Frontline Portfolio Briefing — week of 2026-09-21

The week in one paragraph

This was the portfolio's biggest week of the year on exits and capital: Oasis Security was acquired by Cyera for $1B, Clay closed a $115M Series D at a $7.1B valuation (more than double its prior-year mark), and Manna secured €18M in State-backed funding — all in the same seven days. Against that backdrop, Manna simultaneously announced it is ceasing drone delivery operations in Ireland due to regulatory barriers, a sharp strategic reversal in its home market that demands immediate partner attention. LangChain dominated signal volume but drew a high-severity security disclosure (CVSS 8.8) that needs to be tracked to resolution this week.

---

Needs a partner this week

• Oasis — Acquired by Cyera for $1B, with the strategic rationale centred on controlling what AI agents can access as machine identities outnumber human ones in the enterprise. This is a major exit event. Action: congratulations call to the founding team immediately; confirm distribution timeline and LP comms.
• Clay — Closed a $115M Series D led by Wellington, Sequoia and CapitalG at a $7.1B valuation on the back of 4× revenue growth in 2025 and 17,000+ customers. Frontline's position is significantly marked up. Action: congratulations call to the team this week; prepare LP update note.
• Manna — Ceasing core drone delivery operations in Ireland citing planning and regulatory uncertainty; jobs expected to be lost, though the Dublin R&D centre remains. The same week the company received €18M in State backing and signed the Tulsa Fire Department as a customer, making the strategic picture complex. Action: partner call with the founder this week to understand the pivot plan, capital deployment and cap table implications of the State funding.
• LangChain — A CVSS 8.8 vulnerability ("AgentSmith") has been publicly disclosed in LangSmith's Prompt Hub, allowing malicious proxy servers to capture API keys and user prompts. With 9 negative signals in 30 days and 89 signals this week alone, this is the portfolio's highest-volume and highest-risk company right now. Action: reach out to the LangChain team this week to confirm patch status, customer impact and communications plan.
• Navan — Raised its fiscal 2027 financial forecast citing rising travel demand; NAVN also hit a 52-week high this week. Action: congratulatory check-in call with the team; partners should review the updated guidance ahead of any investor conversations.
• Roboflow — Astra auto-label feature hit a >$1M/yr annualised consumption run-rate within one week of launch. Action: congratulations call to the team; this is a landmark early commercial milestone for a new product line.

---

Capital and exits

Oasis was acquired by Cyera for $1B, with the deal rationale centred on non-human identity security as AI agents proliferate in the enterprise. This is the portfolio's largest exit event this period.

Clay closed a $115M Series D led by Wellington, Sequoia and CapitalG at a $7.1B valuation — more than double its valuation of 12 months prior — on the back of 4× revenue growth in 2025 and 17,000+ customers.

Manna secured €18M in State-backed funding, validating its technology at a national level and strengthening runway ahead of its international pivot. The timing is notable given the simultaneous Ireland exit announcement.

Navan (NASDAQ: NAVN) raised its fiscal 2027 financial forecast, citing rising travel demand. The stock hit a 52-week high this week, though analyst commentary flagged the stock as "pricey" following a 31% rise. Tidal Investments LLC reduced its holdings — assessed as routine rebalancing.

---

Commercial momentum

LangChain had the broadest product week in the portfolio. Key developments: open-sourced DeepAgents (sub-agents, task planning, durable LangGraph runs); released Deep Life Sci, an open-source agentic assistant for clinical scientists drawing on 600k+ studies and 29M PubMed abstracts; shipped the langchain-typesafe integration embedding TypeSafe AI's Jev classifier into the agent control loop; and published a v1.4.2 patch fixing tool-call loss in human-in-the-loop pipelines. On the partnership side, LangChain and MongoDB announced integration with Atlas for enterprise AI agents with vector search and persistent memory. Enterprise case studies published this week include Included Health (federated healthcare agents on LangGraph), Madrigal Pharmaceuticals, Abridge and Vizient — four healthcare enterprise references in a single week.

Roboflow had two meaningful product signals: the Astra auto-label feature crossed a >$1M/yr run-rate in its first week, and Auto Annotate is now powered by Google's Astra vision model, enabling prompt-based annotation across varied environments.

Telnyx launched an Email API giving AI agents a real email address on a developer-controlled domain (send, receive, read verification codes autonomously), and added support for the x402 protocol enabling AI agents to purchase voice and AI infrastructure services on a per-call basis with no account required. Telnyx also ranked fastest among four inference providers in a GLM-5.3 end-to-end latency benchmark (9.87s median, ~1.5× faster than the next competitor) and received a VentureBeat feature on its AI inference location thesis.

Manna signed the Tulsa Fire Department as a partner for emergency drone response — a meaningful new vertical in public safety.

Payslip launched an EU Pay Transparency Reporting Platform ahead of the EU Pay Transparency Directive compliance deadlines, a timely regulatory-driven product with a clear enterprise sales catalyst.

Flagright signed Codex (stablecoin FX) and Zento as named customers for AML compliance, and expanded its Codex compliance product with AI-powered stablecoin transaction monitoring. A separate partnership with Zento targets European entrepreneurs.

Navan announced a new partnership expanding flexible corporate travel booking options for enterprise customers.

Countingup is powering MoneySuperMarket's small-business banking accounts via a partnership with Grifin, extending its reach as a B2B banking-as-a-service layer.

Antithesis won WarpStream as a named customer for deterministic simulation testing, with WarpStream publicly endorsing Antithesis over Jepsen.

Siren announced a partnership with Ocient to deliver investigative intelligence for sovereign national security use cases.

Regal was featured in a Customer Experience Dive case study covering a mortgage lender's deployment of voice AI agents.

Flexcar generated a 22× spike in website traffic from a Netflix placement and opened its first Texas location in Dallas.

Inkitt launched a writer awards programme with an AI-assisted writing category.

---

People

Harrison Chase (Co-Founder and CEO, LangChain) gave a candid public interview this week acknowledging that LangChain built its LLM gateway a year too late and that this decision continues to cost the company competitively. He also discussed the limitations of sub-agents and LangChain's evolution since its 2022 origins. The admission is worth discussing at Monday's meeting for competitive context.

---

Risk register

• LangChain / LangSmith — "AgentSmith" vulnerability (CVSS 8.8): Malicious proxy servers in Prompt Hub can capture API keys and user prompts; patch status unconfirmed. Highest-priority security item in the portfolio this week.
• LangChain / LangGraph — payment tool authorisation gap: Published arXiv research finds that LangChain/LangGraph gates tool exposure by default but does not re-authorise individual call argument values, meaning an agent can send an unverified payment amount. Could prompt enterprise customers to delay agentic payment adoption.
• LangChain — BOLA vulnerability in agents: Third-party research demonstrates that prompt-based security rules fail to prevent Broken Object-Level Authorization attacks, with cross-account data extractable via WebSocket interception.
• Manna — Ireland operations shutdown: Ceasing core drone delivery flights in Ireland with expected job losses. Strategic and reputational risk in the home market; pivot plan and capital implications need to be understood urgently.
• Vanta — Comp AI raises $34M: A direct compliance-automation competitor has raised $34M to push into Vanta's core market. Competitive intensity is increasing.
• Telnyx — website quality criticism: A single public social post alleged Telnyx's marketing site was AI-generated ("slopfest"), potentially affecting top-of-funnel conversion. Low severity but worth a nudge to the team.

---

Scorecard movers

Company	Sector	Heat	Signals (7d)	Momentum	Max Impact (30d)
LangChain	AI & Data Infrastructure	🔴 Attention	89	+88	7
Clay	Sales & Marketing	🔴 Attention	48	+46	9
Telnyx	Developer Tools	🔴 Attention	25	+23	7
Vanta	Security & Compliance	🟠 Hot	20	+20	5
Roboflow	AI & Data Infrastructure	🔴 Attention	19	+19	7
Navan	Fintech & Payments	🔴 Attention	16	+7	8
Oasis	Security & Compliance	🔴 Attention	2	+2	10
Manna	Logistics & Mobility	🔴 Attention	4	+4	8
Flagright	Security & Compliance	🟠 Hot	6	+6	5
Flexcar	Logistics & Mobility	🟠 Hot	4	+4	5

---

Quiet corners

Healthcare & Life Sciences and Vertical AI each recorded zero signals in the last 30 days across all seven and six portfolio companies respectively — a check-in call with founders in both sectors is overdue, particularly given the pace of AI adoption in adjacent markets. Notable individual names with no signals this month include Evervault, Hopsworks, People.ai and Qualio, all of which operate in active competitive categories.

---

Watch next week

• Manna pivot clarity: The founder call this week should surface the capital deployment plan for the €18M State funding and the concrete timeline for US, UK and European market entry — follow up if no call has been scheduled by Wednesday.
• LangChain security patch confirmation: Monitor for an official patch notice and customer communications on the AgentSmith (CVSS 8.8) vulnerability; escalate if no public update by end of week.
• Oasis exit mechanics: Confirm distribution timeline with Cyera/Oasis and prepare LP communications; watch for any regulatory review announcements on the $1B deal.
• Clay post-round momentum: With $115M closed and a $7.1B valuation, watch for headcount announcements, new enterprise customer wins and any competitive response from GTM data peers.
• Navan public-market narrative: The stock is at a 52-week high with "pricey" valuation commentary circulating; monitor analyst coverage and any insider activity following the raised FY2027 guidance.