Securing the $18.4B Open Inbox
Content filters are fundamentally obsolete in the era of generative AI. HumanMail introduces a stateless, cryptographic Proof-of-Personhood standard that halts bot swarms and executive wire fraud at scale.
AI Phishing Surge
Surge in AI spear-phishing since LLMs became ubiquitous. Generative models generate indistinguishable, hyper-personalized outreach for fractions of a cent, rendering heuristic filters obsolete.
BEC Wire Fraud
Lost annually to executive email impersonation and business email compromise (FBI IC3). HumanMail cryptographically binds sender identity to government KYC credentials, eliminating display-name spoofing.
Total Addressable Market
Global enterprise email security and digital identity verification TAM across 4.5 billion active email accounts transitioning toward zero-trust authentication.
Interactive Enterprise ROI Model
Quantifying productivity reclaim and bottom-line savings from eliminating unvalidated spam
Competitive Battlecard: The Only Deterministic Identity Layer
Gateways and AI email security judge what a message looks like after it arrives. HumanMail proves who sent it, and makes sending at scale cost real human identities.
| Key Capability | Gateways (Proofpoint / Mimecast) | AI Email Security (Abnormal / Sublime) | BIMI + VMC | DMARC / SPF / DKIM | HumanMail (HMP/2.0) |
|---|---|---|---|---|---|
| Stops AI spear phishing | Content filters outpaced by AI | Probabilistic behavior models | Brand logos only | Domain-level only | Cryptographic proof of personhood |
| Prevents executive impersonation | Display-name alerts | Flags anomalies; fooled by compromised vendors | No per-person identity | From header spoofable | Verified identity bound to sender |
| Verdict type | Score-based | ML probability | Deterministic (brand only) | Deterministic (server only) | Deterministic signature check |
| Anti-bot sending limits | IP rate limits only | None | None | None | Capped 50 verified/day per human |
| Replay attack immunity | None | None | None | DKIM replays succeed | Sliding nonce cache |
| Latency & dependencies | Cloud proxy, 150ms+ | Post-delivery API scan | DNS lookup | DNS lookup | 0.21 ms local, no cloud call |
| Works for individual employees | Yes | Yes | Large brands, $1,500+/yr per domain | Domain-level | Every verified person |
AI email security is strong at spotting suspicious behavior, but every verdict is a probability. HumanMail adds a yes-or-no proof that complements it.
Coexistence, not rip-and-replace
HumanMail plugs into existing Microsoft 365 and Google Workspace stacks alongside current gateways and AI filters. Verified mail gets a cryptographic fast-pass; everything else flows through the tools buyers already own.
A signature check at the mail server lets verified mail skip costly scanning, cutting load on existing filters.
Exchange transport rules and a Google Workspace add-on. No mail routing changes, no gateway removal.
Verified-sender results feed Abnormal, Sublime or Proofpoint as a high-confidence input, reducing false positives.
The Toughest Questions, Answered
Start with a zero-risk shadow audit: verified mail gets priority placement while nothing is blocked. Quarantine of risky unverified mail is phased in as adoption grows.
Enterprises issue keys automatically at onboarding through SCIM and Entra ID. Privacy-sensitive senders can prove they are human without revealing their name.
High-value or unusual outbound mail requires a fresh passkey tap on the person's own device, so a stolen session alone can't send as them.
Series Seed Investment Round: $3.5M
Accelerating IETF RFC protocol standardization, turnkey Microsoft 365 and Google Workspace connectors, and SOC 2 enterprise direct sales.
Publishing HMP/2.0 specifications to the IETF for zero-round-trip Proof-of-Personhood email header interoperability across global MTAs.
One-click Exchange Online Protection (EOP) transport rules and Google Workspace Marketplace add-on for seamless enterprise rollout without MX record migration.
Targeting Fortune 500 financial institutions, healthcare providers, and legal firms subject to wire fraud and executive impersonation liabilities.