AI
Security as a Built-In Loop, Not a Checkbox
Asha, who runs Microsoft’s AI platform, sees the same pattern in startups that build well: safety is always on, not opt-in.
“It is say an automatic on by default.” — Asha
Unit testing is part of the workflow, not a release gate. Continuous observability runs alongside the agent. Companies doing this report a side effect: their agents perform better because the feedback loop catches drift early. As AI moves from Q&A assistants toward agents that autonomously execute full jobs, the accountability surface grows. Waiting to bolt on safety after product-market fit means building technical debt with increasingly high stakes.
Infrastructure Decisions That Survive GPU Generations
ChatGPT runs on Azure Kubernetes Service. Brendan Burns, co-founder of Kubernetes and now CVP at Azure, used that as a benchmark: hyperscalers handle distributed inference, GPU scheduling, and automatic upgrades so startups focus on the model and the application.
The harder question is how to make technology choices when GPU generations shift every iteration. Brendan compared it to mid-1990s processor churn. His answer: changing your stack every four weeks kills execution. Pick a platform partner that covers major protocols and frameworks, commit to it, and stay focused on shipping value to users.
What M12 Actually Evaluates
Michael Stewart runs M12, Microsoft’s venture fund, and he filters out founders fast. Red flag: wanting M12’s name on a cap table or burning cloud credits before moving on. Green light: founders who articulate a differentiated idea meaningful to Microsoft in two to three years.
“really these are marriages, not dating.” — Michael Stewart
M12 looks for culture alignment around safety and governance, not just traction metrics. Two enterprise customers moving from pilot to system-of-record matters more than $100 million ARR. Revenue quality beats revenue velocity.
Selling to the Enterprise: Compliance Before the Pitch
Brendan Burns laid out the most common way enterprise deals die: the POC works, everyone loves it, and then the CSO asks about information egress protection or network deployment requirements. Without fine-grained access control and auditing, the conversation stops before it starts.
“You can’t bolt on operations.” — Brendan Burns
Operations have the same problem. Enterprise customers expect 24/7 SRE-level reliability. That can’t be bolted on after launch. Asha added the counterweight: security compliance earns the enterprise but not the developer. The most successful companies in the next cycle will need both.
Microsoft’s Go-to-Market Programs for Startups
Three tiers. Microsoft for Startups: 120,000 members, Azure credits, LLM access, prioritized GPU allocation. ISV Success: gets startups onto the Azure Marketplace, where enterprise buyers already shop, removing the need for a startup sales team. Pegasus: invitation-only, roughly 150 companies selected from that 120,000, paired with solution architects to accelerate product-market fit in cybersecurity, AI, healthcare, and retail.
At the co-sell layer, 59,000 Microsoft sellers can attach a startup’s product to their own enterprise deals. Ross Kennedy’s caveat: the motion only works when a startup is genuinely solving customer pain, not treating Microsoft as a lead funnel.
Founder Perspectives: What the Partnership Delivers
Bria AI built a licensed visual generative AI platform where training images are attributed and artists paid on generation, a Spotify-style royalty model for image AI. Founder Yair chose Azure because enterprise clients require fully copyright-safe outputs. Microsoft’s credibility in regulated procurement mattered more than compute credits.
Vitaly Goran, CEO of Ferris AI, described the Pegasus program from inside. About 150 companies are selected from 120,000 in the Microsoft for Startups pool. SOC 2 is table stakes. Pegasus provides what credits can’t: specific knowledge of what each enterprise prioritizes in its security questionnaire, which means fewer wasted deals.
Notable Quotes
It is say an automatic on by default. Asha · ▶ 6:31
really these are marriages, not dating. Michael Stewart · ▶ 18:10
tech up and not customer up. Asha · ▶ 21:18
You can’t bolt on operations. Brendan Burns · ▶ 30:49
Key Takeaways
- Agent safety must run continuously from day one; treating it as built-in observability makes agents perform better, not just safer.
- Enterprise procurement requires fine-grained access control, network deployment options, and 24/7 operations before the pitch lands.
- M12 and Microsoft product teams value deep customer traction and genuine partnership intent over ARR velocity or logo count.