Topics

More from TechCrunch

Google’s former security leads raise $13M to fight email threats before they reach you

Most Popular

iPhone 17, iPhone Air, AirPods Pro 3, and everything else announced at Apple’s hardware event

Musk’s $1T pay package is full of watered-down versions of his own broken promises

Scale AI’s former CTO launches AI agent that could solve big data’s biggest problem

OpenAI announces AI-powered hiring platform to take on LinkedIn

Atlassian to buy Arc developer The Browser Company for $610M

Google brings Material 3 Expressive to Pixel 6 and newer devices, along with other features

Latest

AI

Amazon

Apps

Biotech & Health

Climate

Cloud Computing

Commerce

Crypto

Enterprise

EVs

Fintech

Fundraising

Gadgets

Gaming

Google

Government & Policy

Hardware

Instagram

Layoffs

Media & Entertainment

Meta

Microsoft

Privacy

Robotics

Security

Social

Space

Startups

TikTok

Transportation

Venture

Events

Startup Battlefield

StrictlyVC

Newsletters

Podcasts

Videos

Partner Content

TechCrunch Brand Studio

Crunchboard

Contact Us

Google’s former security leads raise $13M to fight email threats before they reach you Jagmeet Singh AM PDT · September 10, 2025 As AI is increasingly helping hackers to launch mass-scale email attacks, former Google security leaders have joined forces to build autonomous AI agents that aim to stop phishing, malware, and business email compromise threats before they ever reach user inboxes.

That is the mission behind AegisAI, a new email security startup that has just emerged from stealth with $13 million in seed funding co-led

More than 90% of successful cyberattacks begin with a phishing email, per U.S. federal cybersecurity agency CISA. A recent CrowdStrike study (PDF) also found that phishing messages generated

AegisAI aims to counter this growing threat with its suite of autonomous AI agents.

Founded

“The sum of all evil is a PDF attachment in an email. That’s always where all the attacks started, and so I really wanted to solve this problem,” Khormaee said in an exclusive interview with TechCrunch.

Khormaee was head of product and director of product management at Google for over five years until July 2023. During that time, he led the security team responsible for protecting Google, its four billion users, and four million websites from phishing, malware, and fraud, using products like Safe Browsing, reCAPTCHA, and Web Risk. It was also during this time that he first met Luo, who had spent almost a decade at Google and was part of the Safe Browsing team.

Google gave Khormaee firsthand experience in building phishing detection technologies, a deep understanding of security from the company’s perspective, and how to develop and scale security businesses quickly, he told TechCrunch.

Before Google, Khormaee founded the sales intelligence platform Contastic, which was acquired

AegisAI has built reasoning agents, each of which is a custom-built LLM tuned to a specific threat. Once the orchestrating agent recognizes a threat or potential threat, it calls other agents in the network, which Khormaee refers to as “buddies.” These agents then run the analysis, reason with each other, and respond to the orchestrating agent with a verdict.

The agents perform real-time analysis of every message component, including links, attachments, metadata, QR codes, and behavioral patterns.

“What we know from building these tools at Google is what all the things are about an email you need to analyze? What are all the data

While AegisAI has currently built over 10 agents for this work, Khormaee told TechCrunch that there could be 50 to 100 agents over time as adversaries become smarter and try to fool the system.

“I fully believe that in two years, adversaries will understand what we’re doing. They’ll retool and attack what we’re doing, and then we’ll need to build more agents to stay ahead of them,” he said.

Unlike a typical email security platform that uses a rules-based approach, these AI agents spot a bunch of attacks and self-tune themselves for every possible variant of those attacks in real-time, said Khormaee. The startup has developed multiple AI models tailored to various threats and specific industries, including those in venture capital and financial services.

Alongside quickly detecting threats, AegisAI’s agents help reduce false positives

It takes “no more than five minutes” for customers to install AegisAI’s system on a Google Workspace or Microsoft 365 email account via an API, per Khormaee. Once set up, the startup will send a report in a couple of days with the details on what the system found in the environment, including false positives and false negatives. It will then run in read-only mode for a week and then activate quarantine.

“It’s so hard without this technology to solve this very heterogeneous problem in email,” said Khormaee.

The startup, with offices in San Francisco and New York, is currently running a pilot with customers in the U.S. and Europe and has already added three paying customers, including data privacy compliance software Lokker and crypto payment platform Mesh Connect. The startup currently has a team of six members.

With the fresh investment, Khormaee said the startup plans to expand its technical expertise and build a robust go-to-market infrastructure.

Topics

Jagmeet Singh

Jagmeet covers startups, tech policy-related updates, and all other major tech-centric developments from India for TechCrunch. He previously worked as a principal

You can contact or verify outreach from Jagmeet View Bio October 27-29, 2025 San Francisco Founders: land your investor and sharpen your pitch. Investors: discover your next breakout startup. Innovators: claim a front-row seat to the future. Join 10,000+ tech leaders at the epicenter of innovation. Register now and save up to $668.Regular Bird rates end September 26

Most Popular iPhone 17, iPhone Air, AirPods Pro 3, and everything else announced at Apple’s hardware event Lauren Forristal

Musk’s $1T pay package is full of watered-down versions of his own broken promises Sean O'Kane

Scale AI’s former CTO launches AI agent that could solve big data’s biggest problem Julie Bort

OpenAI announces AI-powered hiring platform to take on LinkedIn Maxwell Zeff

Atlassian to buy Arc developer The Browser Company for $610M Ivan Mehta

Google brings Material 3 Expressive to Pixel 6 and newer devices, along with other features Aisha Malik

X LinkedIn Facebook Instagram youTube Mastodon Threads Bluesky TechCrunchStaffContact UsAdvertiseCrunchboard JobsSite Map Terms of ServicePrivacy PolicyRSS Terms of UseCode of Conduct Apple Event 2025Oura RingNew EmojisiPhone AirSnapTech LayoffsChatGPT © 2025 TechCrunch Media LLC.