Ocean

Ocean, founded in 2024 by Shay Shwartz and Oran Moyal (both with backgrounds in Israeli defense and intelligence units), represents a new generation of email security architecture built explicitly to counter AI-driven threat actors. The company raised $8 million in seed funding in 2024 and a $20 million Series A in May 2026 led by Lightspeed Venture Partners, with participation from Picture Capital, Cerca Partners, and angels including Assaf Rappaport (founder of Wiz, a leading cloud security platform) and founders from Armis Security.

Ocean's core innovation addresses a critical gap in enterprise email security: traditional signature-based and pattern-matching defenses increasingly fail against sophisticated AI-generated phishing attacks, where messages are dynamically tailored to individual targets and bypass conventional rule-based filters. Ocean's platform uses AI agents that analyze email intent, context, and behavioral patterns in real time, enabling detection of subtle social engineering and credential harvesting attacks that would evade legacy solutions. The system integrates natively with both Google Workspace and Microsoft 365 via API, enabling enterprises to deploy protection without email infrastructure rip-and-replace projects.

Ocean processes billions of emails monthly and protects hundreds of thousands of mailboxes worldwide. The company has demonstrated concrete business value through customer references including Fortune 500 companies like Kayak, Kingston Technology, and Headspace, with reported prevention of attacks that would have resulted in tens of millions of dollars in losses. This traction—rapid customer adoption from design-to-deployment—suggests strong product-market fit and urgent enterprise demand.

The market for email security is experiencing fundamental disruption. Legacy vendors (Proofpoint, Mimecast, now acquired by Cisco) built email security around perimeter control and user training. However, as AI-powered attacks become more sophisticated and believable, these approaches increasingly fail. Ocean's AI-agent-based detection focuses on semantic understanding and behavioral anomalies rather than static rules, representing a qualitative shift in defensive capability. Industry analysts project the global email security market will grow to $8+ billion by 2030, driven largely by AI-powered threat evolution and enterprises' need for next-generation defenses.

Ocean faces competition from both established vendors enhancing their offerings with AI (Microsoft Defender for Office 365, Google Security Operations, Proofpoint with Tessian, others) and emerging startups like Abnormal Security (behavioral AI-based email defense) and Inky (acquired by Cisco). Ocean differentiates through native AI-agent architecture (not bolted-on AI to legacy platforms), founders' backgrounds in Israeli defense units (military-grade threat analysis culture), and the company's single focus on email rather than a broader sprawling platform. The company's agility and founders' threat intelligence expertise position it well to detect emerging attack classes faster than larger, more bureaucratic incumbents.

Dual-use relevance is substantial and clear. Enterprise email security serves both commercial organizations and defense/government agencies. The same AI-driven threat detection capabilities that protect corporate users also protect classified and mission-critical military communications. Email remains the primary attack vector for nation-state threat actors, making Ocean's technology relevant to cybersecurity infrastructure across commercial and defense domains. Additionally, the company's founders' prior backgrounds in Israeli intelligence operations (likely Unit 8200 or similar) suggest deep understanding of threat actor tradecraft and operational security requirements for sensitive environments.

Strategic relevance to resilience and national cybersecurity is high. Email compromise and business email compromise (BEC) attacks cost organizations globally an estimated $50+ billion annually in fraud and data theft. Sophisticated attacks—targeting C-suite, finance teams, and executives—bypass user training and traditional defenses. Ocean's AI-agent architecture represents cutting-edge defensive capability aligned with the broader evolution of cybersecurity toward behavioral, intent-based detection rather than signature matching. For democracies concerned about critical infrastructure protection, operational technology security, and defense information assurance, indigenous or allied AI-powered email security capability (like Ocean) contributes to resilience against state-actor email compromise campaigns.

The Series A funding amount ($20M) is substantial for an 18-month-old startup in cybersecurity, signaling strong investor conviction. The involvement of Lightspeed (a top-tier VC with deep cybersecurity expertise) and notably Assaf Rappaport (Wiz founder) suggests validation from experienced cybersecurity entrepreneurs and significant market opportunity. The company's plan to invest in AI research, product development, and team expansion indicates focus on technical differentiation and customer acquisition—standard playbooks for breakout cybersecurity platforms.

Risks and competitive challenges are real. Microsoft and Google are deploying enterprise email protection as part of their broader cloud security bundles, with massive installed bases and bundled pricing advantages. These incumbents face principal-agent problems (conflicting incentives), but their scale and integration cannot be ignored. Abnormal Security, with a larger funding base and earlier market entry, has built strong enterprise relationships. Execution risk in AI-based security is high: false positive rates (legitimate emails flagged as attacks) can render solutions unusable; false negatives (missed attacks) destroy credibility and customer trust. Ocean must balance detection sophistication with operational usability—a challenge many AI security startups struggle with. Additionally, rapid evolution of AI-powered attack techniques will require continuous platform development to maintain effectiveness.