AfterQuery hits $3.2B — Y Combinator's fastest unicorn ever
Two signals tonight about where the money and the machinery are going: a 20-month-old training-data startup is now worth $3.2 billion, and CrowdStrike has decided that the place to stop a rogue AI agent is the laptop it runs on.
AfterQuery, an AI training-data startup founded in January 2025, is reportedly valued at $3.2 billion — the fastest company in Y Combinator's history to reach unicorn status. Forbes first reported the round; TechCrunch said the company could not be immediately reached for comment, so treat the number as reported rather than confirmed. The company closed a $30 million Series A at a $300 million valuation in April 2026, which means its price has gone up more than tenfold in five months. AfterQuery sells human-curated training data and reinforcement learning environments built by roughly 100,000 verified professionals across finance, medicine, law and engineering, and says it has passed $100 million in annualized revenue. Our read: the valuation is a bet that expert data has become the scarce input in AI. Compute is commodity-priced, architectures leak between labs in months, and the open web is largely scraped out — so the labor of a practicing surgeon or M&A lawyer, captured as training signal, is what's left to bid on. A ten-times markup in five months is still a frothy price for a services-heavy business, and revenue reported by the company itself deserves a raised eyebrow.
CrowdStrike launched Falcon Guardian, a product that discovers, permits and polices AI agents on the endpoint where they actually execute. Announced at Fal.Con 2026, the Falcon sensor inventories known and shadow agents across Windows and macOS machines, logs who deployed each one, then reconstructs a chain from a user's prompt through the identity used, the tools called and the system changes that followed. Administrators name the agents allowed to run; anything else is blocked. CrowdStrike's pitch is that agents generate orders of magnitude more telemetry than human users, and that shipping it to a third-party SIEM makes ingest costs spiral — so Guardian pipes it into CrowdStrike's own Next-Gen SIEM as first-party data with retention included. That's a distribution play as much as a security one: CrowdStrike is using the endpoint footprint it already owns to become the default control plane for agentic software. We have watched the same problem get attacked from the developer side — Talos ships a permission kernel for AI agents that demand shell access — and the convergence is the story: agent permissions are turning into an operating-system feature, not a prompt-level guardrail.
What to watch: whether AfterQuery's revenue survives diligence at a $3.2 billion price, and whether enterprises actually turn on agent allowlisting once they see how many unsanctioned agents are already running.
Is an AI data startup worth $3.2 billion a signal of a real moat, or the latest round of the same froth? Tell us in the comments.
