Cybersecurity · AI · Infrastructure

AI Infrastructure Landscape

The stack read bottom-up, from power and silicon to the products people actually buy. For each layer: who is active in it, which strategics would plausibly acquire there, and who leads rounds in Israel and the US. We publish what we can attribute and leave the rest blank.

Velo Labs · Tel Aviv · Refreshed 12 Oct 2026

9
Layers
7
Cross-cutting
150
Companies
54
Lead investors
35
Segments

Names carrying an arrow open their full profile on the Velo platform: team, rounds, investors and portfolio. Sign in or create your free account to follow one.

Filter by layer

16 layers and cross-cutting concerns

The stack

Nine layers. Each one depends on everything below it.

9
Applications & Use Cases
AI-powered products across every industry

Who plays here 9

OpenAICharacter.AIMidjourneyMicrosoft 365 CopilotSalesforceServiceNowHarveyLegalAbridgeHealthAlphaFoldScience

Notable rounds

Shield AI$2B Series G
Helsing$1.8B Series E
Sierra$950M Series E
Harvey$550M
Wonderful$550M Series C
OpenEvidence$250M Series D
Aidoc$150M Series E
Chamelio$26M Series A

Would plausibly acquire 6

What this layer is

The products people actually buy. Everything below exists so this layer can work.

Why it matters

Distribution decides outcomes here more than technology does. The same models are available to everyone, so the defensible asset is the workflow a company owns and the data that accumulates inside it.

What is moving now

Rounds here stopped being about model access. Harvey raised $550M at $15.6B and Sierra $950M, both on workflow depth and customer count rather than a model edge. Pricing is drifting from seats toward completed work, which rewards vendors who can show a task finished instead of a draft produced.

The vocabulary

Vertical AI
Software built around one industry's workflow, where the model is a component and the domain data is the moat.
Agentic workflow
A task the software completes end to end, rather than a suggestion a person then acts on.
System of record
The place the work's data actually lives, which decides who can be displaced and who cannot.
Outcome pricing
Charging per unit of work finished instead of per user seat.
SegmentsVertical AIContested4Voice AIContested4Analyst CopilotForming6
8
Agent Infrastructure
Multi-agent systems, orchestration, identity, tools and memory

Who plays here 6

Notable rounds

Engram$98M
Vapi$50M Series B
CopilotKit$27M
Band$17M seed
Xpander$7.5M seed
Natomaacq. Snowflake

What this layer is

Multi-agent systems, orchestration, identity, tools and memory.

Why it matters

The newest layer in the stack and the least settled. Whether agents become a durable architecture or a feature of the model layer decides how much of this survives as independent companies.

What is moving now

The standards question settled faster than the market did. MCP was donated to the Linux Foundation's Agentic AI Foundation, and x402 followed for agent payments. Capital is now going to the control points around agents rather than the frameworks: Snowflake bought Natoma for an MCP gateway, and Engram raised $98M for memory.

The vocabulary

MCP
Model Context Protocol: an open standard for how a model reaches tools and data.
Agent memory
Storage that carries state across runs, as opposed to a context window that resets each time.
Harness
The layer that decides which tool an agent may call, with what arguments, and what happens when it fails.
Non-human identity
Credentials belonging to an agent or workload rather than a person.
SegmentsAI AgentsForming5Agentic AIEmerging4
7
Model & Developer Infrastructure
Model access, fine-tuning, evaluation, routing and developer platforms

Notable rounds

Anthropic$65B Series H
OpenAI$122B committed
Decart$300M
Qodo$70M Series B
Patronus AI$50M Series B
Arato$10M seed

What this layer is

Foundation models and the tooling developers build on top of them.

Why it matters

Model providers keep absorbing the layer directly above them, so anything here is one release away from being bundled. The tools that span several providers are the ones with room to stand alone.

What is moving now

Capital concentrated hard at the top: Anthropic's Series G and H, $30B then $65B, and OpenAI's $122B dwarf everything else in the stack. Underneath them the money moved to evaluation and simulation rather than new base models, because buyers now need evidence that a model behaves.

The vocabulary

Post-training
Everything after pre-training: fine-tuning, reinforcement learning, distillation. Where most differentiation now happens.
Eval
A repeatable test of model behaviour, used as a release gate the way a test suite is.
Distillation
Training a smaller model to imitate a larger one, to cut the cost of serving it.
Context window
How much input a model can hold in view at once.
SegmentsAI Developer ToolsContested5
6
Data Infrastructure
Ingestion, storage, retrieval, governance and data for AI

Notable rounds

Databricks$5B at $134B
VAST Data$1B at $30B
Confluent$11B acq. IBM
Snorkel AI$350M Series E
Qdrant$50M Series B
Nimble$47M Series B
Keewano$12M seed

What this layer is

Storage, pipelines, vector and analytical databases that feed models.

Why it matters

AI workloads impose access patterns the lakehouse generation was not designed for: embeddings, high-volume reads and retrieval under latency. That mismatch is where the opening sits.

What is moving now

Consolidation arrived: IBM closed Confluent at $11B and Salesforce closed Informatica, both to own real-time and governed data underneath AI workloads. Among startups the premium moved to data that is labelled and permissioned, which is what Mercor and Snorkel raised against.

The vocabulary

RAG
Retrieval-augmented generation: fetching relevant documents at query time instead of baking knowledge into weights.
Vector database
Storage indexed by embedding similarity rather than exact match.
Lakehouse
A warehouse and a data lake in one system, so analytics and training read the same tables.
Synthetic data
Generated training examples, used where real data is scarce or restricted.
SegmentsCompany Brain / Knowledge InfraEmerging4Data InfrastructureConsolidating4Enterprise Search & RetrievalForming4
5
Inference Infrastructure
Low-latency, high-throughput model serving

Who plays here 6

NVIDIAAWSGoogle CloudMicrosoft AzureGroqtogether.ai

Notable rounds

Fireworks AI$1.5B Series D
Baseten$1.5B Series F
Inferact$150M seed
RadixArk$100M seed

Would plausibly acquire 5

What this layer is

Serving, routing, caching and the silicon that runs them.

Why it matters

Cost per token keeps falling, which erases businesses built on margin arbitrage and rewards the ones built on volume. Economics decide this layer more than capability does.

What is moving now

Serving became a business in its own right: Fireworks raised $1.5B at $17.5B and Baseten $1.5B. The open-source engines got commercial vehicles too, vLLM through Inferact and SGLang through RadixArk. Nvidia licensing Groq's technology for a reported $20B says the incumbents would rather buy a latency advantage than rebuild one.

The vocabulary

Token
The unit a model reads and writes. Inference is billed by it, so cost per token is the unit economics.
Throughput vs latency
Tokens per second across every user, against the wait a single user actually feels.
Speculative decoding
Drafting tokens with a small model and verifying with a large one, to cut latency without changing the answer.
Cold start
The delay while a model loads before it can serve its first request.
SegmentsOn-Prem / No-Token AI ArchitectureEmerging1LLM InfrastructureForming6
4
Training Infrastructure
Distributed training, optimization, tooling and experiments

Who plays here 6

Notable rounds

GMI Cloud$668M
TensorWave$350M Series B
Deep Cogito$43M Series A
Bespoke Labs$40M Series A

Would plausibly acquire 4

What this layer is

Clusters, schedulers and the frameworks that train large models.

Why it matters

Capital-intensive and concentrated among a handful of buyers. A company here sells to a short list, and lives or dies on whether that list keeps building its own.

What is moving now

Training capacity is bought as infrastructure now rather than as cloud credits: IREN signed $3.4bn with Nvidia, GMI Cloud raised $668M, TensorWave $350M on AMD. The sharper shift is that post-training attracted funding of its own, because the scarce skill moved from pre-training to what happens after it.

The vocabulary

Cluster
Thousands of accelerators wired together tightly enough to train one model as a single job.
Checkpoint
A saved snapshot of weights, so a failed run resumes instead of starting over.
Interconnect
The network between accelerators, which is usually the real limit on how far a run can scale.
RL pipeline
The loop that turns a base model into one that follows instructions and refuses what it should.
ILLead investors
SegmentsAI InfrastructureForming6
3
AI Cloud & Orchestration
GPU cloud, scheduling, resource management and developer platforms

Who plays here 6

AWSMicrosoft AzureGoogle CloudCoreWeaveCrusoeFluidstack

Notable rounds

Nscale$3.36B pre-IPO
Crusoe$3.9B Series F
ScaleOps$130M Series C
Inferizeacq. Nebius

Would plausibly acquire 5

NVIDIAAWSMicrosoftInfrastructure fundsPrivate equity

What this layer is

GPU clouds and the scheduling layer above raw capacity.

Why it matters

Capacity itself is becoming a commodity, so the durable position is in what sits on top of it: utilisation, multi-tenancy, and moving workloads between providers.

What is moving now

Neoclouds raised enormous rounds, Nscale $3.36B ahead of an IPO and Crusoe $3.9B at $30.9B, while the trade press began asking about credit risk in their data-centre deals. The quieter opportunity is efficiency: ScaleOps raised $130M purely for making capacity already paid for go further.

The vocabulary

Neocloud
A cloud built specifically for accelerators, competing with hyperscalers on price and availability.
Utilisation
The share of a paid accelerator actually doing work. The industry's largest source of waste.
Bin-packing
Fitting jobs onto hardware so that little capacity sits idle between them.
Multi-tenancy
Letting several customers share one cluster without leaking data or performance into each other.
SegmentsSovereign & Regional AI InfrastructureEmerging4Cloud InfrastructureMature4
2
Compute & Accelerators
GPUs, custom chips, networking and memory

Who plays here 6

Notable rounds

Cerebras$5.5B IPO
Hailoacq. Microchip
Celestial AIacq. Marvell
Groq~$20B Nvidia licence

Would plausibly acquire 6

NVIDIAAMDIntelBroadcomQualcommMarvell

What this layer is

GPUs, custom silicon and the interconnect between them.

Why it matters

The hardest layer to enter and the one everything above depends on. Supply rather than demand has been the constraint, which gives whoever holds it unusual leverage.

What is moving now

Cerebras' $5.5B IPO was the first large tech listing of 2026 and closed its opening day up over 100%, which reopened the market for specialised silicon. Nvidia set the pace above with Vera Rubin, and consolidation continued below it as Microchip took Hailo and Marvell closed Celestial AI.

The vocabulary

GPU, TPU, ASIC
General-purpose, Google's tensor chip, and fixed-function silicon. Specialisation buys efficiency and gives up flexibility.
HBM
High-bandwidth memory stacked beside the processor. Usually the component in shortest supply.
Wafer-scale
Building one very large chip from an entire wafer instead of cutting it into many small ones.
FLOPs per watt
The efficiency figure that decides what a given building can actually run.
SegmentsGPU NetworkingEmerging4
1
Physical Infrastructure
Data centers, power, cooling, networking and real estate

Who plays here 6

Equinix$78BDigital Realty$52BVantage$32BCoreSiteNextEraPowerSiemensCooling

Notable rounds

X-energy$1B IPO
ZutaCore$100M Series C
Fermi AmericaNasdaq IPO
Base Power$1B Series D

Would plausibly acquire 5

BrookfieldBlackstoneEquinixDigital RealtyUtilities

What this layer is

Data centres, power, cooling and land.

Why it matters

Power, cooling and siting are now the binding constraints on AI. A physical-world market with physical-world timelines, carrying software-market valuations.

What is moving now

Power became the binding constraint and regulation followed: FERC directed the grid operators to write rules for very large loads, and data-centre absorption hit a record 25 GW in the first half of 2026. Capital went to generation and to cooling, with X-energy's $1B IPO and ZutaCore's $100M Series C in Israel.

The vocabulary

Behind-the-meter
Generating power on site, which sidesteps the queue to connect to the grid.
Interconnection queue
The wait to attach a large load to the grid, now measured in years rather than months.
PUE
Power usage effectiveness: total facility power divided by the power that reaches the computers.
Direct-to-chip cooling
Bringing liquid to the processor itself, because air stops working above a certain rack density.
ILLead investors
SegmentsData Center InfrastructureForming4

Cuts across every layer

Concerns that show up at all nine levels at once.

·
Security
Model, data, identity, runtime and AI security

Who plays here 5

Notable rounds

CyberArk~$25B acq. Palo Alto
Wiz$32B acq. Google
Oasis Security$1B acq. Cyera
Cyera$400M Series F
Koi Security~$400M acq. Palo Alto
LayerX~$205M acq. Akamai
Zenity$125M Series C
HiddenLayer$100M Series B
AIR Security$50M
Rein Security$25M Series A

Would plausibly acquire 7

What this layer is

Model, data, identity, runtime and AI security.

Why it matters

Every layer inherits the security problems of the layers below it and adds its own. Agents sharpen that: a system that acts needs permissions, and permissions need an owner.

What is moving now

This is where Israel is concentrated and where the exits landed: Palo Alto closed CyberArk and Google closed Wiz at $32B. New money follows agents rather than endpoints, with Zenity at $125M, Onyx at $113M and HiddenLayer at $100M, all selling control over what an agent is permitted to do.

The vocabulary

Non-human identity
Credentials held by a service, workload or agent rather than a person. They now outnumber human accounts.
Prompt injection
Instructions hidden inside content an agent reads, which the agent then follows as if they came from its operator.
Model provenance
Evidence of where a model's weights came from and what has been changed in them since.
Runtime guardrail
A check that approves, modifies or blocks an agent's action in the moment before it runs.
SegmentsAgent SecurityForming13AI Data-Center Security (GPU East-West)Emerging4Agent Identity & PermissioningEmerging5AI Supply-Chain & Model ProvenanceEmerging5Cloud SecurityConsolidating4Identity SecurityContested2Data SecurityContested3Application SecurityMature7API SecurityConsolidating5OT SecurityForming4DeceptionForming3CNAPPMature6Runtime SecurityConsolidating4ITDRForming4DSPMConsolidating1Supply Chain SecurityContested3
·
Observability & Evaluation
Monitoring, evals, tracing and AI quality

Who plays here 5

Notable rounds

Coralogix$200M Series F
Arizeacq. Dynatrace
Galileoacq. Cisco
Valsa16z-backed

What this layer is

Tracing, evaluation and monitoring for models and agents.

Why it matters

Once a system acts rather than answers, knowing what it did stops being optional. Evaluation is turning into the control surface teams actually operate day to day.

What is moving now

Incumbents bought in rather than building: Cisco announced Galileo and Dynatrace announced Arize, both in 2026. Coralogix raised $200M on monitoring agents specifically. The market is converging on a plain idea, that an AI system owes the same operational evidence as any other production system.

The vocabulary

Tracing
Recording each step of a model or agent run, so a failure can be reconstructed afterwards.
Eval harness
A fixed suite a model must pass before it ships, and again after every change.
Drift
Behaviour changing over time while the code stays the same.
Groundedness
Whether an answer is actually supported by the sources it cites.
SegmentsAI ObservabilityForming5AIOpsForming3
·
Networking
High-performance networking for AI

Who plays here 3

Notable rounds

DriveNets$410M at $8.5B
Celestial AIacq. Marvell
CScaleNvidia + Intel backed

Would plausibly acquire 5

NVIDIABroadcomCiscoAristaMarvell

What this layer is

The fabric between accelerators, and between data centres.

Why it matters

East-west traffic between GPUs is structurally different from the north-south traffic networking was built for, which opens a genuinely new surface rather than a faster version of an old one.

What is moving now

Ethernet extended its lead in AI scale-out while InfiniBand rebounded, per Dell'Oro. The more interesting capital went to optics: Marvell closed Celestial AI, and CScale came out of stealth backed by Nvidia and Intel. Israel's DriveNets raised $410M at $8.5B on the same demand.

The vocabulary

East-west traffic
Traffic between machines inside a data centre, which now dwarfs traffic in and out of it.
Scale-up vs scale-out
Connecting accelerators inside one rack, against connecting racks to one another.
InfiniBand and RoCE
Two routes to low-latency networking: purpose-built, and built on Ethernet.
Optical interconnect
Using light rather than copper between chips, to move more data per watt.
ILLead investors
USLead investors
Lux CapitalEclipseWalden Catalyst
SegmentsGPU NetworkingEmerging4
·
Storage
High-throughput, scalable storage

Who plays here 4

Notable rounds

VAST Data$1B at $30B
Wasabi$70M

Would plausibly acquire 5

DellNetAppPure StorageIBMHitachi

What this layer is

High-throughput storage for training sets, checkpoints and retrieval.

Why it matters

Training and inference read at volumes that break assumptions built for transactional workloads. Throughput per dollar is the whole argument here.

What is moving now

VAST Data's round valued it at $30B, the clearest sign that storage is being repriced as AI infrastructure rather than enterprise IT. Meta published its own AI storage architecture, which historically precedes the rest of the market adopting the same shape.

The vocabulary

Throughput per dollar
The real metric for training storage, in place of capacity per dollar.
Checkpointing
Writing model state periodically. A write pattern most storage systems were never designed for.
Object vs parallel file system
Cheap and vast, against fast and tightly coupled to the compute.
Tiering
Moving data between fast and cheap media automatically, by how often it is read.
Signals
Meta's AI Storage Blueprint at ScalePrimaryEngineering at Meta · 2026-07-01
Wasabi raises $70 million for AI cloud storageTradeBlocks & Files · 2026-01-13
·
Governance & Compliance
Policy, risk, AI safety

Who plays here 4

Notable rounds

Zenity$125M Series C
Xpander$7.5M seed

Would plausibly acquire 5

MicrosoftServiceNowIBMOneTrustThomson Reuters

What this layer is

Policy, audit, provenance and regulatory controls for AI.

Why it matters

Regulatory pressure is real and arriving unevenly. The gap is that the pain and the budget sit with different people, so the buyer is still forming.

What is moving now

The EU AI Act's high-risk obligations were pushed back: Council and Parliament agreed to simplify in May 2026 and the Council gave final approval in June, moving stand-alone high-risk duties to 2027. The US went the other way with an executive order in June. Buyers are not waiting for either, which is why governance is being bought as tooling now.

The vocabulary

Risk tier
How a regulation classifies a system, which in turn decides the obligations attached to it.
Model card
A published description of what a model is, how it was trained, and where it is known to fail.
Audit trail
A record complete enough to reconstruct why a particular decision was made.
Conformity assessment
Demonstrating before deployment that a system meets a standard, rather than after an incident.
ILLead investors
USLead investors
SegmentsAI GovernanceForming3
·
Data & Content
Licensed, synthetic and real-world data

Who plays here 4

Notable rounds

Mercor$350M Series C
Snorkel AI$350M Series E
Matia$21M Series A

Would plausibly acquire 5

ScaleDatabricksThomson ReutersRELXBloomberg

What this layer is

Training data, licensing, labelling and synthetic generation.

Why it matters

The supply of freely available text is largely spent, which turns licensed and proprietary data into a scarce input rather than a commodity.

What is moving now

The price of training data stopped being zero. Anthropic's $1.5B copyright settlement was approved, Cloudflare moved to make AI crawlers pay publishers, and Getty v Stability went up on appeal. Mercor and Snorkel both raised on supplying data that is documented and permissioned.

The vocabulary

Licensed corpus
Training data acquired under contract, as opposed to scraped from the open web.
Crawler signal
A publisher's machine-readable instruction about crawling and training on its content.
Provenance
The record of where a piece of training data came from and on what terms.
Synthetic data
Model-generated examples used in training where real examples are scarce or restricted.
ILLead investors
USLead investors
·
Energy & Sustainability
Power, cooling and sustainable AI

Who plays here 4

NextEra EnergySchneider ElectricVertivBloom Energy

Notable rounds

Crusoe$3.9B Series F
Commonwealth Fusion$1B
Base Power$1B Series D
TAR$27M seed

Would plausibly acquire 5

Schneider ElectricSiemensVertivUtilitiesInfrastructure funds

What this layer is

Generation, grid access and efficiency for AI workloads.

Why it matters

Compute plans now run into grid timelines. Whoever can secure power on a useful schedule sets the pace for everything above.

What is moving now

Hyperscalers began contracting generation directly: Meta signed more than 6 GW across Vistra, Oklo and TerraPower, and Google and Constellation funded 890 MW of nuclear uprates into PJM. Fusion attracted real money as well, with Commonwealth Fusion raising $1B against a grid date in the early 2030s.

The vocabulary

PPA
Power purchase agreement: a long contract to buy electricity, often the thing that finances new generation.
SMR
Small modular reactor. Factory-built nuclear, sized for a single large load rather than a region.
Uprate
Increasing an existing plant's output without building a new one. The fastest capacity available.
Curtailment
Power that is generated but cannot be used or moved, and is thrown away.
ILLead investors

How to read this

Who plays here lists companies operating in the layer; inclusion is a statement about category, not about quality or funding. Notable rounds shows recent raises we could attribute to a named source. Would plausibly acquire lists the strategics whose platform the layer would fold into. Segments are the research cells underneath each layer, with how settled each one is and how many companies we have mapped into it. Where something shows nothing, we had nothing we were willing to put a name to.