Archive for AegisAI

Google security veterans raise $13M seed round for AegisAI to fix email security 

Posted in Commentary with tags on September 11, 2025 by itnerd

 AegisAI, a cybersecurity startup founded by former Google Safe Browsing and reCAPTCHA leaders Cy Khormaee and Ryan Luo, today announced its public launch and funding round with a radical approach to email security: autonomous AI agents that eliminate Phishing, Malware, and Business Email Compromise (BEC) attacks before they reach user inboxes — while reducing false positives by up to 90% compared to traditional solutions.

The $13m seed funding round was led by Accel and Foundation Capital. The funding will accelerate product development, expand the engineering team, and support go-to-market efforts as the company scales its autonomous email security platform.

AI has created a new wave of threats that rule-based systems are not prepared for. Adversaries can rotate graphics, messaging, and fabricate supporting content to create lures that look more real than ever. A 2024 study showed LLM-generated phishing messages had a significantly higher click-through rate (54%) than human-written ones (12%), proving their effectiveness. 

Modern attackers are also increasingly abusing trusted platforms like Salesforce, Zoom or Google to deliver malicious content, exploiting the inherent trust these services carry to bypass traditional reputation-based security filters and rules that would typically block suspicious domains or unknown senders.

AegisAI introduces a paradigm shift: an orchestrated network of real-time AI agents that inspect, analyze, and neutralize email threats autonomously, eliminating the need for static rules, extensive user training, or complex playbooks.

The AegisAI platform integrates seamlessly with Microsoft 365 and Google Workspace via API deployment. Unlike traditional rule-based gateways, its AI agents continuously learn from real-world adversarial behavior and share threat intelligence across organizations, enabling rapid detection and remediation of emerging phishing, spoofing, and executive impersonation tactics.

Core Platform Capabilities:

  • Autonomous Threat Detection – Real-time analysis of every message component including links, attachments, metadata, QR codes and behavioral patterns.
  • Intelligent False Positive Suppression – Customers in production environments have seen up to 90% reduction in False positives (good emails being quarantined) compared to traditional solutions.
  • Zero-Configuration operation – Autonomous response, escalation, and policy enforcement requiring minimal SOC setup or maintenance.
  • Security-First Design – Built with enterprise-grade encryption and data minimization principles.

The founding team brings deep expertise from Google. Following a successful stealth phase with pilot customers across fintech and tech companies, AegisAI has demonstrated significant improvements in threat detection accuracy and operational efficiency.