Software's Headless Future

Is software losing its head? Salesforce's recent announcement of exposing its APIs and launching a "headless" product suggests a strategic bet: in an agentic future, value resides in the data layer, not the user interface. While technically little appears to have changed, the move highlights a fundamental question: what remains when the UI is stripped away?

In the SaaS era, systems of record like CRMs were defensible because humans lived within their interfaces. This UI-driven stickiness enforced data hygiene and created shared organizational vocabulary. For decades, Salesforce sold features like dashboards and pipeline views, making the underlying database incidental. This muscle memory, driven by habit and embedded processes, became a powerful moat.

The advent of AI agents is poised to upend this model. These agents can read and write directly to underlying data, bypassing human-centric interfaces entirely. This shift renders traditional human-level factors like preferences and undocumented context obsolete, forcing a re-evaluation of what makes a system of record durable.

The Shifting Moat

Historically, software stickiness was built on human interaction: frequency of access, read-write capabilities, undocumented Standard Operating Procedures (SOPs), internal/external dependencies, and compliance criticality. A CRM, used daily and constantly written to, exemplifies high stickiness. Conversely, an Applicant Tracking System (ATS), largely write-once, has lower stickiness.

The impact of agents on CRMs, for example, is profound. AI agents can navigate these systems directly, making the UI's role in data coherence less critical. This raises questions about the true defensibility of incumbent systems. The ease of migrating an ATS pales in comparison to the complexity of replacing a CRM, let alone an ERP, which acts as a critical audit trail.

Traditionally, systems of record have not leveraged proprietary data or network effects as primary moats. Their defensibility stemmed from workflow complexity and the human layer. However, with agents capable of operating without a browser, needing only APIs and context, the landscape is changing.

The Agentic Future

Three paths are emerging for software buyers: sticking with incumbents and integrating agents, building custom systems of record, or adopting AI-native replacements designed for machine readability. The former is complicated by incomplete APIs and operational complexity.

In this new paradigm, human-behavior-driven factors fade. Agents may dismantle muscle-memory moats, but operational logic and context become paramount. Explicit rules, permissions, and process definitions are essential for agents to act safely.

Undocumented SOPs remain critical short-term, as they encode institutional logic agents need. Connectivity, however, shifts from human-workflow synchronization to cross-functional data stitching. Compliance-critical data remains a strong moat, as does the trust architecture enforced by identity and permissioning layers for agent-to-agent interactions.

New Defensibility Metrics

For AI-native startups, defensibility hinges on new factors. The ease of recreating a system of record's data is decreasing, though incumbents may erect API barriers. Proprietary data, uniquely generated by a product's actions and interactions, becomes a key differentiator. This isn't just imported data; it's data that reflects observed behavior and process outcomes.

Ownership of the "action layer", closing the loop from taking action to capturing outcomes and refining future decisions, offers significant defensibility. This closed-loop system generates unique data, improves with use, and becomes deeply embedded in workflows. Real-world execution capabilities further strengthen business models, creating a sticky ecosystem around operational connectivity.