Databricks Just Made Security an Infrastructure Decision
The Stack Weekly: By moving threat detection onto its data lakehouse, it turned a vendor choice into a platform question
This Week’s Strategic Signals for B2B AI & SaaS Executives
Capital & KPIs: Databricks agreed on June 16 to buy Panther, pulling the security operations center onto its data lakehouse.
Enterprise Buyer Behavior: Enterprises entered 2026 funding artificial intelligence and security by squeezing existing software, with formal consolidation targets now standard.
Product & AI Bets: Intercom charges 99 cents per resolved conversation while Zendesk layers AI fees onto seats, exposing the cost split.
Moats & Models: Gartner expects 40% of enterprise software spend to shift off seats by 2030, and procurement is already pricing it.
Some sections also include ‘other signals on our radar.’ Write back and let us know if you’d like to see more details on any of those.
The Stack is a weekly intelligence brief for B2B AI & SaaS executives, delivering high-impact developments shaping the B2B AI and software space: what happened, why it matters, and what to do about it. It is designed for product, engineering, GTM, marketing, sales, partnerships, and corporate strategy teams at SaaS companies, AI labs, and platform vendors. Each issue distills complex shifts into decision-grade insight.
The Stack is weekly, other Paid subscriber benefits include monthly deep-dives, quarterly trackers, and Premier Plan subscribers have Analyst Access.
1. Capital & KPIs
Databricks Acquires Panther to Build the Security Lakehouse
What Happened
Databricks agreed on June 16, 2026 to acquire Panther Labs, an artificial intelligence security operations center (SOC) platform, at its Data and AI Summit. Financial terms were not disclosed. Panther was last valued at $1.4 billion after a $120 million Series B in 2021, with backers including Snowflake Ventures and Coatue. This is Databricks’ third security acquisition, after Antimatter and SiftD.ai, and advances its security lakehouse thesis of unifying security and business data for agentic threat detection. Databricks, valued at $134 billion, is positioning against legacy security information and event management (SIEM) vendors Splunk, now owned by Cisco, and CrowdStrike. Anthropic is a Panther customer.
Why It Matters
For corporate development and strategy leaders, this is a direct move against both the legacy SIEM market and the generation of standalone artificial intelligence SOC startups. Databricks is using data platform scale to argue that security data belongs on the same lakehouse as business data, which positions data infrastructure platforms, rather than niche security vendors, to win the agentic security layer in the enterprise. For procurement leads weighing SIEM replacement, it introduces a credible integrated alternative and reshapes the shortlist.
Implications
Corporate development teams at Snowflake and other data platforms may find the security category reclassified from an adjacent opportunity into a defensive necessity, because tying detection to the data layer rather than to a standalone product changes what any future security acquisition has to clear internally.
Chief information security officers evaluating SIEM replacement may face a new coordination problem, since the decision now sits jointly with the data platform owner once detection runs on the same infrastructure the analytics organization already governs, blurring the security budget and the data budget.
Founders of standalone artificial intelligence SOC startups may see exit paths narrow to a handful of data platform buyers, because the claim that security data belongs on the general lakehouse removes the rationale for an independent security data layer and concentrates acquirer demand.
Private equity sponsors holding legacy SIEM assets may find hold-period assumptions under pressure, since the agentic-detection framing reprices the per-ingest licensing model those investments were underwritten against.
Chief information officers may find that consolidation logic once confined to application software now reaches the security stack, which could move tool rationalization out of the security chief’s discretion and into the cross-functional program finance already runs elsewhere.
Other Capital & KPIs Signals on our Radar:
Anthropic and OpenAI move toward public listings
Anthropic confidentially filed a draft Form S-1 with the Securities and Exchange Commission on June 1, 2026, days after closing a $65 billion Series H at a $965 billion post-money valuation, surpassing OpenAI. Its annualized revenue run rate reached roughly $47 billion in May. OpenAI, last valued at $852 billion, is reported to be preparing its own confidential filing, with a debut described as later in 2026. The filings follow the Entrata and Liftoff offerings covered in our June 1, 2026 issue. A public S-1 would disclose audited revenue, gross margin, and compute cost detail for the first time.
We regularly publish insights that go beyond reporting to help B2B AI and SaaS leaders make informed decisions as expectations, technology, and market dynamics continue to evolve.
2. Enterprise Buyer Behavior
Vendor Consolidation Becomes a Tracked Target, Not a Sentiment
What Happened
Enterprise Technology Research data published in 2026 shows calendar year 2026 information technology budget growth of 4.6 percent, up from 3.7 percent in 2025, with the increase concentrated in artificial intelligence and security while several traditional software categories show net spending declines. Among the minority cutting spend, vendor consolidation and staffing are the leading levers. A Gatekeeper survey reported by Digital Chiefs found 68 percent of technology leaders actively shrinking their vendor portfolios, targeting roughly 20 percent fewer suppliers. Zylo’s 2026 index put the average enterprise portfolio at 305 applications with license waste near $19.8 million a year.
Why It Matters
For commercial and sales leaders, this is a selective budget environment, not a soft one, and artificial intelligence and security are being funded by squeezing existing software lines. New entrants selling into the enterprise in the second half of 2026 face a dual hurdle: displacing a named vendor while surviving a cross-functional committee of finance, information technology, security, and legal that now carries formal rationalization targets. This extends the dynamic from our May 20, 2026 deep dive on incumbents using procurement to strangle standalone AI, and our June 4, 2026 deep dive on SAP absorbing the procurement trigger.
Implications
Commercial leaders at point-solution vendors may find the renewal conversation has moved from a single chief information officer sponsor to a cross-functional rationalization committee, which means the relationship equity built with one champion may no longer decide the outcome.
Chief financial officers running consolidation may create an accountability problem they then own, because a formal 20 percent reduction target converts software rationalization into a tracked operating metric, so a missed number becomes a finance failure rather than an information technology preference.
Founders selling net-new software may face a displacement-first buying posture in which the first question is what the tool replaces rather than what it adds, shifting the burden of proof onto incumbency rather than capability.
Customer success organizations may absorb consolidation risk that used to sit with sales, since retention now turns on proving a tool’s irreplaceability against a portfolio review the customer success manager neither controls nor sees.
Investors underwriting single-product software may need to reprice concentration exposure, because a portfolio where the top vendors hold the majority of budget leaves mid-tier point solutions competing for a shrinking discretionary remainder.
Other Enterprise Buyer Behavior Signals on our Radar:
EU AI Act compliance milestone arrives August 2, 2026
The European Union Artificial Intelligence Act reaches a key enforcement milestone on August 2, 2026, applying obligations around data governance, logging, and technical documentation for higher-risk systems and general-purpose models. Penalties reach 35 million euros or 7 percent of global annual turnover for prohibited practices and 15 million euros for other violations. A June 4, 2026 Cloud Security Alliance report flagged progressive compliance friction for enterprises running their entire European cloud estate on United States hyperscalers as data sovereignty requirements tighten.
Already a ‘Paid’ subscriber?
Upgrade to the ‘Premium’ tier and receive: All premium reports free + advanced competitive analysis and teardowns + deep-dive dossiers
3. Product & AI Bets
Intercom’s Per-Resolution Model Meets Zendesk’s Seat Defense
What Happened
As of mid-June 2026, the contrast between Intercom’s Fin and Zendesk’s artificial intelligence suite has become a working case study in pricing model divergence. Intercom Fin charges $0.99 per resolved conversation, pure outcome pricing, and reports autonomous resolution of roughly 65 to 67 percent of inbound support conversations. Zendesk charges $1.50 to $2.00 per AI resolution on top of seat licenses starting at $19 to $115 per agent per month, while Salesforce Agentforce prices at about $2 per conversation. Separately, Automation Anywhere reported in May 2026 that across more than 70 enterprise deployments its agents resolve over 80 percent of information technology service requests.
Why It Matters
This is the live tension between artificial intelligence revenue per account and artificial intelligence cost of goods sold playing out across adjacent markets. Outcome pricing wins where ticket volume is predictable and automation rates are high, and it aligns vendor and buyer incentives, while breadth and governance still justify the seat-plus-resolution premium for some buyers. The information technology service management signal is sharper: if agents resolve most tickets, the seat-count basis for per-user licensing weakens. It advances the token and outcome billing thread from our June 8, 2026 issue on GitHub’s move to token-based Copilot pricing and our May 25, 2026 issue on Intuit’s consumption model.
Implications
Chief financial officers at outcome-priced vendors may inherit a forecasting burden they did not carry before, because per-resolution revenue moves with customer ticket volume the vendor does not control, converting a predictable subscription line into a variable one inside their own model.
Product leaders may find resolution rate becomes a margin input rather than a marketing figure, since at a fixed per-resolution price the gap between 50 and 67 percent autonomous resolution determines whether the unit is profitable, tying roadmap priorities directly to gross margin.
Information technology service management incumbents may face erosion that does not appear as churn first, because once agents resolve most tickets the seat-count justification for per-user licensing weakens before any customer cancels, surfacing in expansion stalls rather than logo loss.
Commercial leaders at seat-based vendors may be pushed into defending breadth rather than price, since the per-resolution comparison favors them only where governance and integration depth justify the premium, narrowing where their model wins.
Investors comparing the two approaches may need to underwrite demand variability as a distinct risk, because outcome pricing aligns incentives but transfers volume swings onto the vendor’s revenue base in a way subscription comparables do not reflect.
Other Product & AI Bets on our Radar:
Salesforce Agentforce crosses $1.2 billion in annual recurring revenue
Salesforce reported on May 27, 2026 that Agentforce annual recurring revenue (ARR) reached about $1.2 billion in the first quarter of fiscal 2027, up 205 percent year over year, with combined artificial intelligence and Data 360 ARR of $3.4 billion. Total quarterly revenue was $11.13 billion, up 13 percent, and more than half of Agentforce and Data 360 bookings came from existing customers. The figure follows the Summer 2026 multi-agent orchestration release covered in our June 15, 2026 issue.
4. Moats & Models
The Great Enterprise Pricing Reset Enters Procurement Language
What Happened
A June 16, 2026 CIO.com analysis framed a Great Enterprise Pricing Reset, citing Gartner’s prediction that at least 40 percent of enterprise software spending will shift toward usage, agent, or outcome-based pricing by 2030, with seat-based vendor revenue share declining from 21 to 15 percent. Sidharth Ramsinghaney, a strategy and operations director at Twilio, noted that artificial intelligence agents have decoupled labor from value, undermining per-seat pricing where one agent does the work of many employees. Maxio data cited alongside it found 83 percent of artificial intelligence native software companies already offer usage-based pricing, with hybrid models, a fixed base plus a variable layer, emerging as the dominant transition state.
Why It Matters
For commercial and pricing leaders, this is now a negotiating posture problem, not only a product architecture one. Procurement teams armed with the analyst consensus are inserting outcome measurement agreements, mid-term review clauses, and artificial intelligence feature carve-outs into contracts, and vendors still on pure per-seat for an AI-augmented product enter renewals from the weaker position. The model actually closing deals is hybrid, balancing vendor revenue predictability with buyer cost alignment. It codifies the pricing thread running through our June 8, 2026 issue on GitHub token billing and our May 25, 2026 issue on Intuit’s repricing.
Implications
Commercial leaders on pure per-seat models may find renewals turning adversarial without any change to their product, because procurement now enters armed with analyst-consensus language that reframes seat pricing as a declining model rather than a neutral default.
Chief financial officers may face a forecasting shift that outlasts the pricing change itself, since hybrid and consumption layers move bookings from ratable certainty toward usage variability, which complicates guidance in ways boards will probe.
Procurement teams may gain leverage that persists across cycles, because outcome measurement agreements, mid-term review clauses, and feature carve-outs become standing contract instruments rather than one-time concessions, embedding buyer power into the paper.
Founders may discover the hardest part of outcome pricing is attribution governance, not pricing design, because disputes over what counts as a delivered outcome create a contract-administration burden that lands on finance and legal long after the deal closes.
Private equity sponsors may need to revisit how revenue quality is assessed in diligence, since a book weighted toward per-seat contracts may carry repricing risk at renewal that did not exist when those models were underwritten.
Other Moats & Models on our Radar:
SpaceX agrees to acquire Cursor for $60 billion
SpaceX announced on June 16, 2026 an all-stock agreement to acquire Anysphere, the parent of the artificial intelligence coding assistant Cursor, in a deal valued at about $60 billion and expected to close in the third quarter of 2026. The transaction exercises the acquisition option disclosed in SpaceX's S-1 and covered in our May 25, 2026 issue, and followed an April 2026 partnership. It coincided with trading gains after SpaceX's June 12 public debut.
Our analysis is designed for strategy, product, and executive leaders at SaaS companies, AI labs, and platform vendors navigating the shift to AI-native software.
Upgrade below to provide full access for your entire team.
For larger groups or enterprise-wide licenses:
About The Intelligence Council
The Intelligence Council publishes sharp, judgment-forward intelligence for decision-makers in complex industries. We publish weekly briefs, deep dives, competitive intelligence briefings, and analytical reports designed to sharpen competitive judgment and expose blind spots before they become strategic risks. No puff pieces. No b.s. Just the clearest signal in a noisy, complex world.
Our content for B2B AI and SaaS spans capital and KPIs, enterprise buyer behavior, product and AI bets, and moats and models. From market sensing to go-to-market clarity, we deliver the strategic signals leaders need to move first and act confidently.