Mercor CEO on Why Application Layer Companies Have No Defensibility & Token Spend Exceeds Salaries

The Twenty Minute VC (20VC)
The Twenty Minute VC (20VC)Jun 1, 2026

Why It Matters

Token‑driven cost structures and weak defensibility force AI firms to invest heavily in security, creating a fast‑growing market that will shape competitive dynamics and investor valuations.

Key Takeaways

  • Application-layer AI firms lack defensibility despite massive token spend.
  • Mercor added security as seventh core value after recent hack.
  • Token costs now exceed employee salaries, driving AI operational expenses.
  • Mercor reports $300 million net new ARR in 60 days post‑incident.
  • CEO predicts booming AI security market due to swarm‑agent attacks.

Summary

In a candid interview, Mercor CEO Brandon Foody discussed the growing challenges of building defensibility in the application layer of AI services, noting that token consumption for internal agents now outpaces traditional employee payroll. He highlighted the company’s rapid growth—adding $300 million in net new ARR within just 60 days after a security breach—and emphasized that the incident prompted Mercor to embed security as a seventh core company value.

Foody explained that the model itself has become the product, making it difficult for downstream applications to create lasting moats. The firm’s token spend eclipses headcount costs, underscoring a shift in cost structures across AI firms. He also refuted rumors about losing major customers, confirming that relationships with OpenAI remain strong while Meta’s partnership is on pause. The hack was contained quickly, with external consultants engaged and communications transparent to customers.

Notable moments included Foody’s admission, “We’re spending more on tokens for our internal agents than we are on employee headcount,” and his description of attackers using swarms of coding agents to exhaust codebases far faster than human teams. He warned that this new attack vector will fuel a surge in AI‑focused security engineering tools, positioning Mercur as both a target and a potential provider of defensive solutions.

The interview signals that AI companies must prioritize security and rethink unit economics as token usage balloons. Investors and enterprise buyers will watch how firms like Mercur balance rapid growth with robust cyber defenses, while the emerging market for AI security solutions could become a major revenue driver in the next few years.

Original Description

Brendan Foody is the Founder and CEO @ Mercor, one of the leading data providers to the largest labs on the planet including OpenAI. In the last two years, Brendan has scaled the company to $1.5BN in ARR and a valuation of $10BN.
-----------------------------------------------
Timestamps:
00:00 Intro
01:13 True or False: Mercor lost Meta & OpenAI as a customer with the hack?
05:52 Are We Entering a Golden Age of Cyber?
11:06 AI, Jobs & Layoffs: How Do Humans Fit Into the New Economy?
21:17 Rejecting a $30B Acquisition
27:39 The Fundraising Story: Helicopters, Ferraris & $10B Valuation
32:50 Infrastructure Will Win Over Application Layer
35:52 Is SaaS Dead? When Network Effects Are the Only True Moat
42:12 Token Spend on Agents Now Exceeds Employee Headcount
54:40 Competing for Talent When Meta Offers $20M Per Year
01:01:56 Do Sovereign AI Models Actually Matter?
01:07:17 Does HR Slow Companies Down? Brandon Pushes Back
01:09:31 Quick-Fire Round
----------------------------------------------------------------------------------------------
Subscribe on Spotify:
Subscribe on Apple Podcasts:
Follow Harry Stebbings on X:
Follow Brendan Foody on X:
Follow 20VC on Instagram:
Follow 20VC on TikTok:
Visit our Website:
Subscribe to our Newsletter:
-----------------------------------------------
#20vc #harrystebbings #mercor #ai #ceo #aimodels #saas #cybersecurity #hiring

Comments

Want to join the conversation?

Loading comments...