Value Creation · Deep Dive

Value creation in the AI age — for cybersecurity companies

By Atul Tiwary, El Dorado Capital · Last reviewed: 7 October 2026

AI is not a feature layer on top of software companies. It is rewriting how software is built, sold, serviced and administered — and, more consequentially for anyone holding equity, what the market will pay for the result. This is the research base behind the value creation practice, and the parts of it that change how a security vendor should be run.

The short version

1. Feature-level AI adoption earns feature-level returns. Business-model transformation earns transformation returns, and the distance between them on the published ladder is 13× to 31× revenue.
2. The binding constraint is organizational, not technical. 88% of organizations use AI; 39% report any EBIT impact; only 21% have redesigned a workflow. The scarce asset is the capability to convert AI into operating results — and it compounds.
3. Cybersecurity's delivery mix makes generalist benchmarks dangerous. A large services half, an appliance annuity and a channel speed limit mean the same AI thesis prices differently line by line.
4. Services revenue forks. Automation either re-rates a security services line toward software economics — Red Canary at 4.62× ARR, the Dragos assembly at 20.07× — or competes the saving away. What decides the side is owned data, trust, certification, channel or outcome ownership.
5. A scaled incumbent's advantages are a decaying option. Proprietary workflow data, system-of-record position and distribution beat an AI-native challenger today — if exercised before the window closes.

Figures as published by the named sources. The first and the last belong together: the multiple is available, and almost nobody is doing the thing that earns it.

1 · The equation that changed

The old model was simple enough to run a board meeting on: seats, multiplied by price per seat, multiplied by retention. The AI-era model is closer to workflows automated × value per outcome × usage expansion × retention, less inference and delivery cost. That reads like a slide until you notice what it does to the addressable market. Software priced per seat competes for the IT budget. Software paid for work performed competes for the labor budget, which is an order of magnitude larger. McKinsey sizes the total economic potential at up to $4.4 trillion a year.

It also does something less welcome. Gross margin stops being a structural property of the business and becomes something earned every quarter. Traditional SaaS delivered incremental units at almost no cost. AI introduces real variable cost — inference, retrieval, orchestration, and human review of uncertain output — so the unit of economic truth moves from company-wide gross margin to contribution margin per workflow, per customer, per agent. BCG found margin variance of more than 70 percentage points between accounts at a single AI-enabled vendor. A company can grow revenue and destroy gross profit at the same time, and the blended number will not show it.

AI-enabled, AI-native, AI-first

There is no standard taxonomy, but the analysts converge on the same distinction, and it is worth being precise because the market prices the three differently.

• AI-enabled — conventional software improved by AI. Copilots, summarisation, recommendations. The human still operates the software. Remove the AI and the product still works, just with less to say about itself.
• AI-native — the product, architecture, workflow, pricing and unit economics are designed around AI executing the work. The customer states a goal, the system performs it, humans supervise exceptions. Remove the AI and most of the value is gone.
• AI-first — the AI-native logic applied not only to the product but to how the company builds, sells, supports, prices and governs. This is the standard that matters for a scaled incumbent, because it does not require discarding the existing product.

A practical test, and it survives contact with a diligence process: a company is AI-enabled if the claim is our users do the same work faster. It is approaching AI-native if the claim is the customer specifies an objective, our software performs the workflow, and we are paid for the work. It is a spectrum, and a scaled vendor can legitimately run all three at once across a portfolio.

The five systems

Being AI-first is not a technology decision. It is the simultaneous redesign of five interlocking systems, and partial attempts are why so many programs stall.

• Product — map the customer's workflow and automate the complete job rather than a step of it.
• Data and control — capture proprietary context, decisions, actions, outcomes, permissions and exceptions. The moat is almost never the foundation model. It is domain data, workflow position, system-of-record status and accumulated execution history. This is the incumbent's largest structural advantage, and the one that decays if left unused.
• Operating model — organize around deploying and measuring AI outcomes. Spend shifts from labor toward technology: fewer people in some functions, higher compensation for specialized roles.
• Commercial model — move from selling access to selling capacity, actions, completed jobs or outcomes. Hybrids dominate the transition.
• Economic model — manage inference as a variable cost of delivery, with customer-level contribution margins, model routing, caching and usage controls.

2 · The valuation bifurcation

The market is not paying a general AI premium. It is paying for AI that changes what the company sells. McKinsey's work on PE-backed companies produces a maturity ladder that makes the point better than any argument.

Median revenue multiple by AI maturity — McKinsey, PE-backed companies

AI maturity level	All sectors	Software only
L1 · Opportunistic adoption	13×	—
L2 · Operating-model enhancement	14×	—
L3 · Product transformation	20×	24×
L4 · Business building	31×	33×

Multiples are median EV/revenue. Top to bottom of the all-sector ladder is a span of roughly 2.4×. McKinsey separately reports companies broadly embracing AI trading at a median revenue multiple around 130% above opportunistic adopters; that is a different cut of the same research and is quoted as their figure rather than derived from the ladder.

Read the gap between L2 and L3 carefully, because it carries the whole argument. Levels 1 and 2 are internal productivity — real money, but efficiency is table stakes and the market pays about a point of multiple for it. The re-rating lives in the move to product and business-model transformation. Investors reward AI most when it changes what is being sold, not when it makes the existing thing marginally cheaper to produce.

The same logic cuts the other way, and this is the part boards under-weight. AI can compress the multiple on conventional software where investors believe seat counts will fall, where the application can be bypassed by a general-purpose agent, where the product is a thin wrapper on a commoditising model, or where customers will demand outcome pricing and pay less for access. Bain frames incumbent exposure across four scenarios — AI enhances software, spending compresses, AI outshines software, AI cannibalises it — determined by how automatable the user's tasks are and how penetrable the vendor's workflow is to an outside agent.

3 · Go-to-market: capacity, not headcount

The defensible benchmarks are considerably more modest than the category's marketing, and separating the two is where most AI go-to-market business cases fail diligence.

What the evidence actually supports

Area	Defensible 2025–26 benchmark	Source
Sales productivity	10–15% efficiency gain from sales technology and automation	McKinsey
Seller time	~70% of seller time spent on non-selling activity — the pool being attacked	Salesforce
Marketing throughput	90% report improved productivity; only 35% report improved content performance; 18% say quality declined	CMI
Support automation	44% of incoming requests resolved by AI; 87% faster resolution; 92% CSAT	Zendesk
Support unit economics	~$1.84 self-service against ~$13.50 agent-assisted per contact	Gartner-cited
Customer success coverage	~25% more enterprise and ~70% more SMB accounts per CSM	Gainsight

Cross-software. Claims of doubled meeting rates or 70–90% go-to-market cost reduction circulate widely and are generally vendor-reported and small-sample. The correct planning posture is conservative on headline productivity and aggressive on workflow redesign.

The prize is not a smaller sales force. It is capacity recovered. If AI returns five to ten hours per seller per week, that converts into wider account coverage, faster deal velocity, shorter ramp, or a deferred hiring tranche — generally well before any headcount reduction is justified. Measurement discipline matters most for AI-assisted prospecting, where the failure mode is specific and predictable: an AI development rep can inflate meeting volume while degrading pipeline quality. Track qualified-meeting rate, meeting-to-qualified-opportunity conversion, opportunity win rate, cost per qualified opportunity and revenue per meeting. Never meetings booked.

Support is the clearest near-term economics in the whole program. At roughly $1.84 against $13.50 a contact, the deflected interaction is about seven times cheaper, and the arithmetic is legible enough that a CFO will fund the next phase out of it. That is why it belongs first in the sequence, ahead of initiatives with higher ceilings.

Pricing is the consequential one

AI attacks seat pricing directly. If one agent performs the work of five users, per-seat revenue contracts while delivered value grows — a slow leak that surfaces in renewal cohorts long after the decision to ignore it was taken. Vendors that delay the transition bleed. Vendors that rush it destabilise the existing book. It is a timing problem with real option value on both sides, and it belongs on the board agenda before the cohorts deteriorate rather than after.

The practical answer for a scaled incumbent is hybrid: preserve the subscription base and introduce usage- or outcome-priced AI capability alongside it. McKinsey's finding that incumbents commercialising standalone AI products see two to three times higher traction argues for packaging AI as separately priced SKUs rather than giving it away as retention insurance — which adds inference cost and no revenue, and is the most common quiet margin leak in the category.

4 · Building at AI speed — the honest evidence

This is where hype and evidence diverge most sharply, and where a value creation plan is most likely to contain a number that will not survive contact with a diligence team.

Engineering productivity — the published record

Study	Result	What it means
GitHub Copilot controlled experiment	55.8% faster on a bounded JavaScript task	Task-level upper bound, not team throughput
Enterprise randomised controlled trial (2025)	~21% reduction in task time	The most realistic enterprise estimate
McKinsey controlled lab	~50% faster documentation and new code; ~33% faster refactoring	Gains concentrate in well-defined work
METR randomised study (2025)	Experienced open-source developers took 19% longer with AI on mature codebases	AI is not universally beneficial
DORA (2024)	76% adoption; individual productivity and code quality up, delivery throughput −1.5% and stability −7.2%	The productivity paradox
Gartner (2025)	~10–15% gain from code-focused adoption; 25–30% from full-lifecycle adoption	The gap is the strategy

Cross-software. Planning ranges: 5–15% for early deployments with limited workflow change; 10–30% for mature assistant use across coding, testing, documentation and review; above 30% on bounded boilerplate, migrations and test generation; zero to negative on complex legacy work with weak test coverage.

The METR result deserves more attention than it gets, because it indicts the measurement method rather than the tool. Developers predicted they would be 24% faster, believed afterwards they had been about 20% faster, and were measured 19% slower — a 39-point gap between belief and measurement. Time saved typing was consumed by prompting, waiting, reviewing and correcting. Self-reported AI productivity is systematically inflated, which is exactly why an investment case built on developer sentiment surveys should be treated as unaudited.

DORA supplies the mechanism. AI makes it easy to produce more code than the organization can safely validate. Without stronger testing, review capacity, release control and platform engineering, faster production simply builds a larger queue of unvalidated change and raises production risk. The prerequisites for capturing AI value in engineering turn out to be the classic fundamentals — small batches, robust automated testing, stable priorities, a real internal platform. Fund the validation layer, or the productivity gain converts into incident volume.

Every figure above measures time. The variable cost introduced in section 1 is measured in money, and published dollar figures for a completed AI-executed task are rare enough that the first one in a security workflow is worth recording. Forescout's Vedere Labs used a frontier model to port a working remote-code-execution exploit between two programmable logic controllers from the same vendor family — an adaptation task, not a discovery task, and therefore near the easy end of its range. It succeeded, at 8 hours 32 minutes, $535.74 of model API charges — about $63 per hour — and continuous supervision by a skilled engineer. The follow-on attempt to build a persistence implant escalated payload complexity until one write landed in flash-mapped memory and permanently destroyed the controller.

Two things follow for a plan that underwrites AI-driven delivery margin in a security services asset. The cost floor is real and non-trivial: a model-executed technical task still consumed most of a working day of supervised engineer time on top of several hundred dollars of inference, so contribution margin per workflow has to be built from measured task cost rather than from an assumed collapse to zero. And the failure mode is the one DORA describes, in a setting where it is expensive: unvalidated autonomous output destroyed the asset it was operating on. The caveat belongs with the figure — one task, one device family, one model generation, which establishes a level and not a trend, and a supervised research workflow prices differently from production delivery at volume. It is an anchor for a diligence conversation, not a planning assumption.

Cost per feature does not fall on its own

It restructures. A 20% reduction in engineering time on a $15,000 feature yields $3,000 gross. After tooling, governance and added review cost the net is nearer 13%, about $1,950 — and a single production defect requiring 20 hours of remediation at a loaded rate near $100 an hour more than erases it. The metrics that matter are cost per accepted feature, lead time from validated idea to production, rework percentage, change-failure rate and product revenue per engineering dollar. Never lines of generated code or suggestion-acceptance rates.

The strategic point is that engineering acceleration should be treated as capacity creation before cost reduction. For a scaled vendor the payoff is not a smaller R&D line. It is faster expansion into the product positions that carry the L3 and L4 multiples in section 2.

5 · G&A: the quiet margin lever

The least glamorous section and the most reliable. Median G&A for private B2B software runs about 15% of ARR. Public medians sit near 18% of revenue, with a structural floor around 8–10% for audit, legal, compliance and executive overhead.

The arithmetic is straightforward and it holds. At 15% G&A, a 20% reduction in addressable back-office work is roughly 3 points of revenue, before any go-to-market or engineering gain. The credible planning assumption is a 15–25% productivity improvement in addressable processes, which converts to 2 to 4 points of margin, with the highest yields in transaction-heavy work: invoices, reconciliations, employee-service cases, standard contracts, tier-1 tickets, requisitions.

What matters more than the percentage is the conversion mechanism, and it has to be decided before the program starts rather than discovered afterwards. Gains convert to P&L through avoided hiring as ARR grows — the highest-certainty route — through vendor and outsourcing consolidation, through application rationalisation as agents span systems and displace point tools, and through capacity redeployed into controls and business partnering. Savings that stay as "time saved" never reach the bridge. They are the accounting fiction behind most failed programs, and a sponsor will strike them out.

Published function-level results, all cross-software and all consultancy- or vendor-sourced: 20–30% less time spent crunching data in finance, two to four days off the close, 20–30% lower invoice-processing cost; up to 30% HR productivity improvement with time-to-hire down about 23%; legal leaders expecting AI to absorb around 28% of legal work over two to three years, with faster contract turnaround feeding sales-cycle length rather than cost alone; 60–70% reduction in requisition-to-purchase-order cycle time in procurement. Treat them as directional. The constraint on all of them is the same, and it is not model capability. It is poor master data, weak system integration and inadequate access control.

6 · The scorecard is being rewritten

From Rule of 40 to Rule of X

Rule of 40 remains the baseline efficiency test and is the strongest recent public-market valuation signal, but it weights growth and profitability equally and the market does not. ICONIQ's data shows a point of revenue growth carrying nearly twice the valuation impact of a point of free-cash-flow margin. Bessemer's Rule of X formalises that: growth multiplied by a factor, plus FCF margin, with roughly 2× for private companies.

Worked: a company growing 30% at 15% FCF margin and one growing 15% at 30% margin both score 45 on Rule of 40. On Rule of X at a 2× multiplier they score 75 and 60. Identical by the old test, a 15-point spread by the new one — and the market has been paying the spread. Bessemer reports Rule of X correlating with forward revenue multiples at an R² near 62%, against roughly 50% for Rule of 40.

Revenue per employee is bifurcating

ARR or revenue per employee, by cohort ($ thousands)

Cohort	Per FTE
Private software median (2026)	$141K
Private, $20–50M ARR	$175–200K
Private best-in-class	$250–300K
Public software median	$395K
Bessemer AI-native "Shooting Stars"	$164K
Bessemer AI-native "Supernovas"	$1,133K

The Supernova cohort runs about 8× the private software median — and averages roughly 25% gross margin, often negative, with fragile retention. The Shooting Stars run about $164K per FTE at roughly 60% gross margin, scaling $3M → $12M → $40M → $103M of ARR over four years, near 3.2× a year.

Which is the point. Revenue per employee is meaningless in isolation. A company producing $1M per head while losing money on every unit of usage is worth less than one producing $300K per head at 80% gross margin with positive free cash flow. Labor productivity has to be read alongside gross margin, retention and burn, or it is a vanity metric with a spreadsheet attached.

The gross-margin reset

Gross margin by layer — traditional against AI-era (Battery Ventures)

Layer	Traditional	AI-era range
Application	80%+	0–30% initially for AI-native
Model inference	—	30–60%
Cloud infrastructure	~60%	~60%

Cross-software. Model delivery costs have been falling more than 80% a year, which creates continuous room to recover margin — but recovery is a management activity, not a trend to wait for.

7 · The security overlay

Everything above is cross-sector. This section is the reason it sits on a cybersecurity site.

Software eats services, and cyber is half services

A cybersecurity service — a managed SOC, an incident response retainer, a penetration test, a compliance assessment — is billable human hours wrapped in expertise. Its cost base is people, which is why services businesses carry 30–60% gross margins against 75–85% for software. Agentic AI attacks that cost base directly: when a model triages the alerts a tier-1 analyst used to handle, variable labor converts to fixed software cost. Margin can re-rate up. Price can also re-rate down, if the same automation is available to everyone and the saving is competed away to the customer. Which one dominates is the central uncertainty of the services cohort, and it is not the same answer for every firm.

One leg of that cost base is now priced by a government agency, which is rare and worth using. The US Small Business Administration puts total CMMC compliance cost at approximately $593,800 per certification where a third-party assessor is required, against approximately $388,600 where the contractor may self-assess. Both paths demand the identical NIST SP 800-171 control baseline, so the $205,200 difference — a 52.8% premium — is not the cost of being secure. It is the cost of having a human verify it. That is the automatable leg, isolated and given a number by a source with no commercial interest in the answer. The caveat belongs with the figure: these are SBA estimates rather than audited costs, and the agency does not disclose how the in-scope population splits between the two paths, so no aggregate market can be derived from them.

The capacity figure alongside it is the more consequential one for an owner. Phase II would have brought more than 120,000 defense industrial base small businesses into scope against 117 authorised or accredited third-party assessment organizations as of September 2026 — about 1,025 firms per assessor. At that ratio the cohort could not have been certified on the announced schedule at any price, and the program was suspended in July 2026 (13 July), a suspension carried into acquisition guidance by a 3 September class deviation. The distinction matters because it determines what an acquirer is buying. A cost ceiling suppresses demand and lifts when costs fall; a capacity ceiling defers demand and lifts only as trained human supply is built, which takes years and cannot be bought forward. Where a services asset's binding constraint is capacity rather than price, automation is not a margin lever applied to existing revenue — it is the route to revenue that otherwise cannot be served at all. That is a different underwriting case, and the one a diligence process is most likely to miss, because a capacity-constrained business reads on the financials as a demand problem.

The valuation-regime change

The prize, where a firm lands on the right side of that fork, is a change of valuation regime rather than a margin point. Human-heavy services trade on EV/EBITDA in the high single to low mid teens. Software trades on EV/revenue at a large premium. Two 2026 transactions mark the regime change from opposite directions.

The two benchmark prints

Transaction	Multiple	What it marks
Zscaler / Red Canary (closed Aug 2025; recorded FY26)	4.62× ARR $651.4M recorded ÷ $141M ARR	A software-adjacent multiple paid for a managed detection business — the buyer paying for an automatable outcome and telemetry, not billable hours.
Accenture / Dragos assembly (closed 16 Sep 2026)	20.07× ARR ~$4.175B ÷ $208M combined ARR	A services buyer paying a software price on the way in, on 53% combined growth, expecting the revenue to hold a software multiple on the way out.

The Red Canary benchmark is 4.62× ARR: $651.4M of recorded purchase consideration in Zscaler's annual report, against the $141M of ARR Zscaler disclosed the business contributed. The announced ~$675M implies 4.79× — same denominator, 0.17 turns apart. Two details in the allocation matter more to an operator than the multiple does. $72.7M of deferred revenue was written down to fair value at close — what happens to a services book's contracted revenue when it changes hands, and not a haircut most sellers model. And $20.2M of restricted stock sits outside the purchase price as post-combination compensation — 3.1% here, but on the same acquirer's smaller acquisitions that figure has run to 33% and 41% of cash paid. What the disclosure does not establish is how the business has performed since: Zscaler does not state whether the $141M is measured at acquisition or at year-end, so no growth rate should be derived from it. The entry multiple is confirmed; the outcome is not yet observable.

The Dragos assembly is 20.07× — an aggregate numerator (Accenture's majority stake in Dragos at a $3.25B enterprise valuation, plus Dragos's own acquisitions of runZero and NetRise) against the combined $208M denominator. Dividing the $3.25B Dragos valuation alone by the same $208M gives 15.625×, which is not comparable: it sets a numerator covering one business against a denominator covering three, and understates by construction. The $208M combined figure names Dragos, runZero and NetRise; whether Phosphorus — acquired by Dragos in June 2026 — sits inside Dragos's own ARR is not disclosed. The operating detail worth taking: Dragos made three acquisitions in under four months while being acquired itself, assembling the growth and breadth that carry a software multiple during its own sign-to-close period. That is a seller-side motion available to any platform owner with the balance sheet to run it.

What decides the side

A services firm keeps the automation upside instead of surrendering it only where it owns something the software cannot replicate. Proprietary detections and incident telemetry feeding the models. Trust, and the relationship that caused the buyer to choose a human in the first place. Certifications and regulated access — FedRAMP, impact levels, audit authority. A channel and installed base that lower cost of acquisition. Or outcome ownership: being paid for a result rather than for hours, which is what allows the firm to keep the saving. Absent one of those, the firm is selling undifferentiated labor into a market where the marginal cost of that labor is collapsing. That is the textbook setup for deflation, and it turns the sub-scale end of the cohort into motivated sellers rather than acquirers.

The corollary for the buy side

The buy-and-build arithmetic in security services has changed shape. It used to read acquire, integrate, cross-sell. It now reads acquire, automate the delivery, capture the margin re-rate — a different diligence question, a different integration plan and a different hold period. The window is finite. The ability to buy services cheaply and re-rate them closes as the automation becomes table stakes and sellers price it into their own expectations.

Demand is moving too

In most software markets AI improves supply. In cybersecurity it improves supply and the adversary, which expands the threat surface the budget is sold against — but the claim now has a denominator, and it splits in two. Unit 42 assembled 405 malware samples tied to AI and cross-referenced every hash against endpoint telemetry: 12 reached a live endpoint, roughly 3%, every one alerted, and none required a detection method that did not already exist. So the evidence supports AI compressing the cost of building offensive tooling; it does not, on this sample, support a higher success rate against deployed controls. Cheaper variants raise volume, and volume raises triage cost — so the demand this creates is for detection engineering and triage capacity, not for replacing the endpoint stack. A security vendor should model AI as a cost line, a product ceiling and a demand driver at once; the three move on different clocks, and a plan should cite the version with the denominator attached.

Three shapes of regulatory catalyst

Regulation reaches a value creation plan in three distinct shapes, and they belong on different lines of the plan.

One creates demand to sell into. CISA's CIRCIA rule — incident reporting within 72 hours and ransomware payments within 24, across a scope the proposed rule put at over 300,000 entities — missed its September 2026 projection; the final rule reached OMB's regulatory-review office on 1 October 2026, the fourth timing slip this page anticipated. The obligation has never been in doubt since 2022; only the date moves. Size the plan to the certainty of the obligation, not the announced date — and note the spend routes to asset inventory, forensic readiness and response retainers, because a 72-hour clock is a data-visibility problem before it is a reporting problem.

One imposes an obligation to discharge. The EU Cyber Resilience Act's reporting obligations took effect 11 September 2026, on the date they were set: a 24-hour early warning, 72-hour notification and 14-day final report, continuous rather than periodic, attaching to products already on the market. For a vendor with EU product revenue that is a permanent operating-expense line to size deliberately — and a testable diligence question, because a target either has a PSIRT that can meet a 24-hour clock across its installed base or it does not. Full product obligations follow 11 December 2027.

One withdraws a protection already relied upon. The Cybersecurity Information Sharing Act of 2015 — the liability limits and privilege safeguards under which US companies share threat indicators — was extended to 11 December 2026 by Section 2011 of the Continuing Appropriations and Extensions Act, 2027, signed 2 September 2026. That is the fifth deadline in the sequence, and like the previous extensions it arrived attached to a spending measure: continuity is correlated with the budget calendar, not decided on the statute's merits. For any business whose delivery model depends on pooled indicators, the question of which legal basis supports that pooling after 11 December is answerable now, at the cost of counsel time.

The dated record behind all of these — statuses, dates and what each means for a plan — is maintained on the Security Catalyst Tracker, updated as the dates move so this page does not have to.

8 · Sequence, by scale

The correct order is consistent across the research and across operator practice: value thesis, workflow diagnosis, tightly scoped pilots, production controls, workflow redesign, operating-model change, then AI-native product and business model. What changes with scale is emphasis, not order.

Priorities by revenue band

Band	Where the value is
$10M–$50M Build it in	Highest ceiling — small enough to change operating DNA wholesale, large enough to have real customer data. Adopt AI-native engineering and go-to-market as the default rather than retrofitting later. Push toward $250K+ per FTE as the explicit scaling model. Ship one AI-native capability that moves pricing beyond seats. Keep G&A permanently lean by building it agentic from the start, targeting 8–12% rather than the 15% median. Least slack for failed initiatives, so the three-to-five use-case discipline matters most here.
$50M–$150M The re-founding zone	Large enough that organizational physics resists change, small enough that wholesale transformation remains feasible. Full go-to-market re-architecture, tiered human and AI customer success, hybrid pricing introduced. SDLC transformation with hard investment in the validation layer. Systematic G&A agentification for 2–4 points. At least one L3 or L4 product initiative — this is where the move from 20× to 31× is won or lost. Budget explicitly for data and systems remediation; most companies at this size carry integration debt from growth.
$150M–$500M Portfolio discipline	Scale advantages are maximal and so is inertia. Run it as a formal program with an EBITDA and growth bridge, every initiative a line item: baseline, change, cost, realized run-rate impact, confidence level. Sequence by yield — support and IT service desk first, then finance close and contracts, then engineering, then go-to-market. Manage the pricing transition on the existing book carefully. Use M&A: acquiring AI-native capability and teams is often faster than building it, and the acquirer's distribution is the multiplier.

What goes first, and why

Support and the IT service desk lead because they are the best-instrumented and have the clearest unit economics. Engineering assistants plus the validation layer follow, because the gain is broad-based and self-funding at 10–30%. Then finance close, contracts and HR service, for reliable transaction-work reduction. Go-to-market redesign carries higher value but demands the most change management, so it should follow credibility rather than precede it. AI-native product and pricing carries the highest strategic value and the longest cycle — start discovery in parallel on day one and ship inside twelve months.

The sequence deliberately front-loads work that builds organizational belief and frees cash to fund the harder plays. Done in this order the transformation finances itself, which is the only version of it that survives a budget cycle.

9 · The acquirer models — in brief

In the past eighteen months the mechanisms above have acquired a fund layer — vehicles built specifically to run these plays across a portfolio. Four models have emerged, each with a different value-creation equation and a different failure mode. Bending Spoons buys mature digital revenue at 2.3–2.7× ARR, collapses the cost base onto one platform and reprices — entry arbitrage and opex collapse are proven, retention under repricing is the open argument. A second cohort — Thrive Holdings, General Catalyst's Creation strategy, and the venture version Emergence Capital calls AI-native services — buys labor-priced revenue and underwrites its conversion to software margins, a re-rating no one has yet demonstrated at scale in public. The third incubates the AI-native operator first; the fourth is incumbent private equity's overlay. The security read-across: managed-security consolidation is running at classic services multiples, the agentic-SOC re-rating remains unpriced, and that gap is where the next fund in this market gets formed.

The full analysis — the audited Bending Spoons record, the labor-conversion evidence, Emergence's six AINS criteria as a diligence checklist, and the security read-across from LevelBlue to Ontinue/Quorum Cyber — is on its own page: AI-first acquirer models.

10 · What kills these programs

MIT's work found roughly 95% of enterprise AI initiatives producing no measurable P&L return — a contested figure, drawn from a limited interview-and-survey sample with a narrow definition of return, and carried here as directional — with the obstacles being brittle workflows, poor integration into daily work and weak organizational learning rather than model capability. Gartner projects more than 40% of agentic AI projects will be canceled by the end of 2027 on escalating cost, unclear value or inadequate risk control. McKinsey's cut is the sharpest: 88% of organizations use AI, 39% report any enterprise EBIT impact, and most of those under 5% of EBIT — a 49-point gap between adoption and result.

Underneath all of it sits one finding. Workflow redesign is the organizational factor most correlated with EBIT impact from AI, and only 21% of AI-using companies have fundamentally redesigned any workflow. Most deploy AI into unchanged processes and then wonder why the P&L does not move.

The cleanest experimental evidence points the same way. In a 2026 field experiment, 515 high-growth startups were all given the same frontier-model access, credits and technical training; a randomly chosen half were also shown case studies of how AI-native firms had reorganized workflows, teams and business models. That half found 44% more uses for AI, reported 1.9× the revenue of the control group and sought 39.5% less outside capital, with the gains concentrated in the upper tail of firms rather than spread across them. It is a working paper from INSEAD and Harvard Business School, not yet peer-reviewed, and its subjects are early-stage companies rather than scaled vendors. Tool cost is not the gate either: the median company on Ramp's AI Index spends roughly $12 per employee per month on AI, which a productivity gain of a fraction of 1% repays. Three things follow for a value creation plan. Access to tools is not an advantage, because every firm in the experiment had it. The scarce input is the mapping from tool to redesigned work, and it transfers through worked examples, which makes it the cheapest lever a sponsor holds across a portfolio. And the payoff is skewed, so a fund-level bridge built on an average uplift per company will be wrong in both directions: most companies will show little, and a few will carry the return.

Failure modes and the countermeasure

Failure mode	What it looks like	Countermeasure
Tool-first strategy	Licenses bought before outcomes selected	Quantified value thesis and workflow baselines first
Pilot theatre	Many demos, no production owner, no scale decision	Three-to-five use-case portfolio with 30 and 90-day scale-or-stop gates
Chatbot instead of workflow change	Employees copy and paste between systems	Embed in the CRM, ticketing, IDE and ERP
No economic baseline	"Everyone seems faster"; nothing in the P&L	Measure time, quality and cost per unit before launch
Phantom savings	Time saved never converts to lower hiring or higher output	Pre-decide the conversion mechanism; only realized impact enters the bridge
Autonomous-agent overreach	Agents send, approve or refund without controls	Scoped permissions, human gates, logs, rollback, kill switch
Overbuilt infrastructure	A two-year data platform before a proven use case	Build only what the priority workflows require

The strategic risks, separately

Beyond execution there are four structural threats worth their own board discussion. Disruption from beside — a general-purpose agent platform sitting between the vendor and its users, siphoning usage and relegating the product to a commoditised system of record reached through an API. Seat erosion, covered above. Margin illusion — AI given away as retention insurance, or usage-priced without customer-level contribution tracking. And the commoditisation treadmill: model capability improves while prices fall more than 80% a year, so anything built as a thin wrapper erodes within quarters. Durable advantage comes only from what AI cannot replicate — proprietary workflow data, system-of-record position, distribution, compliance depth, accumulated execution history.

There is also a quieter risk that shows up in no quarter's numbers. AI amplifies senior talent, which tempts companies to stop hiring juniors, and that dismantles the apprenticeship system that produces the seniors. It is a clean case of optimizing the current period at the expense of the franchise, and a buyer running diligence three years out will read it off the org chart.