Ex-Google Security Staffers Raise $13 Million to Fight Email Threats Before They Reach You

In a sign of the growing priority for email security, two former top Google security leaders have introduced a new cybersecurity startup that is aiming to halt email-based attacks at their point of entry. The company—called AegisAI—has raised $13 million in seed funding to develop technology that intercepts malicious messages before they’re ever delivered to a user’s inbox.

Email: Still the Weakest Link

Email is still the prime way hackers gain access to networks in a corporate environment, despite an explosion of workplace collaboration tools and encrypted messaging apps. Industry reports suggest more than 90 percent of cyber-incidents start with a single email, frequently an elaborate phishing message intended to dupe recipients into disclosing sensitive details or clicking on a risky link.

The problem has only become more complicated with the ascendance of generative A.I. Attackers now use large language models to compose emails that look exactly like legitimate corporate communications, sidestepping traditional email filters that used to catch misspellings and awkward phrasing. Security experts warn these machine-written scams are quicker to generate, more convincing, and less likely to be caught by humans—or older security software.

Meet the Wherewithal Founders on a Mission

AegisAI was started by Cy Khormaee and Ryan Luo, who previously worked at Google on security and anti-abuse for the company’s internal systems. Over their years at the tech giant, they helped build the complex systems that defend billions of Gmail accounts around the world.

Based on that experience, the two realized that traditional layers of email defenses—spam filters, blacklists, and reactive virus scanners—are no longer effective in dealing with present-day threats.
Their vision: a self-driving AI platform that detects and defuses attacks before the messages get delivered.

How AegisAI Works

Unlike a typical spam filter, which scans an email only after you receive it, AegisAI intercedes earlier in the process.

• The platform uses multiple stages of machine learning models and real-time behavioral analysis to examine messages the instant they enter the internet.
• These AI “agents” look for subtle signals indicating malicious intent—such as irregular sending patterns, spoofed domain behaviors, and unusual metadata anomalies—long before an email reaches an organization’s mail server.
• If a threat is identified, the email is quarantined or blocked immediately, ensuring employees and the public never see the dangerous message.

Because the system operates independently, security teams no longer waste time chasing false positives or manually updating rules. The founders have reportedly called it an “always-on digital immune system,” capable of adapting to new attack vectors without requiring human analysts to write new signatures.

Backing from Leading Investors

The company has raised $13 million in seed funding from Accel and Foundation Capital, two venerable venture firms with a long pedigree of investing in cybersecurity.

• This investment powers the company’s engineering efforts, enables it to scale its infrastructure, and helps it reach the market quickly.
• Accel partners noted the team’s unique mix of technical expertise and real-world operational security experience.
• Foundation Capital emphasized the need for preventative email security, as phishing and BEC (business email compromise) attacks cause companies to lose billions of dollars every year.

Why Proactive Email Security Matters

Traditional email security products usually detect threats after they arrive, relying on known virus signatures or spam reports submitted by users to refresh their databases. That reactive model is no longer adequate.

• In a BEC attack, a criminal impersonates a company CEO and asks the finance department to transfer funds to a fraudulent account.
• Even a delay of minutes can be enough for attackers to succeed.

By blocking messages upstream—before delivery—AegisAI virtually eliminates that window of opportunity.
Its machine learning also identifies global patterns, spotting links between seemingly unrelated incidents and adapting its models over time—a critical advantage when attackers can pivot tactics overnight.

The Road Ahead

With fresh capital, AegisAI will:

• Expand its engineering team.
• Pilot its technology with select enterprise customers in the months ahead.

Early feedback from beta partners shows that, in addition to minimizing phishing threats, the platform reduces unwanted email overall, saving IT departments time and resources.

The company is also considering integrations with major email providers and enterprise collaboration suites for easy rollout. Initial efforts will target large organizations and high-risk sectors such as finance and healthcare, but the founders envision protection for consumers and smaller businesses as well.

Broader Implications for Cybersecurity

The launch of AegisAI reflects a larger industry trend: moving from reactive defense to proactive protection.
As threats become more automated and advanced, waiting for an attack to happen is no longer feasible.

Should AegisAI succeed, its model could become a new standard in email security. Competitors may be compelled to adopt upstream detection, and corporate IT policies are likely to focus more on prevention than on incident response.

Expert Reactions

Independent security researchers have praised the effort.
Many note that even well-funded institutions struggle to defend against the human element of phishing attacks, where employees inadvertently open doors to intruders. By filtering out malicious messages before they can tempt a click, AegisAI tackles the problem at the source.

Some experts caution that attackers will try to outwit the system.
However, its adaptive machine learning core allows it to retrain faster than human-based, rule-based solutions, providing a more resilient defense.

A Safer Inbox on the Horizon

Email is here to stay. From crucial business correspondence to personal communication, it remains a cornerstone of the digital world—yet one frequently exploited by cybercriminals.

By merging deep knowledge of email security with advanced artificial intelligence, AegisAI seeks to define a new era in email protection.
Its $13 million funding round is more than a company milestone—it offers hope to everyone who relies on email.

Whether the inboxes of the future will be spaces of productivity or arenas of constant cyber warfare may depend on the success of AegisAI and similar ventures.
For now, the company’s promise is clear: stop the attack before it reaches you.