AegisAI Raises $36M to Combat AI-Driven Spear Phishing Attacks

TL;DR
- AegisAI has raised $36 million in a Series A led by Battery Ventures, bringing its total funding to $49 million.
- The startup was founded by former Google security executives Cy Khormaee and Ryan Luo to fight AI-driven spear phishing with AI agents instead of rule-based filters.
- AegisAI says its technology is already being used by dozens of customers, including Mash, LangChain, and Lokker.
A new funding milestone for email security
AegisAI, a cybersecurity startup founded by former Google security executives Cy Khormaee and Ryan Luo, has raised a $36 million Series A to expand its push against AI-generated spear phishing attacks. The round was led by Battery Ventures, with participation from existing investors Accel and Foundation Capital, bringing the company’s total funding to $49 million.
Why spear phishing is getting harder to stop
The company’s pitch centers on a growing problem: generative AI makes it easier for attackers to craft highly convincing malicious emails at scale. AegisAI argues that traditional email defenses, especially rule-based systems built on “if-then” logic, are too slow and limited to keep up with these increasingly adaptive attacks.
The founders’ security background
Khormaee and Luo are not newcomers to email and web security. Both previously worked on Google’s safe browsing technology and reCAPTCHA, and they launched AegisAI last year after more than a decade of experience preventing email hacks. That background shaped the company’s core thesis: modern threats require a more dynamic defense than static filtering alone.
How AegisAI says its technology works
Instead of relying primarily on rigid rules, AegisAI uses AI agents that inspect each message in a more human-like way, looking for subtle anomalies that traditional checklists may miss. The company says this approach is designed to catch carefully engineered phishing attempts that can slip past conventional systems.
Early customer traction
Despite being less than a year old, AegisAI says its product has already been adopted by dozens of customers. Among the companies named are crypto payments firm Mash, AI startup LangChain, and Google-owned privacy compliance platform Lokker. That early adoption likely helped support investor confidence in the new round.
What the fresh capital may mean
With new funding from Battery Ventures and continued backing from Accel and Foundation Capital, AegisAI appears positioned to scale both its product and customer base. The company is entering a market where email remains one of the most common attack vectors, and where AI-powered phishing is raising the bar for defenders and attackers alike.
The bigger cybersecurity backdrop
AegisAI’s raise reflects a broader shift in cybersecurity: as attackers use AI to improve personalization, speed, and plausibility, defenders are increasingly turning to AI as well. In that sense, the startup’s bet is not just on better email filtering, but on a new model of detection built to keep pace with machine-generated deception.
Get All The Latest Updates Delivered Straight To Your Inbox For Free!