AegisAI raises $13M seed to reinvent enterprise email security with AI agents
What's the deal? AegisAI, a cybersecurity startup founded by former Google Safe Browsing and reCAPTCHA leaders Cy Khormaee and Ryan Luo, has raised a $13 million seed round led by Accel alongside Foundation Capital. The company is emerging from stealth with a product that deploys autonomous AI agents to scrutinise every facet of an inbound email and block threats before they reach the inbox.
The funding will go toward product development, engineering hires, and go-to-market expansion. AegisAI says it already counts Mesh, Stelliant, and Lokker among its customers.
Why now? Email remains the top entry point for enterprise breaches — and AI is making the problem dramatically worse. CrowdStrike data shows LLM-authored phishing emails outperform human-written ones by more than 4x. Traditional defences built on static rules, domain reputation, and manual tuning are struggling to keep pace.
Khormaee and Luo argue the answer is fighting AI with AI. Their system continuously learns from real-world attacks rather than relying on fixed filters, and claims to cut false positives by 90% compared to legacy tools.
What could go wrong? Email security is a crowded market. Incumbents like Proofpoint, Mimecast, and Microsoft Defender have deep enterprise relationships and broad feature sets. Convincing security teams to swap out or layer on a new vendor — especially one fresh out of stealth — is never simple.
There's also the arms-race dynamic: if AI-native defences become standard, attackers will adapt their techniques accordingly. Staying ahead will require relentless iteration.
The signal: AegisAI fits a growing pattern in cybersecurity: startups rebuilding established security categories from scratch using AI-native architectures. The thesis is that generative AI hasn't just created new threat vectors — it has rendered legacy detection methods obsolete. Investors are betting that the companies best positioned to win are those designed around AI from day one, not those bolting it onto existing rule-based systems.
The founders' pedigree helps the case. Khormaee and Luo spent years shaping Google's security infrastructure at scale, giving them both the technical depth and the credibility to attract early enterprise customers and top-tier backers.
