23 AI Trends keeping me up at night

What It Covers

Host Greg Isenberg outlines 23 AI trends reshaping startup building in 2025–2026, covering the collapse of traditional company-building timelines, the rise of autonomous agent businesses, vertical AI replacing SaaS headcount budgets, outcome-based pricing shifts, and emerging cybersecurity vulnerabilities from AI agent permission stacks.

Key Questions Answered

• •One-Hour Company Stack: Using agentic coding tools like Claude Code or Google AI Studio, founders can move from idea to first paying customer in under three hours. The prerequisite is an existing audience or email list for distribution. Without pre-built distribution, customer acquisition remains the bottleneck regardless of how fast the product ships.
• •Vertical AI vs. Vertical SaaS: Vertical SaaS captures IT budget at $10–100M outcomes. Vertical AI taps directly into labor P&L, replacing headcount rather than software licenses, making the total addressable market roughly 10x larger. YC predicts 300+ unicorns in vertical AI this decade. Target boring sub-niches within insurance, logistics, elder care, or construction first.
• •Outcome-Based Pricing Shift: Gartner projects 40% of enterprise SaaS shifts to outcome-based pricing by 2030, with seat-based models declining from 21% to 15% market share. Early movers charging per resolved ticket or per result delivered gain a sales advantage. Zendesk already operates this model, and 83% of AI-native SaaS companies have already switched.
• •100 True Fans Micro-Monopoly: The original "1,000 true fans" model compresses to 100 fans in an agent-first business. A niche audience of 5,000 can yield 100 customers at $50/month, generating roughly $60,000 annual profit for a solo operator running on agents. Margins can reach 95% when agents handle customer service, content, and operations autonomously.
• •Agent Attack Surface: AI agents with access to email, files, calendars, and bank accounts create a new attack vector called context window poisoning — the functional equivalent of phishing but with far greater damage potential since agents act autonomously. Palo Alto Networks has documented real-world agent injection attacks. Conduct quarterly agent permission audits, revoking unnecessary access the same way app permissions are reviewed.