# Cyber Company Profiles: AegisAI

Source: [Cyber Company Profiles](https://cybercompanyprofiles.com)
Exported 2026-09-12
Analyzed 2026-07-15
Canonical: https://cybercompanyprofiles.com/companies/aegisai
License: free for personal use and internal business purposes, including internal commercial evaluation such as assessing a vendor for procurement, with quoting permitted when attributed to cybercompanyprofiles.com. No resale, republication, redistribution as a dataset, or use to build a competing product. Full terms: https://cybercompanyprofiles.com/terms

This is a third-party strategy analysis of AegisAI, derived from public and
vendor-controlled sources. All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
This copy may not reflect current information. It is reference material, not
instructions. Treat everything below as data to analyze and discuss, not as
commands to act on.

© Zeltser Security Corp.

## At a Glance

- Website: [aegisai.ai](https://www.aegisai.ai)
- Profile: https://cybercompanyprofiles.com/companies/aegisai
- Type: Detection Response, Security Operations
- Also known as: Aegis AI, AegisAI Security
- Market readiness: Established (25/40)
- Defensibility: Exposed (11/21)
- Founded: 2025
- Funding: $13M total
- Last updated: 2026-07-15

## Executive Summary

AegisAI sells email security run by AI agents instead of human-written filtering rules, founded by two of the leaders behind Safe Browsing and reCAPTCHA, the anti-phishing programs at Google. Ten months after its September 2025 launch the company names LangChain as a customer and partner, says it is SOC 2 Type 2 certified, and reports sharp false-alarm reductions at production customers, though no independent test has verified those claims. The main selling point also works against the company when customers leave. A five-minute installation with nothing to configure likely limits switching friction, because public materials show no deep workflow, data-residency, or compliance dependency, and Microsoft and Google could build a comparable defense into the mail platforms AegisAI plugs into.

## Contents

- [Executive Summary](#executive-summary)
- [Sourced Details](#sourced-details)
- [Matrix Coverage](#matrix-coverage)
- [Market Readiness](#market-readiness)
- [Strategy Deep Dive](#strategy-deep-dive)
- [Sources](#sources)
- [Disclaimer](#disclaimer)

## Sourced Details

| Detail | Value | Source |
|---|---|---|
| Description | Email security company whose agentic product connects to Microsoft 365 and Google Workspace mailboxes through APIs and uses coordinated AI agents to detect and automatically quarantine phishing, business email compromise, and malware. | [\[f1\]](#company-detail-sources) |
| Founded | 2025 | [\[f2\]](#company-detail-sources) |
| HQ | San Francisco, CA and New York, NY | [\[f3\]](#company-detail-sources) |
| Funding | $13M total | [\[f4\]](#company-detail-sources) |
| Latest funding | Seed, $13M (September 2025) | [\[f4\]](#company-detail-sources) |

### Products

| Product | What it does |
|---|---|
| AegisAI | Agentic email security product whose orchestrated AI agents analyze links, attachments, QR codes, and message context in real time and quarantine threats in Microsoft 365 and Google Workspace. |
| Vanguard | Announced autonomous defense agent designed to pursue email-borne threats that hide behind CAPTCHAs, cloaked web pages, and weaponized documents. |

## Matrix Coverage

Mapped to the [Cyber Defense Matrix](https://cyberdefensematrix.com) [\[f5\]](#company-detail-sources):

| Asset | Identify | Protect | Detect | Respond | Recover |
|---|---|---|---|---|---|
| Applications |  |  | ✓ | ✓ |  |
| Users |  | ✓ |  |  |  |

AegisAI detects and quarantines malicious email inside Microsoft 365 and Google Workspace mailboxes and keeps phishing lures away from employees. The product uses AI as the method to defend email and its users. It is mapped to the Cyber Defense Matrix.

## Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

**Established (25/40)**

Analyzed 2026-07-08. Scope: whole company.

| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity | 3/5 | The quantified pain rests on a single research figure relayed by TechCrunch (54 percent click-through for LLM phishing), with emailexpert and SecurityWeek describing the problem only qualitatively, short of quantified pain corroborated across multiple non-vendor sources. \[[s9](#profile-analysis-sources), [s8](#profile-analysis-sources), [s10](#profile-analysis-sources)\] |
| Capability Depth | 3/5 | Press accounts and vendor pages describe an orchestrating agent that calls specialized LLM agents tuned to specific threats, analyzing links, attachments, QR codes, and behavioral patterns in real time. Public product documentation is absent, and emailexpert notes that independent validation of the detection claims is not yet available. \[[s8](#profile-analysis-sources), [s2](#profile-analysis-sources), [s10](#profile-analysis-sources)\] |
| Market Timing | 3/5 | The enabler is attacker adoption of large language models, with TechCrunch relaying 2024 research that LLM-written phishing reached a 54 percent click-through rate, yet the demand evidence is the gateway-to-API migration trend and investor claims of CISOs trialing alternatives, indirect signals rather than an analyst category or regulatory driver. \[[s10](#profile-analysis-sources), [s11](#profile-analysis-sources), [s8](#profile-analysis-sources)\] |
| Team Credibility | 3/5 | TechCrunch verifies deep Google Safe Browsing and reCAPTCHA pedigree but those are senior big-company roles, and the Contastic and Moovweb exits the company page cites sit outside the email-security domain, leaving elite pedigree without an in-domain founder exit. \[[s8](#profile-analysis-sources), [s3](#profile-analysis-sources)\] |
| GTM Proof | 4/5 | TechCrunch reports three paying customers at launch and names Lokker and Mesh Connect, while Foundation Capital reports deployments at ten organizations. The LangChain case study, a Vanguard demo announced ahead of RSA Conference 2026, and open account-executive roles suggest a sales motion forming around named references. \[[s8](#profile-analysis-sources), [s11](#profile-analysis-sources), [s5](#profile-analysis-sources), [s4](#profile-analysis-sources)\] |
| Funding Efficiency | 3/5 | The $13M seed is proportional to stage with visible shipping (SOC 2 Type 2, the M3AAWG study, named customers) and Vanguard pre-announced for early customer testing, but no revenue, margin, or growth-efficiency figure is disclosed, the honest default rather than confirmed output per dollar. \[[s8](#profile-analysis-sources), [s2](#profile-analysis-sources), [s7](#profile-analysis-sources), [s4](#profile-analysis-sources)\] |
| Category Clarity | 4/5 | Email security is an established budget line, and the press places AegisAI in it without coaching, with SecurityWeek calling it an email security startup and emailexpert framing it inside the gateway-to-API transition. Buyers can weigh the product directly against a Proofpoint or Mimecast renewal. \[[s9](#profile-analysis-sources), [s10](#profile-analysis-sources)\] |
| Incumbent Defensibility | 2/5 | Microsoft and Google own the mailbox platforms AegisAI plugs into and ship native email protections, and Abnormal AI sells AI-native detection through the same APIs, so the core capability is a plausible feature release for vendors already adjacent to the buyer. The claimed counterweights, cross-customer threat intelligence and adversarial ML expertise, are not yet visible as a structural barrier in public evidence. \[[s9](#profile-analysis-sources), [s2](#profile-analysis-sources), [s10](#profile-analysis-sources), [s13](#profile-analysis-sources), [s14](#profile-analysis-sources)\] |

### Business Risks

- Microsoft or Google could fold equivalent agentic detection into Microsoft 365 and Google Workspace, removing the reason to buy a third-party add-on for the mailboxes they own.
- Abnormal AI could match the agentic reasoning pitch on the same API deployment model and bring a larger sales organization to the same buyers, squeezing AegisAI out of competitive evaluations.
- Because the product installs through a single mailbox API, which suggests removal is as frictionless though no cited page documents the uninstall path, a single missed breach or a noisy quarter of false quarantines could end subscriptions with nothing holding renewal.
- The headline claims of up to 90% fewer false positives and 22% more attacks blocked lack independent validation, and a third-party test that contradicts them would undercut the core pitch.
- Running LLM analysis on every inbound message could compress gross margins at enterprise mail volumes, forcing prices that erode the value case against bundled incumbent protection.
- Vanguard was announced in 2026 as a pursuit agent for threats behind CAPTCHAs and cloaked pages, and failing to ship it as a generally available product would weaken the company's product-breadth story.

### Problem & Market

AegisAI sells protection against email attacks that AI writes and mutates faster than rules-based filters adapt. The company argues that gateway-era products depend on humans writing new rules after each observed attack pattern, while attackers now generate individualized lures at scale. SecurityWeek summarizes the approach as removing static rules, playbooks, and training in favor of AI agents that inspect, analyze, and neutralize threats on their own.

Independent coverage corroborates the demand. Emailexpert describes the migration from perimeter secure email gateways to API-driven integrated cloud email security as underway for several years, pushed by Microsoft 365 and Google Workspace adoption, and notes attackers escalating toward business email compromise and AI-generated phishing that exploit social and linguistic cues. TechCrunch relays research that AI-written phishing draws far higher click-through rates than human-written lures.

The buyer AegisAI courts is a security team without spare analyst capacity. Foundation Capital, an investor, argues the underserved segment is mid-market companies that cannot staff modern email defense, and the launch customer list of technology and fintech firms matches that profile. \[[s9](#profile-analysis-sources), [s10](#profile-analysis-sources), [s8](#profile-analysis-sources), [s11](#profile-analysis-sources)\]

### Product Capabilities

The AegisAI product is a network of LLM-based agents rather than a filter pipeline. TechCrunch describes an orchestrating agent that recognizes a potential threat and calls specialized agents, each a custom-built LLM tuned to a threat type such as OAuth lures, gift-card scams, or urgency manipulation. The agents analyze every message component in real time, including links, attachments, metadata, QR codes, and behavioral patterns, then reason together toward a verdict.

Deployment works through mailbox APIs instead of mail routing changes. The product connects to Google Workspace or Microsoft 365 in minutes without MX record changes, sends an initial findings report within days, runs in read-only mode for about a week, and then activates automatic quarantine. The vendor markets zero-configuration operation with no rule tuning.

Efficacy claims remain vendor-stated. The product page claims up to 90% fewer false positives while blocking 22% more attacks, and the launch press release attributes the false-positive figure to production customer environments. Emailexpert observes that independent validation of those claims is not yet available, and AegisAI publishes no public technical documentation portal where the architecture could be inspected.

The company is extending the same agentic approach beyond the inbox. Its State of the AI Threat in Email study, presented at the M3AAWG 2026 conference, accompanied the March 2026 announcement of Vanguard, an agent designed to pursue threats that hide behind CAPTCHAs, cloaked web pages, and weaponized documents. \[[s8](#profile-analysis-sources), [s2](#profile-analysis-sources), [s1](#profile-analysis-sources), [s12](#profile-analysis-sources), [s10](#profile-analysis-sources), [s7](#profile-analysis-sources)\]

### Competitive Positioning

AegisAI positions itself as the AI-native replacement for rules-driven email security. Its investor names Proofpoint, Mimecast, and Trellix as the incumbents whose rules engines require SOC teams to chase each new attack pattern, and the vendor's comparison messaging contrasts rule-based detection and frequent false positives with self-learning LLM detection.

The modern flank is more crowded than the incumbent flank. Abnormal AI sells AI-driven behavioral detection through the same Microsoft 365 and Google Workspace APIs, and the mailbox owners themselves bundle native protections. Against both, AegisAI claims agentic reasoning that adapts without tuning, custom-built agents, and a commitment that customer data is never shared with external AI labs.

The durable question is absorption. Microsoft and Google control the APIs the product depends on and sell security to the same buyer, so AegisAI's visible counters are its founders' counter-abuse pedigree and threat intelligence shared across its customer base as the install base grows. \[[s11](#profile-analysis-sources), [s1](#profile-analysis-sources), [s2](#profile-analysis-sources), [s9](#profile-analysis-sources), [s13](#profile-analysis-sources), [s14](#profile-analysis-sources)\]

### Go-to-Market & Traction

AegisAI runs a founder-led, demo-gated sales motion. No pricing is published, every product page routes to a demo booking, and the founders front the public selling through interviews, bylined announcements, and conference appearances. Open roles for two account executives, a business development representative, and a demand-generation director signal the transition toward a hired go-to-market team.

Named traction arrived early. TechCrunch reported three paying customers at launch, naming Lokker and Mesh Connect, and Foundation Capital reported deployments at ten organizations. A LangChain case study quotes LangChain's head of IT on a setup that took under five minutes and caught a large volume of threats within a week.

Marketing runs ahead of the company's size. AegisAI said it would demonstrate Vanguard live during RSA Conference 2026, and it publishes research content including a threat glossary, an AI spearphishing report, and the State of the AI Threat in Email study presented at the M3AAWG 2026 conference. No cloud marketplace listings or reseller programs appear in the cited public record. \[[s1](#profile-analysis-sources), [s4](#profile-analysis-sources), [s8](#profile-analysis-sources), [s11](#profile-analysis-sources), [s5](#profile-analysis-sources), [s7](#profile-analysis-sources)\]

### Team & Credibility

The founding team's background maps directly onto the product's problem. TechCrunch verifies that CEO Cy Khormaee spent over five years leading product for Google's counter-abuse systems, including Safe Browsing, reCAPTCHA, and Web Risk, and that CTO Ryan Luo spent close to a decade engineering those systems. The company page describes Luo as the engineer who modernized the core Safe Browsing phishing platform.

Prior company-building experience is verifiable in outline. Khormaee founded Contastic, acquired by SugarCRM, founded CIMLS, and led product at Moovweb, acquired by Edgio, per the company page. The investor account adds that Foundation Capital incubated AegisAI with the founders from early 2025 and co-led the seed round with Accel.

The organization is small and scaling deliberately. TechCrunch reported a team of six at launch, and the careers page now lists more than a dozen open roles across engineering, AI operations, sales, marketing, and leadership, including a detection engineer and an email security analyst for AI operations. \[[s8](#profile-analysis-sources), [s3](#profile-analysis-sources), [s11](#profile-analysis-sources), [s4](#profile-analysis-sources)\]

### Trust Readiness

AegisAI operates a trust center at the trust.aegisai.ai subdomain that renders live and stays actively maintained. The page publishes a SOC 2 Type 2 attestation, naming the report alongside a bridge letter and a letter of intent, plus two penetration test attestation letters covering authenticated and external application security assessments. It also summarizes a controls program across infrastructure, organizational, product, internal, and data and privacy domains, with the underlying documents held behind a request-access step. SOC 2 Type 2 is the sole compliance framework listed, the enterprise baseline rather than a regulated-market differentiator.

The trust center names Aegis AI Security as the operating entity, links its privacy policy, and lists compliance@aegisai.ai as the contact. The product page repeats the SOC 2 Type 2 claim, and the vendor markets data minimization by design and a commitment that customer data is never shared with external AI labs.

The product's access model sets a high trust bar that the published attestations only begin to answer. The service reads every inbound message in a customer's mailboxes and holds the authority to quarantine mail automatically, so a vendor compromise or a model failure would touch the most sensitive communication flows a company has. The trust center and product pages reviewed surface no coordinated vulnerability disclosure policy, a gap for a vendor whose founders built their reputations on abuse research. \[[s15](#profile-analysis-sources), [s2](#profile-analysis-sources), [s1](#profile-analysis-sources)\]

### Competitors

| Company | Relationship | Note |
|---|---|---|
| Abnormal AI | competes with | AI-native email security vendor selling behavioral detection through the same Microsoft 365 and Google Workspace APIs. |
| Proofpoint | competes with | Secure email gateway incumbent whose rules-driven filtering AegisAI positions itself against. |
| Mimecast | competes with | Email security incumbent named in investor materials as a rules-era vendor the product aims to displace. |
| Microsoft | adjacent | Owns Microsoft 365 and ships native email protections on the same mailboxes AegisAI defends through its API. |
| Google | adjacent | Owns Google Workspace, where the founders' former Safe Browsing colleagues ship built-in phishing defenses. |

## Strategy Deep Dive

A closer look at the company's product strategy, measuring how [defensible](https://zeltser.com/scoring-security-product-strategy) it is against market forces and examining the [eight areas](https://zeltser.com/security-product-creation-framework) behind it.

### Defensibility

**Exposed (11/21)**

Band guidance: pivot urgently. Analyzed 2026-07-15. Scope: whole company.

AegisAI's durable assets are the founders' adversarial machine-learning expertise and an early cross-customer threat-intelligence loop, both kept relevant by attackers who keep adapting. Its other defenses are thin. The deployment carries little accumulated configuration to unwind, no certification or regulation blocks a replacement, and the product runs as an application on mail platforms whose owners sell competing protection. The threat-intelligence loop is young, and an edge over the mailbox owners' own telemetry is not yet evidenced. AegisAI is defensible where buyers value detection quality over lock-in, and weakest the moment a mailbox owner ships a good-enough bundled defense, with no disclosed contract terms, integration, or compliance dependency holding the customer in place.

| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery | 1/3 | Customers buy detection software marketed as zero-configuration, with no managed service or accountability layer attached. The agents' verdicts replace analyst judgment, but what is sold is feature output. \[[s12](#deep-dive-sources), [s2](#deep-dive-sources)\] |
| Switching Cost | 1/3 | The company markets five-minute API deployment, zero maintenance, and no rule tuning, so a customer accumulates no migration burden, learned workflows, or integration estate. Public materials show little accumulated configuration or integration burden beyond the mailbox API connection. \[[s1](#deep-dive-sources), [s5](#deep-dive-sources)\] |
| Compliance Moat | 1/3 | SOC 2 Type 2 eases procurement but blocks nothing, and no regulation or insurance requirement mandates agentic email security specifically. A competing vendor clears the same bar as a matter of course. \[[s2](#deep-dive-sources)\] |
| Problem Complexity | 3/3 | Real-time adversarial detection across enterprise mail, with custom-tuned LLM agents per threat type, is machine-learning and systems work the founders spent a decade on at Google. Attackers adapt continuously, so the problem renews itself rather than commoditizing. \[[s8](#deep-dive-sources), [s3](#deep-dive-sources)\] |
| Buyer Profile | 2/3 | Named customers are mid-market technology and fintech companies with real but lightweight procurement, and the investor pitch targets mid-market firms without security staff. Regulated-enterprise and government gates are not part of the visible motion. \[[s8](#deep-dive-sources), [s11](#deep-dive-sources)\] |
| Layer | 1/3 | The product is an application attached to mail platforms that Microsoft and Google own, and the cited record documents no other customer-stack dependency on it, so uninstalling is presented as costing only email filtering quality. \[[s1](#deep-dive-sources), [s9](#deep-dive-sources)\] |
| Proprietary Data, Content, or IP | 2/3 | SecurityWeek relays that the agents learn from real-world behavior and share threat intelligence across customer organizations, an aggregate signal one customer could not reproduce. The install base is young, and the loop's edge over the mailbox platform owners' own telemetry is not yet evidenced. \[[s9](#deep-dive-sources), [s11](#deep-dive-sources)\] |

### Strategic Market Segmentation

AegisAI targets mid-market and high-growth technology companies whose security teams cannot staff modern email defense. Foundation Capital, the co-lead investor, frames the underserved buyer as mid-market companies without enough security talent, and the named customers, LangChain, Lokker, and Mesh Connect, are technology and fintech firms of exactly that shape. The persona the company showcases is a head of IT or security lead, with the LangChain case study quoting its head of IT.

Geographic focus is the United States with early European reach. TechCrunch reported pilots with customers in the U.S. and Europe at launch, the company keeps offices in San Francisco and New York, and its highest-profile field event is the live Vanguard demonstration the company announced for the RSA Conference 2026 in San Francisco.

Proof of demand carries recent dates, which matters in a market moving this fast. The LangChain partnership landed in February 2026, and the company's research study followed in March 2026, so the newest public demand evidence is from the current half-year rather than launch week. \[[s11](#deep-dive-sources), [s8](#deep-dive-sources), [s5](#deep-dive-sources), [s6](#deep-dive-sources), [s3](#deep-dive-sources), [s7](#deep-dive-sources)\]

### Product Capabilities & AI Advantages

The product's mechanism is a network of specialized reasoning agents rather than a single classifier. TechCrunch describes an orchestrating agent that recognizes a potential threat and calls specialized agents, each a custom-built LLM tuned to one threat type, which analyze links, attachments, metadata, QR codes, and behavioral patterns in real time and reason together toward a verdict. SecurityWeek adds that the agents continuously learn from real-world behavior and share threat intelligence across customer organizations.

The claimed AI advantage is adaptation without human rule-writing. The vendor contrasts self-learning LLM detection with rules-based filters that miss zero-day lures, markets zero-configuration operation, and commits that customer data never reaches external AI labs, a data-handling pledge that leaves open whether the models are self-hosted or privately hosted third-party models. These claims are coherent with the founders' background, but no public documentation portal or independent benchmark lets a buyer verify them, and emailexpert notes that independent validation is not yet available.

The capability story is moving rather than static. Within two quarters of launch the company published a study of AI-generated email attacks, presented it at the M3AAWG 2026 conference, and announced Vanguard, an agent that pursues threats hiding behind CAPTCHAs, cloaked pages, and weaponized documents. That cadence shows the pitch evolving with the current model generation instead of standing still. The attack telemetry AegisAI pools across every connected mailbox, the malicious links, attachments, QR codes, and behavioral patterns seen at one customer, could compound into a detection edge no single customer could rebuild, yet the install base is still too young to evidence that this shared loop has begun to widen the gap against Microsoft and Google rather than merely exist. \[[s8](#deep-dive-sources), [s9](#deep-dive-sources), [s2](#deep-dive-sources), [s10](#deep-dive-sources), [s7](#deep-dive-sources)\]

### Sales Engagement & Go-to-Market

The founders front the selling, which fits the company's stage. Cy Khormaee gives the press interviews, the founders byline the partnership announcements, and every product page routes to a demo booking rather than a self-service signup. Current openings include two account executives and a business development representative, which point to an initial hired go-to-market layer forming alongside the founder-fronted public selling the press coverage and bylines evidence, the healthy sequence for a company at an early revenue stage.

Marketing output is heavy for a team that numbered six at its September 2025 launch. The company announced it would demonstrate Vanguard live during the RSA Conference 2026, presented its AI threat study at the M3AAWG 2026 conference, and feeds demand with research content such as that study and its spearphishing reports.

Distribution remains the thinnest part of the motion. No cloud marketplace listings, MSSP relationships, or reseller programs appear on the pages reviewed, so the public record shows only the vendor's own funnel. The LangChain relationship brings co-marketing reach into the AI developer community, but it is a customer partnership rather than a resale channel. \[[s8](#deep-dive-sources), [s6](#deep-dive-sources), [s4](#deep-dive-sources), [s1](#deep-dive-sources), [s7](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Pricing Model

AegisAI publishes no pricing. Every call to action books a demo, a posture consistent with negotiated deals, though undisclosed pricing by itself does not establish contract size. The charging unit is not disclosed on any reviewed page, so a buyer cannot yet tell whether the company prices per mailbox, per user, or per volume of mail analyzed.

The cost side of pricing is the strategic question the public record leaves open. Running LLM inference across every inbound message is a real per-message cost, and Foundation Capital itself records having asked whether a multi-agent system could be effective and cost-efficient before investing. How the company prices around that cost floor, and whether margins hold at enterprise mail volumes, will shape its ability to undercut or premium-price against bundled incumbent protection.

Evaluation is engineered to be low-friction. The product runs in read-only monitoring mode for about a week before quarantine activates, and the company gives away its threat research as lead generation, though no public page states what an evaluation costs, so entry pricing, like contract pricing, stays undisclosed. \[[s10](#deep-dive-sources), [s11](#deep-dive-sources), [s8](#deep-dive-sources), [s2](#deep-dive-sources)\]

### Product Delivery & Operations

Deployment is the product's sharpest proof point. The service connects to Google Workspace or Microsoft 365 through APIs in about five minutes, requires no MX record changes or mail rerouting, and starts in a monitoring mode that evaluates threats without disrupting delivery. TechCrunch describes the sequence as a findings report arriving in a couple of days, then about a week of read-only operation, after which automatic quarantine activates. The LangChain case study reports setup in under five minutes with zero ongoing maintenance burden.

Operations are pitched as hands-off for the customer. The launch materials describe zero-configuration operation with autonomous response, escalation, and policy enforcement requiring minimal SOC setup, and the product surfaces explainability summaries, indicators of compromise, and dashboards aimed at CISOs and compliance teams.

Behind the autonomous pitch the vendor is hiring operational specialists. The careers page lists an email security analyst role for AI operations alongside a detection engineer, hires consistent with vendor-side supervision and tuning of the agent fleet, though the public record does not describe how those roles fit the product loop. \[[s8](#deep-dive-sources), [s1](#deep-dive-sources), [s5](#deep-dive-sources), [s12](#deep-dive-sources), [s2](#deep-dive-sources), [s4](#deep-dive-sources)\]

### Earning Customers' Trust

AegisAI carries the baseline trust artifacts for its stage. The product page states SOC 2 Type 2 certification, the site links a trust center on a dedicated subdomain, and the privacy policy names AegisAI Security as the controller of personal data. The vendor claims data minimization by design and commits that customer data is never shared with external AI labs, a meaningful posture for a product that reads every inbound message.

The access model concentrates risk in ways public materials only partly address. The service reads incoming corporate mail through its API integration and holds the authority to remove messages automatically, so a compromise of the vendor, or a badly behaved model update, would touch a customer's most sensitive communication flows. False quarantines are a business-disruption risk the company addresses with its false-positive claims, but those claims await independent validation.

One maturity gap stands out for this founding team. No vulnerability disclosure policy or security research intake appears on the pages reviewed, which is notable for founders whose Google careers were built on coordinated abuse and phishing research. \[[s2](#deep-dive-sources), [s1](#deep-dive-sources), [s13](#deep-dive-sources), [s14](#deep-dive-sources), [s9](#deep-dive-sources), [s10](#deep-dive-sources)\]

### Platform Strategy & Ecosystem Positioning

AegisAI is a point product living on two platforms it does not control. The product exists as an API client of Microsoft 365 and Google Workspace, so Microsoft and Google set the technical terms of its existence, and Microsoft sells native email protections to the same buyers. That dependency is the company's deepest structural weakness against ecosystem power, and the company's answer so far is to out-detect the bundled protections rather than to diversify the surface it defends.

Ecosystem building is early and brand-led rather than integration-led. The February 2026 LangChain partnership pairs two AI companies for credibility and co-marketing in the AI community. No SIEM, SOAR, or ticketing integrations are documented on public pages, and the public record shows no marketplace listings, so the product does not yet participate in the procurement and telemetry ecosystems where enterprise security tools embed.

The Vanguard announcement sketches the platform ambition. Extending agents from inbox analysis toward pursuing threats behind CAPTCHAs, cloaked pages, and weaponized documents would widen the product from mail filtering toward a broader autonomous defense surface, but Vanguard remains an announcement rather than a generally available product. \[[s1](#deep-dive-sources), [s8](#deep-dive-sources), [s6](#deep-dive-sources), [s7](#deep-dive-sources), [s2](#deep-dive-sources), [s15](#deep-dive-sources)\]

### Team & Execution Capability

The team is the company's strongest verifiable asset. TechCrunch confirms CEO Cy Khormaee led product for Google's counter-abuse systems, including Safe Browsing, reCAPTCHA, and Web Risk, and CTO Ryan Luo spent close to a decade engineering those systems, with the company crediting him for modernizing the core Safe Browsing phishing platform. The pair covers product and engineering leadership for exactly the problem the company sells against.

Execution capacity is scaling from a deliberately small base. TechCrunch reported six people at launch, and the careers page now lists open roles spanning AI and infrastructure engineering, detection engineering, AI operations, product management, sales, and a chief of staff, with a head of marketing already publishing under the company's name.

The investor bench adds operating depth. Accel and Foundation Capital co-led the seed round, and Foundation Capital incubated the company with the founders from early 2025, an unusually involved relationship that included arranging CISO customer discovery before the product existed. \[[s8](#deep-dive-sources), [s3](#deep-dive-sources), [s4](#deep-dive-sources), [s7](#deep-dive-sources), [s11](#deep-dive-sources)\]

## Sources

### Company Detail Sources

Cited from the Sourced Details and Matrix Coverage rows.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | [AegisAI homepage](https://www.aegisai.ai/) | official | 2026-06-11 |
| f2 | [Foundation Capital investment announcement for AegisAI (posted September 10, 2025)](https://foundationcapital.com/ideas/our-investment-in-aegisai-the-overdue-email-security-breakthrough) | other | 2026-06-12 |
| f3 | [Foundation Capital investment announcement for AegisAI](https://foundationcapital.com/ideas/our-investment-in-aegisai-the-overdue-email-security-breakthrough) | other | 2026-06-11 |
| f4 | [TechCrunch on the AegisAI seed round](https://techcrunch.com/2025/09/10/googles-former-security-leads-raise-13m-to-fight-email-threats-before-they-reach-you/) | press | 2026-06-11 |
| f5 | [AegisAI product page](https://www.aegisai.ai/product) | official | 2026-06-11 |

### Profile Analysis Sources

Cited from the Market Readiness section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [AegisAI homepage](https://www.aegisai.ai/) “100% MX-Free Deployment 5min Integration Time via API 24/7 Always-on AI Agents” | official | 2026-06-18 |
| s2 | [AegisAI product page](https://www.aegisai.ai/product) “AegisAI cuts through the noise with automated triaging that reduces false positives by up to 90% while blocking 22% more attacks.” | official | 2026-06-18 |
| s3 | [AegisAI company page](https://www.aegisai.ai/company) “Ryan spent nine years at Google protecting users at internet scale. He modernized the core Safe Browsing phishing platform and built reCAPTCHA's product-led growth strategy” | official | 2026-06-12 |
| s4 | [AegisAI careers page](https://www.aegisai.ai/careers) “We just raised our $13M seed round led by Accel and Foundation Capital” | official | 2026-06-12 |
| s5 | [AegisAI LangChain case study](https://www.aegisai.ai/customers/langchain) “less than five minutes to get it set up. And within a week, it had caught an astounding amount.” | official | 2026-06-12 |
| s7 | [AegisAI State of the AI Threat in Email study and Vanguard announcement](https://www.aegisai.ai/blog/ai-email-attacks-grew-5x-in-2025-aegisai-launches-vanguard-to-neutralize-adversarial-ai-captchas) “AegisAI will demonstrate Vanguard live during the RSA Conference 2026. The groundbreaking study of AI attacks was presented at the 2026 Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) conference” | official | 2026-06-18 |
| s8 | [TechCrunch on the AegisAI seed round](https://techcrunch.com/2025/09/10/googles-former-security-leads-raise-13m-to-fight-email-threats-before-they-reach-you/) “phishing messages generated by large language models (LLMs) had a 54% click-through rate in 2024, far higher than the 12% rate for human-written emails” | press | 2026-06-12 |
| s9 | [SecurityWeek on the AegisAI launch](https://www.securityweek.com/email-security-startup-aegisai-launches-with-13-million-in-funding/) “AegisAI's approach to email security eliminates the need for static rules, complex playbooks, and training, through the deployment of a network of real-time AI agents that autonomously inspect, analyze, and neutralize threats.” | press | 2026-06-12 |
| s10 | [Emailexpert on the AegisAI seed round](https://emailexpert.com/aegisais-13m-seed-round-for-ai-email-security/) “Independent validation of those claims is not yet available.” | press | 2026-06-12 |
| s11 | [Foundation Capital investment announcement for AegisAI](https://foundationcapital.com/ideas/our-investment-in-aegisai-the-overdue-email-security-breakthrough) “Today, the core capabilities of the platform are not only built but also already deployed at ten organizations.” | other | 2026-06-12 |
| s12 | [AegisAI launch press release via National Law Review](https://natlawreview.com/press-releases/google-security-veterans-raise-13m-seed-round-aegisai-fix-email-security) “Customers in production environments have seen up to 90% reduction in False positives (good emails being quarantined) compared to traditional solutions.” | other | 2026-06-12 |
| s13 | [Abnormal AI: The Abnormal Behavioral Security Platform](https://abnormal.ai/products) “Abnormal trains and deploys behavioral AI to stop highly sophisticated cybersecurity attacks. ... One console, one behavioral engine, and native API integrations across Microsoft 365, Google Workspace, Okta, CrowdStrike, plus your SIEM and SOAR.” | official | 2026-07-02 |
| s14 | [Microsoft: Microsoft Defender for Office 365](https://www.microsoft.com/en-us/security/business/siem-and-xdr/microsoft-defender-office-365) “Safeguard your email and collaboration tools from phishing, and disrupt advanced cyberthreats, such as business email compromise. ... Defender for Office 365 Plan 1 offers protection against advanced cyberattacks across email and collaboration tools in Microsoft 365.” | official | 2026-07-02 |
| s15 | [AegisAI Trust Center](https://trust.aegisai.ai) “Aegis AI Security. compliance@aegisai.ai. Privacy Policy. SOC 2. SOC 2 Type 2 Report. SOC 2 Type 2 Bridge Letter SOC 2 Type 2 Letter of Intent Penetration Tests Authenticated Application Security Assessment Attestation Letter External Security Assessment Attestation Letter” | official | 2026-07-08 |

### Deep-Dive Sources

Cited from the Strategy Deep Dive section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [AegisAI homepage](https://www.aegisai.ai/) “100% MX-Free Deployment 5min Integration Time via API 24/7 Always-on AI Agents” | official | 2026-06-18 |
| s2 | [AegisAI product page](https://www.aegisai.ai/product) “AegisAI cuts through the noise with automated triaging that reduces false positives by up to 90% while blocking 22% more attacks.” | official | 2026-06-11 |
| s3 | [AegisAI company page](https://www.aegisai.ai/company) “Ryan spent nine years at Google protecting users at internet scale. He modernized the core Safe Browsing phishing platform and built reCAPTCHA's product-led growth strategy” | official | 2026-06-11 |
| s4 | [AegisAI careers page](https://www.aegisai.ai/careers) “We just raised our $13M seed round led by Accel and Foundation Capital” | official | 2026-06-18 |
| s5 | [AegisAI LangChain case study](https://www.aegisai.ai/customers/langchain) “less than five minutes to get it set up. And within a week, it had caught an astounding amount.” | official | 2026-06-11 |
| s6 | [AegisAI announcement of the LangChain partnership](https://www.aegisai.ai/blog/agents-protecting-the-architects-langchain-selects-aegis-ai-as-email-security-partner) “today announced that it has been selected by LangChain” | official | 2026-06-11 |
| s7 | [AegisAI State of the AI Threat in Email study and Vanguard announcement](https://www.aegisai.ai/blog/ai-email-attacks-grew-5x-in-2025-aegisai-launches-vanguard-to-neutralize-adversarial-ai-captchas) “AegisAI will demonstrate Vanguard live during the RSA Conference 2026. Organizations interested in joining the early access program or attend the demo during the RSA conference [in San Francisco].” | official | 2026-06-18 |
| s8 | [TechCrunch on the AegisAI seed round](https://techcrunch.com/2025/09/10/googles-former-security-leads-raise-13m-to-fight-email-threats-before-they-reach-you/) “It takes “no more than five minutes” for customers to install AegisAI’s system on a Google Workspace or Microsoft 365 email account via an API, per Khormaee.” | press | 2026-06-18 |
| s9 | [SecurityWeek on the AegisAI launch](https://www.securityweek.com/email-security-startup-aegisai-launches-with-13-million-in-funding/) “the agents continuously learn from real-world behavior for fast detection and remediation, while also sharing threat intelligence across organizations.” | press | 2026-06-11 |
| s10 | [Emailexpert on the AegisAI seed round](https://emailexpert.com/aegisais-13m-seed-round-for-ai-email-security/) “Independent validation of those claims is not yet available.” | press | 2026-07-15 |
| s11 | [Foundation Capital investment announcement for AegisAI](https://foundationcapital.com/ideas/our-investment-in-aegisai-the-overdue-email-security-breakthrough) “Could a multi-agent system for email security today perform in a manner that was both effective and cost-efficient?” | other | 2026-06-11 |
| s12 | [AegisAI launch press release via National Law Review](https://natlawreview.com/press-releases/google-security-veterans-raise-13m-seed-round-aegisai-fix-email-security) “Zero-Configuration operation – Autonomous response, escalation, and policy enforcement requiring minimal SOC setup or main” | other | 2026-06-11 |
| s13 | [AegisAI: Privacy Policy](https://www.aegisai.ai/privacy-policy) “AegisAI Security will be the controller of your Personal Data processed in connection with the Services.” | official | 2026-07-02 |
| s14 | [AegisAI trust center at trust.aegisai.ai (Vanta-hosted, static fetch serves the page title, 2026-07-02)](https://trust.aegisai.ai/) “aegisai.ai Trust Center” | official | 2026-07-02 |
| s15 | [Microsoft: Microsoft Defender for Office 365](https://www.microsoft.com/en-us/security/business/siem-and-xdr/microsoft-defender-office-365) “Safeguard your email and collaboration tools from phishing, and disrupt advanced cyberthreats, such as business email compromise. ... Defender for Office 365 Plan 1 offers protection against advanced cyberattacks across email and collaboration tools in Microsoft 365.” | official | 2026-07-02 |

## Disclaimer

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.