Ocean Launches AI Email Security Tool With $28M Funding

A startup called Ocean has come out of stealth with $28 million in total funding, made up of an $8 million seed round in 2024 followed by a $20 million Series A led by Lightspeed Venture Partners. The company was founded by Shay Shwartz, who spent a decade in Israeli defense and intelligence work, including projects connected to the Iron Dome missile defense system, and co-founder Oran Moyal. The product is built around a single idea: the old way of catching phishing emails, looking for suspicious signals, broken links, and unusual senders, does not work anymore. Ocean's system, called Ray, reads every email before it lands in an inbox. It checks the sender's identity, the content, the links, and whether the message fits the usual communication patterns of that specific organization. If something is off, it acts. The reason this shift matters is the scale of what AI has done to phishing. Security teams report a surge of over 1,200% in phishing attacks linked to AI tools since 2023. Over 80% of phishing emails now use AI-generated content in some form. What used to require a skilled attacker spending hours on research can now be done in minutes by anyone with access to a standard AI chatbot. One IBM study found that AI built a convincing attack campaign in five minutes, a job that took human experts sixteen hours. The financial damage is real and growing. Business email compromise, the type of attack where a fraudster pretends to be a supplier, an executive, or a colleague to redirect a payment, cost businesses over $3 billion in losses in 2025 alone. The average cost of a successful phishing breach sits at around $4.88 million per incident. A single Oregon city government lost $6 million to one such attack in April 2025. Ocean already processes over one billion emails per month for customers including Kayak, Kingston Technology, and Headspace. The $28 million will go toward expanding AI research, tripling the headcount within a year, and speeding up platform development. The email security market is large and competitive. Proofpoint, Mimecast, and Microsoft all have significant email protection products. Newer companies like Abnormal Security are also building AI-first approaches. The total market is worth roughly $5 to $7 billion today, depending on the source, and is projected to roughly double by the early 2030s as attacks keep getting more sophisticated. What Ocean is specifically betting on is a gap in how existing tools work. Traditional products flag emails that look suspicious. Ocean's argument is that AI-generated attacks look completely normal, so the detection logic needs to move from pattern-matching to understanding intent and context, the same way a careful human reader would. For any business that handles payments, contracts, or sensitive instructions over email, which is nearly every business, the relevant question is not whether to have email protection, but whether the protection you have was built for the kind of attacks that now make up the majority of what arrives in inboxes. The tools built five years ago were not designed for this. The tools being built now are.