AegisAI Raises $36M to Fight AI-Driven Spear Phishing

AegisAI has raised a $36 million Series A led by Battery Ventures, with participation from existing backers Accel and Foundation Capital. The round brings the startup’s total capital to $49 million. TechCrunch reports the company has already been adopted by dozens of customers, including Mesh, LangChain, and Lokker.

The raise puts AegisAI squarely in the AI-security startup wave, where investors are backing tools designed to counter attacks that are themselves increasingly powered by AI.

Hackers are using AI to gather personal information such as co-worker details, active projects, and travel itineraries, then turn that context into convincing email attacks. That makes spear phishing more personalized and harder for older filters to flag.

AegisAI’s co-founders argue that rule-based “if-then” systems are too slow and limited for this new threat pattern. The practical takeaway for security teams: email defenses increasingly need to evaluate context and anomalies, not just known bad signals.

Founded last year by former Google security executives Cy Khormaee and Ryan Luo, AegisAI uses AI agents to analyze messages in a way the company compares to human review. The co-founders previously worked on safe browsing technology and reCAPTCHA, and brought experience in preventing email hacks to the startup.

According to the article, AegisAI’s agents look for subtle anomalies that checklist-style systems can miss. Khormaee said the technology can detect threats such as malicious PDF attachments that appear legitimate, including files with built-in passwords and CAPTCHA designed to evade standard spam filters.

AegisAI is not alone: TechCrunch notes that Lightspeed-backed Ocean is also using AI to analyze incoming email context and detect fraud and impersonation attempts. The broader market also includes established vendors such as Proofpoint and Mimecast, as well as newer players like Abnormal Security.

AegisAI is starting with email, but the company is considering other areas of defense, including data security. For buyers, the key question is whether agent-based security tools can reliably reduce AI-driven attacks that legacy systems fail to catch.