Summary

AegisAI, founded by former Google Safe Browsing/reCAPTCHA execs Cy Khormaee and Ryan Luo, raised a 49 million. The startup uses AI agents to detect spear-phishing emails that bypass rule-based filters (claimed >50% bypass rate for AI-powered attacks). Customers include Mesh, LangChain, and Lokker. Competes with Ocean, Abnormal Security, Proofpoint, and Mimecast; roadmap may expand beyond email to data security.

Source Analysis

TechCrunch primary. Corroboration: SiliconANGLE (M3AAWG study stats, Vanguard roadmap), FinSMEs (round mechanics). Round size/lead investors consistent.

Research Notes

Additional sources

Facts verified

  • 49M — TC/FinSMEs/SiliconANGLE
  • Founders ex-Google Safe Browsing/reCAPTCHA — TC
  • Customers Mesh, LangChain, Lokker — TC
  • Vanguard beyond-inbox agent toward GA — SiliconANGLE/FinSMEs

Unverified / caveats

AI phishing mix (2.8%→13.9%) and bypass-rate claims are company/study — attribute, do not treat as independent measurement.

Brief format — keep competitor list short.

Broader context

AI-vs-AI email arms race (ai-spear-phishing-defense). LangChain customer name bridges AI builder audience.

aegisai, cy-khormaee, battery-ventures, spear-phishing, email-security, ai-spear-phishing-defense, ai-security, langchain

Draft Article

AegisAI, AI destekli spear-phishing’e karşı $36M Series A topladı

Eski Google Safe Browsing / reCAPTCHA yöneticileri cy-khormaee ve Ryan Luo’nun kurduğu aegisai, 23 Temmuz 2026’da battery-ventures liderliğinde 36 milyon dolarlık Series A açıkladı; Accel ve Foundation Capital katıldı, toplam sermaye 49 milyon dolara ulaştı. Şirket, kural tabanlı filtreleri aşan spear-phishing e-postalarını AI ajanlarıyla tespit etmeyi hedefliyor.

TechCrunch’a göre müşteriler arasında Mesh, langchain ve Lokker var — LangChain ismi, AI builder kitlesi için tanıdık bir köprü. Kurucu Khormaee, AI destekli saldırıların mevcut kontrolları “yarıdan fazla” aştığını iddia ediyor; SiliconANGLE’ın aktardığı M3AAWG çalışmasına göre AI üretimi spear-phishing’in gözlemlenen phishing içindeki payı 2025’te yüzde 2,8’den 13,9’a yükselmiş — bu oranlar bağımsız laboratuvar ölçümü değil, şirket/çalışma atıfı olarak okunmalı. Rakip set kısa: Ocean, Abnormal Security, Proofpoint, Mimecast.

Tez basit: kural tabanlı “if-then” filtreler, kişiselleştirilmiş AI spear-phishing’e yetişmiyor; ajanlar her mesajı insan gibi anomalilere bakarak inceliyor. Battery’den Dharmesh Thakker’ın TechCrunch’a aktardığı çerçeve de aynı: saldırganlar AI ile hızlanırken savunma da agentic olmak zorunda. AegisAI’nin e-posta dışı (ör. data security) genişleme yolu ve Vanguard roadmap’i henüz ana hikâye değil; şirket spear-phishing’i tek başına çözdüğünü iddia etmiyor.

Türk güvenlik ve SaaS ekipleri için çıkış: ai-spear-phishing-defense artık AI-vs-AI bir email-security yarışı; AegisAI büyüyen savunma katmanlarından biri.


Kaynaklar

PreScreening Notes

  • Score 6 / priority medium: Solid Series A with credible founders (ex-Google Safe Browsing) in AI-driven spear-phishing — interesting but not landmark vs. mega-rounds or product launches from hyperscalers.
  • News check: Yes — funding + product thesis.
  • Recency: July 23, 2026.
  • Domain fit: AI + software security.
  • Source credibility: TechCrunch.
  • Duplicate check: No prior AegisAI item; adjacent to broader AI email-security market but company-specific.

Evaluation Report

News Value

  • Timeliness: July 23, 2026 — fresh.
  • Impact: Incremental for enterprise email security buyers; $36M Series A is material for a startup but not market-shifting alone.
  • Prominence: Ex-Google Safe Browsing/reCAPTCHA founders; Battery/Accel/Foundation; customers include LangChain (name recognition for our AI audience).
  • Proximity: Moderate — Turkish security/SaaS teams face AI-crafted phishing; less universal than Claude/OpenAI product news.
  • Novelty: Agent-based detection thesis vs. rule filters; company-specific story, not category rehash.

Audience Fit

Solid for software/security readers and AI practitioners who operate email-heavy orgs. Insightful market signal; limited day-one actionability unless evaluating vendors.

Risk & Ethics

TechCrunch credible. Bypass-rate and efficacy claims are company-sided.

Treat “>50% bypass rate for AI-powered attacks” as attributed claim, not independent measurement. Do not imply AegisAI uniquely solves spear-phishing.

Publication Strategy

Suggested Angle

“Eski Google Safe Browsing ekibinden AegisAI, AI destekli spear-phishing’e karşı $36M Series A aldı.” Kısa haber: kural tabanlı filtrelerin aşılması + agent tabanlı tespit tezi; LangChain gibi müşteri isimleriyle AI ekosistem bağını kur.

Editorial Notes

  • Decision: Approved — medium / brief
  • Approved angle: Ex-Google founders + $36M Series A as AI-vs-AI email security signal; keep short; LangChain customer bridge for AI audience
  • Format: brief (~300 words) confirmed — do not expand to standard
  • Reporting instructions:
    • Round: 49M
    • Attribute efficacy/bypass stats (2.8%→13.9%, >50% inbox) as company/M3AAWG-study claims
    • Short competitor list (Abnormal, Proofpoint, Mimecast, Ocean) — one line max
    • Optional Vanguard beyond-inbox roadmap mention only if space
    • Do not imply AegisAI uniquely solves spear-phishing
  • Headline suggestions (TR):
    1. AegisAI, AI destekli spear-phishing’e karşı $36M Series A topladı
    2. Eski Google Safe Browsing ekibinden agent tabanlı e-posta savunması
    3. Kural filtreleri yetmiyor: AegisAI Series A ve AI phishing yarışı
  • Must include:
    • Founders (Khormaee/Luo), Battery lead, total capital
    • Agent-detection thesis vs rule filters
    • Attributed attack-growth claims
    • One TR takeaway on AI-phishing arms race