A $36 Million Bet on AI-Driven Email Defense
Email security startup AegisAI has secured $36 million in a Series A round led by Battery Ventures, with participation from Accel and Foundation Capital. The announcement came Thursday, bringing the company’s total raised to $49 million since its founding in 2025.
The fresh capital isn’t just a milestone—it’s fuel for a specific mission. AegisAI plans to expand its lineup of autonomous detection agents, push its Vanguard agent toward general availability, and scale its enterprise go-to-market efforts. In plain terms: they’re gearing up for a serious fight against a new breed of cyber threat.
From Google’s Security Team to Email’s Front Lines
AegisAI was founded by Cy Khormaee and Ryan Luo, two veterans of Google’s security team who helped build reCAPTCHA, Safe Browsing, and Web Risk. The company emerged from stealth in September 2025 with a clear thesis: traditional email security is no match for AI-powered attacks.
Their platform is built around a network of AI agents that scrutinize incoming email for phishing, business email compromise, and other threats. Instead of relying on static rules or known-bad signatures, the system evaluates the intent and identity behind each message. It’s a fundamental shift from the blocklist-and-keyword approach that has dominated the industry for decades.
How Vanguard Investigates Threats Like a Human
The product connects to Microsoft 365 and Google Workspace through an API, requiring no changes to a customer’s MX records. That’s a deliberate choice—deployment friction is often the death of security tools, and AegisAI clearly wants to avoid that trap.
In March, the company introduced Vanguard, a companion agent that takes a more proactive approach. It investigates suspicious links and attachments by navigating to them the way a human recipient would, then compiles a threat report within minutes. This mimics the curiosity of a cautious employee—but at machine speed.
The Rise of AI Spear Phishing
AegisAI frames its work around what it calls AI spear phishing: attacks that use language models to research a target, map their professional relationships, and produce a personalized lure at a fraction of the cost such an effort once required. The economics of attack have changed, and so must the defense.
Why Human Training Isn’t Enough
Khormaee, who serves as CEO, didn’t mince words about the threat landscape. “The most immediate, catastrophic risk to your organization isn’t an AI agent hacking your firewall. It’s an AI model manipulating someone in your organization into handing over the keys,” he said.
His critique of traditional security awareness programs is pointed: “If your security program still relies on template-based phishing tests and awareness training, you are training your people to spot last year’s threat, not a capable agent crafting a novel lure just for them.” His conclusion is stark—”When the attack is AI, the defense has to be AI.”
What This Means for the Email Security Market
The funding round signals growing investor confidence in AI-native security solutions. Battery Ventures’ leadership role is notable, given the firm’s history of backing enterprise infrastructure companies. With Accel and Foundation Capital also on board, AegisAI has the backing of three heavyweight investors who clearly see a gap in the market.
The $49 million total funding gives the startup runway to compete with established players in the email security space. But the real test will be whether its AI agents can consistently catch threats that slip past traditional filters—and whether enterprises are ready to trust an AI to guard their inboxes.
For CISOs watching the space, the takeaway is clear: the email security landscape is shifting, and the next generation of tools will look very different from what came before. Whether that’s a good thing depends on how well companies like AegisAI deliver on their promises.
