From Teen Hacker to Iron Dome Researcher: Ocean Raises $28M to Fight AI Phishing
Overview
Ocean, an agentic email security platform designed to combat AI-powered phishing attacks, has emerged from stealth mode with $28 million in total funding. The startup was founded by Shay Shwartz, a former teen hacker turned elite cybersecurity researcher who worked on Israel's Iron Dome project.
The Founder's Journey
- Early Days: Shay Shwartz started as a teenage hacker before being caught at age 16
- Career Pivot: Shifted focus to prevention rather than attacks
- Elite Experience: Spent a decade in top-tier cybersecurity roles in Israel's defense and intelligence units
- Previous Role: Worked at Axis (later acquired by HPE) before launching Ocean
Funding Details
- Total Raised: $28 million
- Lead Investor: Lightspeed Venture Partners
- Participating Investors: Picture Capital and Cerca Partners
- Notable Angels:
- Assaf Rappaport (Wiz co-founder and CEO)
- Yevgeny Dibrov and Nadir Izrael (Armis co-founders; Armis recently sold to ServiceNow for $7.75 billion)
The AI Phishing Problem
Key Challenge: AI has automated and scaled spear-phishing attacks that previously required sophisticated hackers and significant manual labor.
"AI just made the entire process automatic, so the scale is much, much bigger now. I can instruct LLM to go and understand exactly who you are, harvest large amount of public information, and create those phishing attacks very targeted against you." — Shay Shwartz
Ocean's Solution
Technical Approach
- Small Language Model: Built specifically to quickly analyze emails
- Context Analysis: Thoroughly analyzes the context of every incoming email
- Intent Detection: Understands sender's intent and evaluates against organizational context
- Fraud Detection: Identifies impersonation attempts and fraudulent emails
Current Scale
- Processing Volume: Billions of emails analyzed monthly
- Customers: Includes Kayak, Kingston Technology, and Headspace
Positioning
Philosophy: "This is like having a guard in every door. This is how we make the inbox a safe place with high hygiene."
Market Context
Established Players: Proofpoint, Mimecast Newer Competitors: Abnormal Security Ocean's Differentiation: Purpose-built for AI-powered phishing attacks, not traditional phishing
Key Takeaways
- AI has dramatically increased the scale and sophistication of phishing attacks
- Traditional email security solutions weren't designed for AI-powered threats
- Ocean uses a specialized small language model for rapid contextual email analysis
- The startup has already gained traction with major customers
- Strong backing from cybersecurity veterans and successful exits validates the approach