newsfilter.io

Software - Infrastructure — industry outlook

  • Period: 2026-08-30 to 2026-09-20
  • Events: 71
  • Generated: 2026-09-20T06:30:00.003Z

Runtime Governance and the Shift to Agentic Security

The industry consensus is that AI security has moved from a preventative to a "runtime governance" imperative, with companies redefining value around "machine-speed resilience" and the management of non-human identities. The breach timeline has collapsed from days to seconds due to autonomous agentic attacks, forcing a transition to zero-standing-privilege models and real-time remediation. CrowdStrike (CRWD) expects 100% adoption of its AI Detection and Response (Guardian) solution as a mandated baseline, citing a structural moat derived from 7 trillion daily security events and 15 years of proprietary data that competitors cannot replicate via synthetic data. Zscaler (ZS) counters with a dual vantage point of 60M endpoints and network telemetry, while SailPoint (SAIL) and Okta (OKTA) highlight the frontier of governing "non-human identities," with SailPoint reporting AI-driven ARR exceeding $70M and Okta noting agentic deals transitioning from one-year to multi-year structures. Netskope (NTSK) distinguishes its offering via "Layer 8 granular proxy" capabilities capable of inspecting API-level traffic, with 80% of deals reaching the Proof of Value stage, and operates 120+ data centers across 80+ regions to support local processing requirements alongside MongoDB (MDB) and Zscaler (ZS). Palo Alto Networks (PANW) forecasts a 6x increase in network traffic over five years, necessitating a "whole new stack" for agentic security and a shift toward "token flow" and observability as 80–90% of new data centers become single-tenant. Tenable (TENB) integrates frontier models like Anthropic's Mythos to automate patching, citing an "avalanche of vulnerabilities" with 12,000 new CVEs introduced in August alone, while Rubrik (RBRK) evolves from backup to a comprehensive data, identity, and agentic security platform, with its identity business reaching $50M ARR in under a year.

Infrastructure Licensing, Data Sovereignty, and Agentic Commerce

A distinct theme involves the monetization of foundational infrastructure to support "agentic commerce" and data sovereignty, with companies positioning themselves as the rails for AI agents to execute transactions and manage data. MongoDB (MDB) drives growth via Atlas Vector Search, outpacing general company growth, and emphasizes "run-anywhere" hybrid deployments to satisfy sovereign data requirements, seeing double-digit growth in its self-managed segment. Rezolve AI (RZLV) claims to be the "only game in town" for deployed agentic commerce infrastructure, citing a Google deployment of 100TB across 10 blockchain networks and projecting billions in revenue from licensing agreements, expecting gross margins to improve from 48.9% to over 90% as the mix shifts from services to software. Dlocal (DLO) and Paymentus (PAY) are expanding into AI-specific verticals; Dlocal (DLO) predicts AI labs and agents will require local payment infrastructure in emerging markets over the next 2–3 years, while Paymentus (PAY) scales its "Billio" platform to prevent disintermediation, targeting a $6B revenue scenario if AI agents automate bill identification. Cloudflare (NET) identifies "agentic inference" as the next major growth wave, expecting transaction volumes to surge from thousands to tens of millions of TPS, and is launching initiatives including a Cloudflare Wallet for agent transactions. F5 (FFIV) notes that digital sovereignty initiatives in Europe and Asia Pacific are driving renewed data center capacity build-outs, while Ambr (AMBR) is withdrawing guidance to pivot to a specialized agent model (Embraer, Mia) until new operating history is established.

Financial Trajectories, Consumption Models, and Capital Allocation

Companies are moving from seat-based to consumption-based models to monetize AI usage, creating divergent financial outlooks based on macro headwinds and monetization timing. Zscaler (ZS) reports non-seat-based ACV growth exceeding 100% YoY driven by API and data volume, while CrowdStrike (CRWD) and UiPath (PATH) introduce token-based or outcome-based pricing, though CrowdStrike (CRWD) faces scrutiny on managing "runaway spend." MongoDB (MDB) raised full-year revenue growth to 21–23% and operating margin to ~21%, with 11 Labs scaling to $500M+ ARR after switching to its architecture, while SailPoint (SAIL) targets $100M AI ARR by FY2027 and ~$800M revenue from its "agentic" segment by FY2029. CrowdStrike (CRWD) accelerated ARR targets to $10B by FY30, targeting FCF margins of 34–38% by FY29, whereas UiPath (PATH) guides conservatively due to $20M in FX headwinds for FY2027. Netskope (NTSK) raised full-year revenue guidance to $888–$892M, but notes AI security revenue realization may be delayed by 6–12 month procurement cycles. F5 (FFIV) raised revenue growth guidance to 9–10%, expecting software growth to accelerate to double-digits in FY27, while Five9 (FIVN) projects AI run rate exceeding $150M (78% YoY growth) and an AI CX TAM doubling by adding ~$24B. F5 (FFIV) and CrowdStrike (CRWD) prioritize share buybacks, committing to returning 50% of FCF, while Paymentus (PAY) and Dlocal (DLO) commit to 30% for dividends.

Platform Consolidation, Market Expansion, and Strategic Execution

The sector is shifting from "AI as an efficiency tool" to "AI as a revenue driver" through platform consolidation, where customers reduce vendor footprints from 30–40 to single platforms, and the integration of AI directly into core platforms to expand TAM. Toast (TOST) expects new TAMs to double to ~200M ARR driven by AI services like "Toast IQ Grow," while Okta (OKTA) and CrowdStrike (CRWD) launch integrated "security fabrics." Five9 (FIVN) argues that point solutions achieving 30–40% containment are insufficient compared to platforms offering routing for >40% containment, and Tenable (TENB) anticipates convergence between "build-time" and "run-time" security. MongoDB (MDB) notes while analytical players encroach on OLTP, they remain "playground" threats for mission-critical data. However, execution risks persist: Five9 (FIVN) and SailPoint (SAIL) note the risk of "agent compression" and the difficulty of converting POCs to contracts, while Tenable (TENB) acknowledges the risk that autonomous remediation could fail deterministically. Oracle (ORCL) and Okta (OKTA) are launching specific agentic offerings like NetSuiteNext and Agentic Identity, and UiPath (PATH) is moving toward outcome-oriented vertical solutions. Despite high confidence from CrowdStrike (CRWD) and MongoDB (MDB) on near-term monetization, Ambr (AMBR) and Netskope (NTSK) emphasize that AI revenue realization requires new operating history or longer cycles.