails can now mimic tone, formatting, and even internal business language with alarming accuracy. Traditional filters often rely on known indicators, suspicious links, or static rules. Those defenses can miss messages that are linguistically convincing but contextually wrong.

That is the gap Ocean says it wants to close.

How Ocean’s Agentic Model Works

Ocean describes its platform as an “agentic email security” system. Instead of simply flagging suspicious messages after the fact, the platform uses AI to analyze the broader context of incoming email in real time.

According to the company, its model evaluates:

• sender intent
• organizational context
• impersonation risk
• behavioral and linguistic signals
• whether the message aligns with known relationships and patterns

Ocean says it built a small language model specifically tuned for email security, designed to quickly understand message context and determine whether an email is legitimate, malicious, or simply unusual.

The company’s goal is to act less like a passive filter and more like an autonomous security layer inside the inbox.

Guarding Every Door

Shwartz has described the product as “like having a guard in every door,” a phrase that captures Ocean’s core thesis: security should happen continuously, at the point of interaction, rather than only after a message has already landed in a user’s inbox.

That approach matters because phishing attacks increasingly depend on timing and trust. If an attacker can convince a finance team member, executive assistant, or vendor manager to act quickly, the damage can be done before a human reviewer ever gets involved.

By contrast, Ocean aims to evaluate not just whether an email looks suspicious, but whether it makes sense in the real-world context of the recipient’s organization.

Customers and Scale

Ocean says it is already reviewing billions of emails each month for customers including Kayak, Kingston Technology, and Headspace.

That kind of volume suggests the startup is aiming well beyond pilot deployments. It also indicates that email security buyers are increasingly willing to test AI-powered tools that can complement or replace older generation secure email gateways and rule-based defenses.

The broader market is clearly moving in that direction. Enterprises are looking for systems that can keep pace with attackers using automation, and investors are backing companies that promise to bring context-aware intelligence into core security workflows.

The Bigger Cybersecurity Trend

Ocean’s launch fits into a larger pattern across cybersecurity: defenders are adopting AI not as a novelty, but as a necessity.

As attackers automate phishing, malware development, reconnaissance, and impersonation, security tools are being rebuilt around agentic systems that can reason, adapt, and respond in real time. That shift is especially important in email, where one convincing message can lead to credential theft, wire fraud, or deeper network compromise.

Ocean is betting that the next generation of email defense will need to understand semantics, identity, and organizational nuance, not just syntax and signatures.

What Comes Next

The challenge for Ocean will be proving that its model can consistently outperform established defenses without introducing too much friction for users. Email security products live or die on accuracy: too many false positives create frustration, while too many misses create risk.

But with fresh capital, marquee backers, and a product built around AI-native threat detection, Ocean now has a chance to shape what modern inbox protection looks like.

If its approach works at scale, the company could become a standout example of how defenders are using AI to fight AI-powered attacks.

AndroGuider Team

Articles written by the AndroGuider team. We try to make them thorough and informational while being easy to read.