The SaaS Expansion Map · Chapter 2

The Software That Agents Expand

The SaaS Destruction Map was Chapter 1: What Dies. This is Chapter 2: What Compounds. 18 companies across 5 expansion categories. The application layer shrinks. The infrastructure layer thickens.

Ch.2

Destruction removes revenue once. Expansion adds revenue across layers simultaneously. Deploy one agent → data queries ↑ → security checks ↑ → monitoring ↑ → identity auth ↑ → compliance ↑. Deploy ten and multiply every line.

🗄️

Data Gravity Multiplier

1000x queries/hr

Agents query constantly. Humans check dashboards occasionally.

🛡️

Attack Surface Expansion

Every API = risk

Fewer humans ≠ less risk. More machine-speed risk.

📡

Observability Imperative

3-5x TAM

Less human oversight = more monitoring required.

🔐

Identity Cascade

Net-new value

Agent identity → permissions → audit → compliance.

DATA INFRASTRUCTURE The Foundation Layer

Agents are stateless. Data stores are stateful. Every action begins with a query. Consumption pricing aligns perfectly.

#45Snowflake$4.4B29-32%

—DatabricksPrivate60%+

#75MongoDB$2.3B22%

CYBERSECURITY The Mandatory Expansion

Security is non-discretionary. More agents = more attack surface = more security spending. Period.

#43CrowdStrike$4.6B+51% stk

#16Palo Alto$9.6BStrong

#63Zscaler$2.8BTop pick

OBSERVABILITY The Fastest-Growing Category

You can't fix what you can't see. Agent workloads may 3-5x observability TAM over three years.

#54Datadog$3.2BStrong

#86Dynatrace$1.9BSteady

IDENTITY & ACCESS The New Value Tier

Not value migrating from elsewhere — entirely new value. Agent identity is Active Directory for the agentic era.

#61Okta$2.6B+15%

—CyberArk$1.0BTop 5

DETERMINISTIC SYSTEMS The Regulatory Fortress

Agents are probabilistic. Finance and compliance are not. "Approximately correct" kills you. These systems become the bedrock agents operate on top of.

#6SAP$40.8BStable

#5Oracle$61.0BStable

#47Palantir$5.6B+70%

#10ADP$21.2BStable

#80FICO$2.1BStable

#57Veeva$3.1BSteady

#26Wolters Kluwer$6.2BSteady

THE MULTIPLICATIVE EFFECT — ONE AGENT DEPLOYED

Deploy Agent

×1

→

Data Queries

↑ Rev

→

Security

↑ Rev

→

Monitoring

↑ Rev

→

Identity

↑ Rev

→

Compliance

↑ Rev

Application-layer destruction is 1:1. Infrastructure-layer expansion is 1:many.

Chapter 1 destroys. Chapter 2 compounds.

The application layer shrinks. The infrastructure layer thickens. The winners already have the right pricing model — consumption-based revenue tied to machine usage, not human seats. The pricing transition that threatens Tier 2 SaaS was already completed here years ago. The new commanding heights: data access, security, observability, identity, and deterministic systems of record.