Case 01
Platform Overview
Specialized agents for every inbox.
AegisAI connects to Microsoft 365 or Google Workspace through the API, judges every message by its intent, and removes what fails from every mailbox it reached.
SOC 2 Type IINo MX record changeConnects in about 5 minutes1.9s median time to verdict
See every verdict, start to finish
How the platform works
What does AegisAI check that a filter does not?
Signature and reputation checks miss AI-written lures from authenticated or compromised accounts. AegisAI reads what each message asks the reader to do, and whether that fits the sender.
01 Connect
Read mail through the API
Connect Microsoft 365 or Google Workspace in five minutes. No MX change, no gateway.
02 Investigate
Four agents per message
Reputation, intent, policy and headers are checked in parallel. Links and attachments are opened in a sandbox.
03 Decide
One verdict, with reasons
Every verdict comes with a confidence score and plain-language evidence. Median time: 1.9 seconds.
04 Act
Remove it everywhere
Convicted mail is pulled from every mailbox, forwards included. Your analyst gets the summary.
Threat protection
Catch the email, then watch the account it targeted.
Five features cover the path from the first email to a compromised account. All five act on the same verdict.
Inbound email security
Judges each message by what it asks for, not by whether it matches a known attack.
How inbound email security works3 in 10confirmed phishing emails cleared native Gmail and Microsoft filters (Q3 2026)
BEC attack prevention
Flags the invoice reply that changes bank details inside a real vendor thread.
How BEC attack prevention works33 of 33vendor-invoice BEC emails caught in one campaign against Markforged
Phishing prevention
Opens every link, attachment and QR code in a sandbox and reads the page at the end.
How phishing prevention works3 of 5real attacks in the Q3 2026 report hosted the credential harvest on legitimate infrastructure
Account takeover protectionEarly access
Watches sign-ins and mailbox rules after MFA has already passed.
How account takeover protection worksReview-onlytoday. Automated session revocation is planned next.
Graymail and spam control
Moves newsletters and bulk mail out of the inbox. There is no quarantine queue to review.
How graymail and spam control works90%fewer false positives than rule-based filtering, measured in customer environments
Data and workforce
Use the same connection for outbound mail, new apps and training.
The API connection that reads inbound mail also sees outbound mail, sign-up emails and clicks. Four more features run on it, with no second install.
Outbound email DLPEarly access
Flags payroll files, API keys and customer data sent to personal or unknown addresses.
How outbound email DLP worksGoogle WorkspacePre-delivery blocking is not available during early access
Shadow IT and AI discovery
Finds the AI and SaaS apps staff sign up for, from the welcome emails those apps send.
How shadow IT and AI discovery works1 in 5organizations reported a breach caused by shadow AI (IBM, 2025)
Simulation and training
Builds simulations from lures AegisAI caught in your own mail.
How simulation and training works21% vs 5%of users trained in the last 30 days reported phishing, versus the base rate
AI red teaming
Writes spear phishing aimed at your staff and sends it only after your team approves the run.
How AI red teaming works54%click-through on fully AI-written spear phishing, versus 12% for generic (Heiding et al., 2024)
Deployment
Run it beside your current stack for five days before you change anything.
Connect a tenant in monitoring mode and compare what AegisAI finds with what your current tools caught. Nothing is removed until you grant write access.
Flip the switches to see each part work
Removal access
Starts read-only in monitoring mode. Removal needs write access that admins can grant or revoke.
Simulate an outage
Mail keeps flowing. Detection pauses until the service returns.
Keep your gateway
Runs beside an existing gateway or Defender, or on its own.
Per-feature settings
Audit-log access
Account takeover. Reads sign-ins and mailbox activity.
Alert instead of audit
Outbound DLP. Audit mode tests a policy on live mail.
Okta cross-check
Shadow IT. Checks apps against identity records.
Require training
Simulation. Set per campaign after a click.
Approve this run
Red team. Nothing runs until your team approves it.
Out of band. AegisAI reads mail through the Microsoft 365 or Google Workspace API after delivery. No MX record change, and about five minutes to connect.
Live mail flowLook-alike vendor, 3 mailboxes
SenderLook-alike vendor
Gateway or Defender
Mailboxes
FinanceUpdated bank detailsFlaggedRemovedNot inspected
Accounts payableUpdated bank detailsFlaggedRemovedNot inspected
CEO officeUpdated bank detailsFlaggedRemovedNot inspected
API, after delivery
AegisAI detection runningAegisAI detection pausedMonitoring, read-onlyRemoval, write access
One API connection powers all nine features
InboundBECPhishingGraymailAccount takeoverOutbound DLPShadow ITSimulationRed team
The first four can remove or sort mail once write access is granted.
What each feature does with these settings
Account takeover
Outbound DLP
Shadow IT
Simulation
Red team
Microsoft 365
Google Workspace
Okta
Entra ID
SOC 2 TYPE II
Account takeover protection needs audit-log access, and Entra ID P1 for sign-in reports on Microsoft 365.
Better together
How does one finding change the next verdict?
Every feature reads the same mail and identity data. A finding in one becomes evidence for the others. Three cases show the chain.
Illustrative scenarios. Names and details are fictional.
Case 02
A phishing lure becomes training
Case 03
A new AI tool spreads
Results
What customers measured on their own mail.
300+phishing and impersonation emails their other tools missed, found in the first scan
Read the Mesh story
Read the Mesh story <30sto the first threat finding, after a deployment that took under 5 minutes
Read the LangChain story
Read the LangChain story Next step
Run AegisAI on your own mail.
Connect a tenant in monitoring mode. In five days you see what your current stack let through.
Book a demo