AegisAI, ex-Google, raises $36 million to combat AI phishing

The Rise of AI-Powered Phishing

Cybercriminals are increasingly leveraging artificial intelligence to orchestrate massive attacks, primarily targeting emails. With the help of AI, these wrongdoers can quickly gather personal information, such as details about colleagues, ongoing projects, or recent travels, to compose messages that appear authentic and convincing.

The Birth of AegisAI

Last year, Cy Khormaee and Ryan Luo, former security leaders at Google, founded AegisAI. These two experts, who contributed to the development of technologies like safe browsing and reCAPTCHA, created this startup to combat spear phishing, a growing threat. AegisAI employs AI agents to identify and neutralize these sophisticated attacks.

An Innovative Approach to Threats

With over ten years of experience in preventing email hacks, the founders of AegisAI recognized the limitations of traditional rule-based systems. These systems, which rely on "if-then" logic, are often too slow and ineffective to counter AI-generated malicious emails. AegisAI has thus developed AI agents capable of analyzing each message with human-like precision, detecting subtle anomalies that traditional systems might overlook.

Rapid Adoption and Fundraising

Less than a year after its inception, AegisAI has already attracted numerous clients, including the cryptocurrency payment company Mash, the AI startup LangChain, and the compliance platform Lokker, owned by Google. This rapid adoption has allowed AegisAI to raise $36 million in a Series A funding round led by Battery Ventures, with support from existing investors like Accel and Foundation Capital. This funding brings the startup's total capital to $49 million.

The Effectiveness of AI Attacks

According to Khormaee, AI attacks now bypass existing controls in more than half of cases, making them nearly twice as effective as before. These attacks are carefully designed to target specific individuals after collecting detailed information about them.

AegisAI's Technology in Action

AegisAI's agents are capable of detecting threats that traditional systems might miss. For example, the startup's AI can identify malicious PDF attachments that appear legitimate, even those protected by passwords or CAPTCHAs, which are often used to deceive anti-spam filters.

A Strategic Investment

Dharmesh Thakker, general partner at Battery Ventures, has observed an increase in email attacks and sought to invest in a company capable of countering AI with AI. He believes that replacing traditional email security tools with agent-based defenses is crucial for businesses.

Competition in the Sector

AegisAI is not alone in this race. The startup Ocean, backed by Lightspeed, is also looking to replace established players like Proofpoint and Mimecast, as well as newer companies like Abnormal Security. However, with the experience of its founders in securing Gmail, AegisAI seems well-positioned to become a leader in hack prevention.

Towards New Frontiers

While AegisAI is currently focused on emails, the startup plans to expand its activities to other areas of security, such as data protection. Khormaee emphasizes that the creation of customized and advanced agents to conduct investigations could determine which company will dominate the security sector.