Cybersecurity startup MokN raised $15 million [1] in Series A funding this month to develop its "Phish-Back" platform.

This investment marks a shift toward proactive deception in cybersecurity. By turning the tactics of phishers against them, the company aims to identify credential leaks before attackers can use them to penetrate secure networks.

The Phish-Back platform operates by deploying realistic decoy access points. These decoys are designed to lure attackers into attempting to use stolen credentials, which allows the system to capture the compromised data and alert the targeted organization [1]. This method enables companies to detect and respond to credential compromise earlier than traditional monitoring tools often allow [1].

The funding round, which closed in May 2026 [2], provides the capital necessary to scale the platform's deployment. The company intends to use the $15 million [2] to refine its decoy technology and expand its reach to organizations struggling with sophisticated phishing campaigns.

Traditional security measures typically focus on blocking incoming threats or detecting anomalies after a breach has occurred. MokN's approach creates a controlled environment where attackers reveal their presence and their tools by interacting with fake infrastructure [1]. This strategy shifts the burden of discovery from the defender to the attacker.

By capturing the specific credentials being used in these attacks, organizations can pinpoint exactly which accounts have been compromised and initiate immediate password resets, or multi-factor authentication audits [1]. This reduces the window of opportunity for an attacker to move laterally through a corporate network.

MokN raised $15 million in Series A funding this month to develop its "Phish-Back" platform.

The emergence of 'deception technology' like Phish-Back indicates a move away from purely reactive defense. By creating 'honeypots' specifically for credentials, firms can gain intelligence on the specific accounts being targeted in the wild, transforming a passive vulnerability into an active detection mechanism.