Customer Stories
How LangChain Stopped Thousands of AI Phishing Attacks
Learn how LangChain uses AegisAI to stop thousands of AI-generated phishing attacks, deployed in under 5 minutes.
LangChain is the leading open-source framework for building applications powered by large language models. With a large developer community and high-profile engineers and executives operating in the public eye, LangChain is one of the most visible companies in AI making it a prime target for sophisticated, AI-generated email attacks.
When Arthur Stromquist joined LangChain as Security and Compliance Manager, one reality was immediately clear: the company's public profile was a liability. Engineers, researchers, and founders regularly publish papers, speak at conferences, and engage on social media making their email addresses easy to find and exploit.
"A lot of our engineers are more publicly facing," Arthur explains. "Just given the nature of our company, they get a huge rate of phishing attempts sent to them." — Arthur Stromquist, Security & Compliance Manager, LangChain
The threats weren't garden-variety spam. Attackers were using AI to craft convincing, personalized messages, fake emails impersonating CEO Harrison Chase requesting gift cards, fraudulent contract attachments, and targeted spear-phishing aimed at engineers with production system access. The volume and sophistication were accelerating, and LangChain had no scalable, low-friction email security in place.
"We were getting a lot of phishing attempts. We get our classic Harrison Chase emails—our CEO asking for a gift card. We see those non-stop. We've seen fake contracts come in and quite a few things just like that." — Arthur Stromquist, Security & Compliance Manager, LangChain
Arthur reached out to Ryan, LangChain’s Head of IT, to evaluate options. After reviewing the landscape, including legacy vendors and newer entrants, they landed on AegisAI.
"Email protection is one of those gaps that a lot of companies can have," Ryan explains. "And it's the easiest attack vector to seal up. How you do it depends on what you choose and AegisAI presented us with an easy, low-friction implementation."
Ryan set up AegisAI in under five minutes. No professional services engagement, no lengthy configuration, no disruption to the team. Critically, they didn't write a single rule or tweak a single setting. It worked out of the box.
“Ryan set it up within five minutes. That’s it. It just works,” Arthur says. “If you just need something that’s easy to deploy, low touch, and that just works, AegisAI is great because it scales.”
“AegisAI presented us with an easy solution—less than five minutes to get it set up. And within a week, it had caught an astounding amount.” — Ryan, Head of IT @ LangChain
The Results: Thousands of Threats Caught Automatically
Within the first week of deployment, AegisAI began surfacing threats that the team had never had visibility into before. The breadth and sophistication of what was being flagged—and the intelligence provided about each attempt was eye-opening.
“I was astounded by all of the emails it was able to flag,” Ryan recalls. “The insights it gave us into the different threats that were coming after us, seeing exactly who’s being targeted, how often, and from where was incredible.”
For Arthur, the operational value goes even deeper. AegisAI doesn’t just block threats it provides the visibility needed to proactively educate and protect the most at-risk employees.
“With AegisAI, I can track who’s getting attacked and how much they’re getting attacked, and arm them to be protective of everything on their side,” he says. “We’ve found thousands of attempts.”
Within the first week, AegisAI began surfacing threats the team had never had visibility into. The breadth of what was flagged and the intelligence provided about each attempt changed how the security team operated.
What AegisAI detected at LangChain:
For Arthur, the value goes beyond blocking threats. AegisAI provides per-user attack analytics, giving the security team visibility into who is being targeted most—and the ability to proactively educate those employees.
"With AegisAI, we can track who's getting attacked and arm them to be more protective of everything on their side," Arthur says. "We found thousands of attempts."
Perhaps the most telling measure of success is how little the LangChain team thinks about email security now. For a lean, fast-moving company, removing an entire category of operational overhead is significant.
“We very rarely have to work on email security from this angle anymore,” Arthur says. “We have AegisAI protecting us, so we can go focus on other tasks.”
Ryan echoes this sentiment when evaluating AegisAI against the broader vendor landscape, including legacy providers and newer competitors operating in the same space.
“There are a lot of great vendors out there. But AegisAI is just mostly frictionless. It’s budget-friendly, and it’s great to work directly with the founders, product people, and engineers. We have access to a lot of great people at AegisAI. So I think it’s just a clear winning choice for us.” Ryan, Head of IT @ LangChain
For an AI company that lives at the frontier of what’s possible with Large Language Models, choosing a security partner required more than checkbox compliance. It required a vendor that could match both the sophistication of the threat and the pace of the company.
Protect your team the way LangChain does, book time with us and get a free demo.
