brianletort.ai
All issues

The Application Layer

Issue 02 · Week 22 of 2026.

/Weekly read/~7 min read/Public sources onlyDownload brief

The Big Read

Two earnings prints and one MCP acquisition turned the agent-control-plane thesis into a billion-dollar line item.

The thesis this issue defends

W22 was the week the application layer stopped arguing about whether agentic enterprise software is real and started arguing about who owns the control plane. Salesforce (FY27 Q1, May 27) reported ~$1.2B Agentforce ARR (+205% YoY) and ~$3.4B combined AI + Data 360 ARR, with Benioff positioning a new 'Agentforce Coworker' surface inside every search bar as the quarter's headline. The same day, Snowflake printed $1.33B product revenue (+34% YoY, its strongest sequential dollar growth ever) and signed to acquire Natoma, an enterprise MCP platform — the cleanest in-window proof of the 'data cloud as agent control plane' read: the data platform is racing to own governed agent-to-tool actions, not just storage. Underneath the incumbents, the insurgent cohort kept compounding: Cognition raised >$1B at a $26B post-money (~2.5x in eight months) on a claimed ~$492M run-rate, and a pure-play agent-governance startup (Geordie) raised Europe's largest cybersecurity Series A to be 'air traffic control' for enterprise agents — the same week two incumbents shipped their own agent-action layers. The decision for buyers: agent governance is now a buy-vs-bundle question that belongs on this quarter's roadmap, and when the leading enterprise-search vendor (Glean, crossing $300M ARR) re-pitches itself as a way to cut your token bill, AI-spend overruns have become the dominant 2026 procurement pain. Lead every renewal conversation with retrieval/governance economics, not seat counts.

Vertical movements

Vertical packages shipped.

3 vertical packages shipped this period.

Industry- or function-specific application packages that landed this period — from frontier labs, open-weights labs, and the insurgent vertical-AI startup cohort. Each entry names the vertical it serves and the decision implication for buyers of the displaced tier.

  • /Anthropic/Engineering/Frontier lab/Usage

    Claude Code Dynamic Workflows + Opus 4.8 Fast Mode

    Claude Code gains a workflow runtime that writes orchestration scripts spawning up to 1,000 subagents (16 concurrent) in one session, shipped with a 3x-cheaper Opus Fast Mode

    Engineering leaders should re-scope what counts as a single engineer-session this quarter: work previously planned in quarters (large migrations, security audits, dead-code sweeps) is now plausibly a multi-day agent run, so re-baseline headcount and contractor asks before the next budget cycle. It ships disabled-by-default on Enterprise, so platform owners must consciously opt in — which is itself the governance decision to make now.

    Anthropic blog 'Introducing dynamic workflows in Claude Code', MarkTechPost

  • /Cohere/Other/Open weights/

    Command A+ (command-a-plus-05-2026)

    First fully Apache-2.0 Cohere frontier model: 218B-param sparse MoE (25B active), native citation grounding, runs on 2x H100 for sovereign/on-prem agentic workloads

    CIOs in regulated or data-residency-bound functions should add a true open-weight, self-hostable option to this quarter's agent shortlist — Apache 2.0 (no revenue caps or use restrictions) plus 2-GPU deployability changes the build-vs-buy math wherever data cannot leave a hosted frontier API. Window-edge (May 20), included as the period's open-weight vertical-runtime signal; native citations directly target the audit/traceability blocker that stalls regulated rollouts.

    Cohere blog 'Introducing Command A+', VentureBeat

  • /Microsoft Research/Operations/Open weights/

    Fara 1.5 + MagenticLite agentic stack

    Open-weight computer-use model family (4B/9B/27B on Qwen 3.5) plus a self-hostable browser-agent harness (MagenticLite) and QEMU sandbox; 27B records 90%+ on Online-Mind2Web

    Vertical-function heads automating browser and back-office workflows should pilot small open computer-use models now rather than wait for a hosted CUA SKU — a 9B model you control on owned infra collapses the cost and data-exposure objections that block ops automation, and the open harness means the orchestration layer is not vendor-locked. Founders building computer-use products should treat the small-model floor as having just risen materially.

    Microsoft Research 'Fara1.5', Microsoft Foundry Labs May 2026 roundup

Incumbent responses

How the SaaS estate is answering.

2 incumbent SaaS responses worth tracking.

Established SaaS vendors reacting to the agentic shift — product launches, repositioning, earnings color, partnerships, and restructuring. The system-of-record incumbents defending their turf against systems of action.

  • /Salesforce/Agentforce / Data 360 + Agentforce Coworker

    Record FY27 Q1: Agentforce ARR ~$1.2B (+205% YoY), combined AI+Data 360 ARR ~$3.4B (+200% YoY), 3.8B Agentic Work Units delivered (+111%); Benioff names 'Agentforce Coworker' the quarter's biggest thing

    SaaS investors should treat Agentforce as having crossed from narrative to billion-dollar line item — the question now shifts to net-new vs cannibalized Sales/Service Cloud seats, so press for organic-acceleration detail in H2. CIOs on Enterprise/Unlimited get Coworker in beta at no new contract, so the action this week is to assign an owner to govern it before shadow adoption outruns policy.

    Salesforce IR 'Record First Quarter Fiscal 2027 Results'

  • /Snowflake/Cortex / Snowflake Intelligence + Natoma (MCP) acquisition

    FY27 Q1 product revenue $1.33B (+34% YoY, strongest sequential dollar growth in company history); FY guide raised to ~$5.84B; signed to acquire Natoma (enterprise MCP platform) and committed $6B/5yr to AWS

    This is the cleanest in-window proof of the 'data cloud as agent control plane' thesis: data-platform owners should read the Natoma/MCP buy as Snowflake racing to own governed agent-to-tool actions, so evaluate whether your MCP and governance layer is being decided by your data vendor's roadmap. Investors get a data point that AI is pulling core-platform consumption, not a separate SKU — the more durable revenue shape.

    Snowflake FY27 Q1 results (SEC EDGAR), Morningstar

Startup signals

The insurgent vertical cohort.

5 startup signals this period.

Vertical-AI startups raising capital, winning named customers, or shipping general-availability product. The cohort that sits between frontier labs moving down the stack and SaaS incumbents defending their record-of-truth.

  • /Cognition (Devin)/Engineering/$1B (at $26B post-money)

    Raised >$1B at $25B pre / $26B post (Lux, General Catalyst, 8VC), ~2.5x up from $10.2B eight months prior; claims ~$492M annualized run-rate with Devin enterprise usage +50% MoM for six months

    Investors should mark autonomous-SWE as a two-horse capital race where price is now gating on revenue velocity, not promise — the $492M run-rate at +50% MoM is the number to verify, since it underwrites the 2.5x markup. Engineering leaders should benchmark Devin against in-house agent stacks this cycle: enterprise references (Goldman, Mercedes, NASA) mean it is now a defensible procurement choice, not a science project.

    TechCrunch, Bloomberg

  • /Glean/Other/$300M ARR milestone

    Announced crossing $300M ARR (3x in ~15 months), Fortune 500 count nearly doubled YoY; repositioned around cutting customers' AI/token bill via its enterprise context graph

    The decision signal for CIOs is the new pitch, not the number: when the leading enterprise-search vendor sells itself as a token-cost reducer, it confirms AI-spend overruns are the dominant 2026 procurement pain — so demand a retrieval layer that lowers per-query token consumption before approving more raw model spend. Investors should note Glean flags the figure is partly consumption-based, so discount the 'ARR' label accordingly.

    TechCrunch, Glean (Business Wire)

  • /Geordie AI/Security/$30M Series A

    Raised $30M Series A led by Balderton (~$180M post-money), reported the largest cybersecurity Series A in Europe to date; positioned as 'air traffic control' for enterprise AI agents

    CISOs should treat agent governance as a now-fundable, now-buyable category rather than a homegrown afterthought: the same week two incumbents (Salesforce, Snowflake/Natoma) shipped agent-action layers, a vendor-neutral pure-play raised at $180M to govern agents across vendors — so the buy-vs-bundle question (vendor-native governance vs independent control plane) belongs on this quarter's roadmap.

    Fortune (exclusive), Tech.eu

  • /Solstice/Marketing/$21M Series A

    AI-native pharma marketing/MLR startup raised $21M Series A (Transformation Capital); claims concept-to-MLR-submission in hours and review cycles cut from ~3 months to ~10 days across 12+ pharma cos

    Vertical-function heads in regulated marketing and compliance should pilot workflow-specific agents where the value is cycle-time on a liability-heavy approval gate — regulatory review as the wedge is the template that wins budget faster than horizontal copilots. Vertical-AI founders should note the funded moat thesis: deep integration into a specific compliance workflow, not raw model quality.

    TechFundingNews

  • /LightTable/Operations/$22M Series A

    AI-native pre-construction 'center of intelligence' raised $22M Series A (Innovation Endeavors); since stealth has reviewed 20M+ sq ft of construction docs and $3.5B in project costs

    Investors and founders should read this as vertical-AI capital broadening past the obvious legal/CX/healthcare lanes into document-heavy physical-economy workflows — the pattern to underwrite is any high-stakes, document-dense, deadline-driven process an agent can compress. For operators in AEC and similar industries, the existence of a funded specialist is the cue to evaluate now rather than wait for a horizontal suite to add the feature.

    LightTable (GlobeNewswire), Markets Insider

Pricing shifts

Seat to outcome, one move at a time.

1 pricing-model shift announced.

Public pricing-model shifts inside the window. The 'data owns the application' thesis predicts a structural move from seat-based to outcome-based pricing across SaaS; tracking the rate of change is itself a market signal.

  • /Zendesk

    Seat-basedOutcome-based

    At its Relate conference Zendesk reportedly moved to charge per verified AI-resolved ticket ($1.50 committed / $2.00 pay-as-you-go), billing only resolutions confirmed by an AI evaluation model — sitting in a wider CX outcome-pricing spread (Intercom Fin ~$0.99, HubSpot ~$0.50, Agentforce ~$2.00). Window-edge and secondary-sourced; treat the exact figures as directional.

    AgentMarketCap (secondary), corroborating context from The SaaS Library

Vertical scorecard

Who leads each vertical.

8 verticals · leaders as of May 30, 2026.

A snapshot of leader-vs-challenger by vertical. Useful for procurement shortlists when matching workload to vendor cohort. Rows refresh weekly as leadership shifts.

  • Legal

    Leader: Harvey

    Challenger: Legora

    No in-window legal move; category leadership steady as procurement attention shifts to agent governance.

  • Healthcare

    Leader: Abridge

    Challenger: Suki

    Ambient clinical documentation remains the proven wedge; quiet week, watch for funding follow-through.

  • Sales

    Leader: Salesforce Agentforce

    Challenger: 11x

    Agentforce ARR ~$1.2B (+205% YoY) hardens the incumbent's lead over autonomous-SDR insurgents.

  • Support

    Leader: Sierra

    Challenger: Decagon

    Outcome-based CX pricing (Zendesk, Intercom, HubSpot) is compressing the category toward pay-per-resolution.

  • HR

    Leader: Workday

    Challenger: Ema

    System-of-record incumbents still lead; agentic HR challengers depend on data-access concessions.

  • Engineering

    Leader: Cognition (Devin)

    Challenger: Anthropic Claude Code

    Cognition's $26B round + Claude Code Dynamic Workflows make autonomous SWE the most-capitalized vertical.

  • Security

    Leader: Vendor-native (Salesforce, Snowflake)

    Challenger: Geordie

    Agent governance splits into bundled vs independent control plane after Geordie's $180M Series A.

  • Operations

    Leader: Snowflake Intelligence

    Challenger: Microsoft Fara / MagenticLite

    Data-cloud control plane (Natoma/MCP) vs self-hostable open computer-use stacks for back-office automation.

Architecture watch

Patterns to track.

4 cross-vendor patterns reshaping the application layer.

Patterns that crossed multiple vendors this period. One pattern, several exemplars, what it changes for procurement, cost, or vendor-risk posture.

  • Data cloud as the agent control plane

    Snowflake + Natoma (MCP)Salesforce Data 360Databricks Mosaic AI

    Data platforms are acquiring and shipping the governed agent-to-tool action layer, not just storage and retrieval. Snowflake's Natoma (MCP) buy makes the play explicit: own the standard by which agents take actions against enterprise data. Buyers should check whether their MCP and governance posture is being decided by default by their data vendor's roadmap rather than chosen.

    Snowflake FY27 Q1, Salesforce FY27 Q1

  • Agent governance becomes a buyable category

    Geordie ($180M)Salesforce Agentforce controlsSnowflake Horizon

    In one week, two incumbents shipped agent-action layers and a vendor-neutral pure-play raised Europe's largest cybersecurity Series A to govern agents across vendors. Governance is no longer a homegrown afterthought; it is a procurement line with both bundled and independent options. The buy-vs-bundle decision now belongs on the quarterly roadmap, not the backlog.

    Fortune, Salesforce IR, Snowflake IR

  • Outcome-based pricing crosses CX

    Zendesk (per resolution)Intercom FinHubSpot AISalesforce Agentforce

    Customer-experience vendors are converging on pay-per-verified-resolution pricing, with an AI evaluator gating what counts as billable. The spread ($0.50-$2.00 per resolution) is now wide enough to model directly against deflection rates. CIOs should renegotiate CX renewals on resolution economics, not seat counts, and demand transparency on how the resolution evaluator works.

    AgentMarketCap, vendor pricing pages

  • Autonomous SWE as a capital race

    Cognition ($26B)Anthropic Claude Codecoding-IDE incumbents

    The autonomous software-engineering category is consolidating into a small number of heavily capitalized players priced on revenue velocity. Cognition's 2.5x step-up in eight months on a claimed ~$492M run-rate sets the comp. Engineering leaders should benchmark external agents against in-house stacks now, because the buy option is maturing faster than most internal platforms.

    TechCrunch, Bloomberg, Anthropic

Watchlist

On the radar next.

4 catalysts to watch, starting Jun 2026.

Forward catalysts in the next 7–30 days that would change the read materially — earnings prints, conferences, expected product launches, regulatory decisions, and competitive responses.

  • Jun 2026

    Snowflake / Natoma deal close + MCP governance details

    How Snowflake exposes governed agent actions will set the reference pattern for whether the data cloud or an independent layer owns enterprise agent control.

  • Jun 2026

    Cognition $492M run-rate verification

    The number underwrites the $26B markup; any third-party confirmation or contradiction materially re-rates the autonomous-SWE category.

  • Jun 2026

    Workday / ServiceNow FY-quarter AI color

    Remaining system-of-record incumbents report soon; their agentic-ARR disclosures will show whether Agentforce's +205% is category-wide or Salesforce-specific.

  • Jun 2026

    CX outcome-pricing standardization

    Watch whether more support vendors adopt per-resolution billing and how resolution evaluators are audited, since that determines real buyer cost exposure.

Edits this issue

  • Second weekly Application Layer issue; added a 'Data cloud as the agent control plane' architecture-watch pattern anchored to the Snowflake/Natoma MCP acquisition.
  • Refreshed the vertical scorecard for engineering (Cognition vs Claude Code) and security (vendor-native vs Geordie) after this week's moves.

About The Application Layer

A weekly read on the layer above the model — vertical packages from frontier labs, incumbent SaaS counter-attacks, vertical-AI startup signals, and pricing-model shifts. Sibling to The AI Stack Weekly (the cross-stack flywheel) and The Model Pulse (the model layer).

Authorship and sources

Compiled from public vendor announcements, SEC filings, earnings releases, conference coverage, and reputable trade press. Written by Brian Letort. Independent analysis. Not investment guidance.

Operate. Publish. Teach.