Ocean Security
Israeli startup using AI agents that read sender intent and context to catch AI-generated phishing emails that pattern-matching filters miss.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Ocean Security sells an agentic email security platform aimed specifically at AI-generated and AI-personalized phishing, which increasingly defeats legacy pattern- and signature-based filters. Rather than matching known bad indicators, Ocean deploys purpose-built AI agents that investigate each inbound email by analyzing the sender’s likely intent, enriching contextual signals, and following evidence chains before a message reaches an inbox. The company says it already reviews billions of emails per month for customers including Kayak, Headspace, and Kingston Technology.
Ocean was founded in 2024 by Shay Shwartz and Oran Moyal. Shwartz previously spent roughly a decade in Israeli defense and intelligence roles, including work connected to the Iron Dome program, before joining Axis Security (later acquired by HPE). The company emerged from stealth in May 2026 with $28 million in total funding, led by Lightspeed Venture Partners with participation from Picture Capital and Cerca Partners.
Its key differentiator against incumbent email security vendors is treating each email as a case to be investigated rather than a message to be classified — a more computationally expensive approach that its founders argue is necessary now that attackers use generative AI to craft convincing, low-volume, highly targeted lures that evade statistical filters.
Innovation Matrix Assessment
Went from founding to processing billions of emails per month for named enterprise customers within roughly two years.
Directly reduces the volume of AI-generated phishing reaching end users, which cuts into one of the highest-frequency initial-access vectors SOC teams deal with.
Raised $28M from Lightspeed Venture Partners and disclosed named customers (Kayak, Headspace, Kingston Technology), which is stronger, more specific evidence than most stealth-exit funding announcements.
Intent-based, per-email investigation is a meaningful shift from pattern-matching, but email security remains a mature category with many well-funded incumbents making similar AI-driven claims.
Named customers and claimed email-volume scale are good signals, though the 'billions processed' figure is self-reported and not independently audited.
AI-generated phishing is a growing, evolving threat that legacy filters increasingly struggle with, keeping this category relevant for years to come.
Why CISOs Should Care
Catches sophisticated, AI-crafted phishing that evades legacy filters by analyzing intent and context rather than matching known indicators.
What Makes It Different
Investigates each email as an evidence-gathering case using autonomous AI agents, rather than classifying it in a single pass against known threat signatures.
The Matrix Verdict
68/100 — INCREMENTAL INNOVATOR
Ocean Security is an Incremental Innovator with momentum: real named customers and solid funding support the operational case, but it competes in a crowded email security field where several rivals make similar AI-driven claims.
Editorial Note: Claims vs. Verified Findings
The funding round and named customer list are corroborated by multiple outlets (TechCrunch, Dealroom); the specific email-volume figures come from company statements and were not independently verified.
Sources
Alternatives to Ocean Security
Forward
CISO ReviewedBuilds a mathematically accurate 'digital twin' of enterprise networks, letting teams verify network and security changes before they…
Dragos
Industrial control system and OT cybersecurity platform with threat intelligence, detection and incident response services.
Tailscale
A zero-configuration mesh VPN built on WireGuard that applies Google's BeyondCorp zero-trust model to make secure networking accessible…
Zscaler
A cloud-native security-service-edge pioneer that routes all user traffic through a global proxy cloud instead of backhauling it…
Claroty
Cyber-physical systems protection platform securing industrial, healthcare and enterprise IoT devices for critical infrastructure operators.
Island
Chromium-based enterprise browser that embeds governance, data-protection, and network controls at the browser layer.