Ocean emerged from stealth today with $28M in total funding for an agentic email security platform designed to counter AI-generated phishing attacks. Lightspeed Venture Partners led the round, with participation from Picture Capital and Cerca Partners. High-profile angel investors include Wiz CEO Assaf Rappaport and Armis co-founders Yevgeny Dibrov and Nadir Izrael, whose company sold to ServiceNow for $7.75B earlier this year.
The startup is already processing billions of emails each month for enterprise customers including Kayak, Kingston Technology, and Headspace. Ocean founder and CEO Shay Shwartz spent roughly a decade in elite Israeli defense and intelligence roles, including work tied to the Iron Dome project, before launching the company two years ago.
Ocean's thesis is that traditional email security vendors like Proofpoint, Mimecast, and newer players like Abnormal Security were built for manual phishing campaigns, not AI-automated attacks. Historically, only highly skilled attackers could execute targeted spear-phishing at scale because of the manual research and customization required. AI removes that bottleneck.
“AI just made the entire process automatic, so the scale is much, much bigger now.”— Shay Shwartz, Ocean CEO
Key facts
- 01Ocean raised $28M in total funding led by Lightspeed Venture Partners to launch its agentic email security platform.
- 02The startup reviews billions of emails each month for customers including Kayak, Kingston Technology, and Headspace.
- 03Wiz CEO Assaf Rappaport and Armis co-founders Yevgeny Dibrov and Nadir Izrael participated as angel investors.
- 04Armis recently sold to ServiceNow for $7.75B, providing validation for Ocean's cybersecurity investor base.
- 05Ocean built a small language model optimized for fast email analysis rather than relying on general-purpose LLMs.
LLMs can now harvest public information about a target, craft convincing impersonation messages, and execute campaigns at unprecedented volume. The attack surface expands as AI lowers the skill floor for sophisticated fraud.
“I can instruct LLM to go and understand exactly who you are, harvest large amount of public information, and create those phishing attacks very targeted against you.”— Shay Shwartz, Ocean CEO
Ocean addresses this by deploying what Shwartz describes as a small language model tuned specifically for email analysis. The model evaluates every incoming message for context, sender intent, and alignment with the recipient's organizational patterns. Unlike general-purpose LLMs, Ocean's model prioritizes speed and task-specific accuracy over broad capabilities.
The platform analyzes sender behavior, email content, and recipient context simultaneously to identify fraud and impersonation attempts that slip past traditional filters. Each email gets evaluated as if a human security analyst were reviewing it, but at machine scale.
Ocean competes in a crowded email security market where incumbents have spent years building detection rules and machine learning models for conventional phishing. Abnormal Security, founded in 2018, raised over $300M and reached unicorn status by applying behavioral AI to the same problem. The question is whether AI-generated attacks represent a sufficient threat shift to justify a new defensive architecture, or whether existing platforms can adapt their models fast enough.
Shwartz argues the volume and sophistication of AI phishing will overwhelm rule-based systems and first-generation ML detectors. Ocean's funding round suggests investors see a window for a platform purpose-built for the AI threat landscape.
The $28M round gives Ocean runway to expand its customer base and scale its email analysis infrastructure. With billions of emails already under review, the company is betting that AI-powered attacks become the dominant email threat vector within the next 18 to 24 months.
The risk is that the incumbents pivot faster than Ocean scales. Proofpoint and Mimecast have deep enterprise relationships and can integrate AI detection into existing workflows without requiring a platform swap. Ocean's advantage is architectural — a model built from the ground up for AI-native threats — but that advantage collapses if customers treat AI phishing as an incremental problem rather than a category shift.
Working on something we should cover, or seeing a story we missed? Send leads, documents, or feedback to hello@aichatdaily.com. For sensitive tips, see our secure tips page for Signal and PGP options.
Spotted an error? Email hello@aichatdaily.com with the URL and the issue, or read our full corrections policy.
