Analysis
AegisAI raised a $36 million Series A led by Battery Ventures, with existing investors Accel and Foundation Capital returning, bringing the email-security startup's total funding to $49 million less than a year after it emerged from stealth. The company, founded by ex-Google security executives Cy Khormaee and Ryan Luo, builds its own large language models rather than relying on third-party APIs to catch AI-generated phishing before it reaches an inbox.
The timing tracks a real shift in the threat landscape: AegisAI's own research found AI-generated spear phishing grew from 2.8% of observed phishing attacks to 13.9% during 2025, as attackers use generative models to write more convincing, personalized lures at a fraction of the previous cost and effort. Traditional rule- and signature-based email filters were built for a slower-moving, more repetitive style of attack.
“Traditional rule- and signature-based email filters were built for a slower-moving, more repetitive style of attack.”
AegisAI competes in a crowded but consolidating email-security field alongside Abnormal Security, Sublime Security, and Material Security, all of which have raised large rounds on a similar thesis that behavioral and AI-driven detection beats static rules. Abnormal in particular has scaled into a multi-billion-dollar valuation on the same premise, giving AegisAI a clear, well-funded template to chase.
The new capital will fund Vanguard, an agent AegisAI is building to hunt threats beyond the inbox, plus a broader enterprise go-to-market push. What to watch: whether AegisAI can differentiate its in-house model approach from larger, better-capitalized rivals, and how fast the AI-attacking-AI dynamic in email security escalates through the rest of 2026.
