StrongestLayer, a San Francisco-based Gen 3 AI-native email security platform, has raised $4.1M in seed extension funding led by Inovia Capital, bringing its total seed round to $9.3M. The company detects AI-generated phishing, BEC, and zero-day attacks that bypass traditional gateways by using a multi-LLM ensemble called TRACE to reason about each email's sender, intent, and infrastructure. The capital will support go-to-market strategy and platform expansion.
AI Phishing Surge Drives Security Funding
The timing aligns with a sharp rise in AI-crafted attacks that legacy tools miss. Abnormal Security raised $557M total with a Series D at $5.1B valuation in August 2024, while Sublime Security secured $150M in its Series C in October 2025. StrongestLayer's approach — running three reasoning engines per email for, against, and provenance analysis — targets the gap where pattern-matching and behavioral baselines fall short.
Legacy Defenses Fail Against Novel Attacks
One-third of attacks analyzed by the company between December 2025 and February 2026 could not be caught through signatures or behavioral techniques. Phishing accounts for 58% of observed attacks across thousands of organizations, and BEC incidents rose 38% year-over-year in 2025. Traditional gateways rely on known indicators that AI-generated campaigns evade by design.
TRACE Engine Reasons Like an Analyst
StrongestLayer's platform connects via Microsoft Graph or Google Workspace API in 15 minutes without MX changes, allowing parallel deployment alongside Proofpoint or Mimecast. The Inbox Advisor delivers plain-language verdicts to users, while Threat Triage pre-investigates alerts and Threat Hunt sweeps the organization. Unlike Abnormal Security's behavioral AI or Sublime Security's agentic automation, TRACE produces explainable verdicts suited to polymorphic, never-before-seen threats.
"Every generation of email security was built to recognize attacks it had seen before. That worked when attackers reused templates and infrastructure. It does not work when every attack is unique." — Alan LeFort, CEO
Inovia Leads Extension on Efficiency Signal
Inovia Capital led the extension with participation from Sorenson Capital, LaunchPod, Alumni Ventures, and former Mandiant CPO Chris Key. Investors cited the company's ability to reach incumbent-displacing capability with far less capital than peers. The round validates the shift toward reasoning-based detection as production deployments grew eightfold since the initial July 2025 seed.
Email Security Market Expands Amid AI Threats
The email security market stands between $5.89B and $8.1B in 2026 and is projected to reach $10.64B–$16.19B by 2031–2034 at a CAGR of 8.4%–12.57%. The broader AI in cybersecurity market is valued at $25.53B in 2026 and growing at 22% CAGR. Competitors include Proofpoint (acquired for $12.3B), Mimecast (acquired for $5.8B), Hoxhunt ($43.3M total raised), Abnormal Security, and Sublime Security.
Veteran Team Accelerates Enterprise Traction
CEO Alan LeFort brings 25+ years from Proofpoint, McAfee, and Intel Security. Co-founders Muhammad Rizwan (ex-FireEye) and Joshua Bass (ex-Google/Mandiant/Proofpoint) supply detection and product depth. Named customers include Orrick, Telenor, and Teays Valley Local Schools, with claims of over 2,000 threats stopped monthly and a sub-1% false positive rate.