GEO/AEO weekly intelligence · 2026-09-23

Cycle 29 is a Rotation-D structural cycle for enterprise tooling: two calendar T-0 markers frame it — the Colorado ADAI (SB 26-189) DOL revised proposed rulemaking draft is due today (T-0 confirms; formal hearing Oct 26, effective Jan 1, 2027), and the GSA NSA-MCP procurement compliance deadline is T-7 days (Sept 30). Inside the window, the enterprise-tooling M&A/funding stack moved decisively. Profound raised a $180M Series D at a $1.8B valuation on September 15 (Sequoia Capital + Kleiner Perkins lead, with Lights

GEO/AEO/Agent-SEO Information Integrity Tracker — Cycle 29, v29.0

Tracker ID: geo-aeo-agentseo Series: geo-aeo Cycle: 29 (content-based; C28 = 2026-09-16 rotation C; on-cadence 7-day window) Rotation Slot: D — Enterprise Tooling deep dive Date: 2026-09-23 (Wed 09:33 CEST, on-cadence) Prompt Version: v0.3.3 Previous Report: geo-aeo-tracker_2026-09-16.md (C28, rotation C) Layer 4 phase_flip_value: 0.50 (HOLDS — 12 cycles at 0.50) Content window: 2026-09-17 → 2026-09-23 (7 days)

1. Executive Summary

Cycle 29 is a Rotation-D structural cycle for enterprise tooling: two calendar T-0 markers frame it — the Colorado ADAI (SB 26-189) DOL revised proposed rulemaking draft is due today (T-0 confirms; formal hearing Oct 26, effective Jan 1, 2027), and the GSA NSA-MCP procurement compliance deadline is T-7 days (Sept 30). Inside the window, the enterprise-tooling M&A/funding stack moved decisively. Profound raised a $180M Series D at a $1.8B valuation on September 15 (Sequoia Capital + Kleiner Perkins lead, with Lightspeed, Khosla, Saga, Evantic, South Park Commons), roughly doubling the company's February 2026 $96M Series C valuation of $1B — the largest single-round in the pure-play GEO/AEO category on record and the first credible unicorn-plus for the category. That reframes the compression thesis that has run since C20: enterprise-tier compression continues at the bundling end (Adobe + Semrush + Ahrefs + Cloudflare + Google Search Console AI), but the pure-play top of the market is instead accelerating venture pricing at the leader tier. The two motions are not incompatible — they say the middle collapses first while a handful of leaders capture escape velocity.

On the L4 side, the second Model Context Protocol implementation entered CISA's KEV catalog with CVE-2026-48710 (Kludex Starlette HTTP request/response smuggling) — part of the same September 2 seven-flaw batch as LiteLLM's CVE-2026-59822 (both KEV-added the same day; both federal-remediation-clocked). C28 called CVE-2026-59822 the "first-ever MCP on KEV"; this cycle records that the batch was in fact two MCP-adjacent entries the same day — LiteLLM + Kludex Starlette — a correction and a strengthening of the federal-tempo precedent. Separately, the September 16 CVE brief adds CVE-2026-59971 (designcomputer/mysql_mcp_server) and CVE-2026-53710 (IBM mcp-context-forge), both CVSS 10 — perfect-score MCP-server flaws not yet on KEV but on the direct path. And an active campaign filed 23 malicious MCP-server pull requests across unrelated AI/developer-tool projects in 74 minutes from a single account, adding a marketplace-poisoning vector distinct from npm supply-chain (postmark-mcp Sept 2025). phase_flip HOLDS 0.50 for a 12th cycle — Microsoft's signed-manifest MCP mandate remains the sole platform-default tool-manifest-verification-class control, with 7 days to the GSA Sept-30 forcing function. Anthropic Stainless is now confirmed acquired ($300M+) with generator scope covering official SDKs for Anthropic + OpenAI + Google + Cloudflare + Meta plus MCP servers — a load-bearing baseline change for the C28 "candidate second-vendor default" list. RVI 3 (Colorado T-0, plus the KEV correction to two MCP entries, plus CVSS-10 MCP-server flaws; regulatory calendar otherwise on autopilot between VLOSE Day 23 and GSA Sept-30).

2. Flash Incident Buffer

Profound Series D $180M @ $1.8B (2026-09-15). Sequoia Capital and Kleiner Perkins lead, with Lightspeed, Khosla, Saga, Evantic, South Park Commons participating. Largest pure-play GEO/AEO round on record; valuation nearly doubles the February 2026 Series C ($96M @ $1B). Confidence: 5/5.

CVE-2026-59971 (mysql_mcp_server) + CVE-2026-53710 (IBM mcp-context-forge) — CVSS 10 (2026-09-16). Two perfect-score MCP-server flaws surfaced in the same CVE brief; not KEV-listed at cycle close but the third and fourth MCP-implementation entries of the September batch (following the two Sept-2 KEV additions). Confidence: 4/5.

Anthropic Sept 22 outage — Mythos 5.1 / Fable 5.1 / Opus 5 elevated-error incident (12:57 UTC). Marked resolved same day; 51 user-reports/24h before resolve. Adds to the Sept 3 cross-lab flash-incident carried from C28 as continuing outage cadence. Confidence: 4/5.

Chinese vendor Z.ai ZCode silent-workspace-upload disable (2026-09-22). ZCode coding assistant was silently packaging and uploading local project workspaces; feature disabled after user discovery. Adds a Chinese-agent-IDE data-exfiltration case to the Rotation-C taxonomy carried at C28 (postmark-mcp / MCPTox class). Confidence: 4/5.

3. Key Numbers Table

4. Regulatory Velocity Index

Cycle 29 RVI total: 3 new actions/clauses (Colorado ADAI T-0; CISA KEV batch two-MCP correction; +1 baseline strengthening on the LiteLLM/Kludex line as the count widens). ↓ from C28's 4. Regulatory calendar is on autopilot between VLOSE Day 23 and GSA Sept 30; enterprise-tooling movement is the load-bearing story.

5. Changes Since Last Report

NEW (not in Cycle 28 baseline)

• Profound Series D $180M @ $1.8B on Sept 15, Sequoia + Kleiner Perkins lead, with Lightspeed, Khosla, Saga, Evantic, South Park Commons. Roughly doubles February 2026 Series C valuation ($96M @ $1B). Largest pure-play GEO/AEO round on record. Compression thesis complicated — bundling continues at the middle, but the leader captures escape-velocity venture pricing. Confidence: 5/5.
• KEV correction — TWO MCP-adjacent entries Sept 2, not one: CVE-2026-48710 (Kludex Starlette HTTP request/response smuggling) and CVE-2026-59822 (LiteLLM MCP auth bypass). Both federal-remediation-clocked Sept 16 under BOD 22-01. This is a strengthening of the C28 "first MCP on KEV" precedent — the batch was already class-of-two. Confidence: 4/5.
• CVE-2026-59971 (designcomputer/mysql_mcp_server, CVSS 10) + CVE-2026-53710 (IBM mcp-context-forge, CVSS 10) — Sept 16 CVE brief. Not yet KEV-listed at cycle close; both are direct MCP-server implementations; the count of high-severity MCP-implementation flaws widens on the Sept-2 precedent. Confidence: 4/5.
• Malicious MCP-server PR campaign — 23 pull requests filed by a single account across unrelated AI/dev-tool projects in 74 minutes. Marketplace-poisoning vector distinct from npm supply-chain (postmark-mcp Sept 2025). New Rotation-D taxonomy line under "MCP marketplace supply-chain". Confidence: 3/5.
• Anthropic Stainless acquisition confirmed at $300M+; scope includes SDKs for Anthropic + OpenAI + Google + Cloudflare + Meta + MCP servers. Baseline change for the C28 "candidate second-vendor default" list — Anthropic now owns the code-generation pipeline for a large slice of the SDK/MCP-server surface. Confidence: 4/5.
• Sitecore Sept 2026 updates — Scrunch Knowledge Studio ↔︎ SitecoreAI DAM early-access integration; turns approved DAM source documents into structured AI-ready knowledge documents. First post-acquisition product integration (Sitecore acquired Scrunch ~$225M, June 3). Confidence: 4/5.
• Ahrefs Brand Radar September upgrades — Sept 10 Google Sheets export + free-tier access to Webmaster Tools users; Sept 11 Report Builder Brand Radar 2.0 Mentions charts; Sept 12 Topics report + Overview widget grouping queries by parent topic from Keywords Explorer. Ahrefs API deprecation: parameter change Sept 30 (new AI-adjusted volume). Confidence: 5/5.
• Semrush 2026 AI Visibility Index expanded to 126M U.S. AI-search prompts (Jan–Apr 2026) across 22 industry benchmarks; 45% of marketing leaders cannot accurately measure AI-answer visibility / only 9% have full toolkits. Extends the September 2025 initial 2,500-prompt Index by ~50,000× in sample. Confidence: 4/5.
• xSeek acquires LLMonade (Sept 15) — Canadian SaaS platform buys Montreal competitor in AI-discoverability space. Second GEO-tool M&A of the window (with Profound Series D as funding twin). Confidence: 4/5.
• Salesforce → Contentful announcement (Dreamforce 2026) — composable content layer for Agentforce; adjacent to pure-play GEO but structural for enterprise AEO content pipelines. Confidence: 3/5.
• Anthropic Sept 22 outage — elevated errors 12:57 UTC on Mythos 5.1 / Fable 5.1 / Opus 5; resolved same day. Continues cadence from C28 (Sept 3 cross-lab class flash-incident). Confidence: 4/5.
• Z.ai ZCode silent-workspace-upload disable (Sept 22) — Chinese-vendor agent-IDE data-exfiltration case. Adds to Rotation-C taxonomy (agent-IDE / MCP-marketplace-poisoning class). Confidence: 4/5.
• Priority Technology $1.6B PE take-private (Sept 22) — adjacent-not-GEO but load-bearing for the Rotation-D M&A calendar as the enterprise-tooling wave crests. Confidence: 3/5.
• Otterly.AI pricing tiers confirmed — $29 / $189 / $489 / $1,000+ Enterprise. Peec AI annual $80 / $205 / $420 vs monthly $95 / $245 / $495. Both mid-market entrants; consistent with the $337/mo platform average carried since C13. Confidence: 4/5.
• BrightEdge Copilot + Autopilot — enterprise stack now spans SEO workflow + tech audit + keyword intelligence + AI-visibility + citation monitoring + trend + content optimization; Autopilot automation layer. Rotation-D Tier-1/2 boundary confirmed. Confidence: 3/5.
• Adobe Brand Visibility 10-LLM-family scope confirmed — includes ChatGPT, Perplexity, Google AI Mode, Anthropic Claude, Microsoft Copilot + 5 more; layers Semrush AI Optimization data on top of LLM Optimizer. Baseline detail post-June 17 announce. Confidence: 4/5.

UPGRADED

• Compression thesis — now four-directional-plus-leader-decoupling. Bundling compression continues (Adobe + Semrush + Ahrefs + Cloudflare + Google Search Console AI), but Profound Series D at $1.8B is the first datapoint where a pure-play leader escapes the compression by absolute dominance of ecosystem mind-share. Suite-bundling + first-party + incumbent-SEO + M&A multiple + leader-decoupling.
• HubSpot AEO Grader — from C27 "acquisition-fueled entry" to fully-commercialized product line: standalone $50/mo tier plus 28-day free trial (25 prompts / 3 engines), expanded from April 2026 launch (10 prompts / ChatGPT only). Marketing Hub Pro (25 prompts) / Enterprise (50 prompts) inclusion holds.
• Sitecore + Scrunch — from "Core 4 / Enterprise 9 engine tiers" (C27) to first product integration shipped (Sept 2026 changelog: Scrunch Knowledge Studio ↔︎ SitecoreAI DAM early access). Confirms the $225M acquisition thesis is converting to product velocity.
• Cloudflare AEO stack — Sept 15 default block Day 8 at cycle close; Cloudflare's 2026 agentic-internet report confirms >50% of Internet traffic is now non-human (first-time crossing) and Cloudflare fronts ~20% of web domains — scale-of-impact context for the Sept-15 defaults.
• CISA BOD 26-04 detail — 4-factor risk-scored model (public exposure, KEV status, automatability, technical impact) with 3-day fix for all-four-factor CVEs, 14d/60d/next-upgrade tiers. FedRAMP mandatory alignment same Dec 7 date. Sharpens the G-T4 fire test.
• Ahrefs Brand Radar — from Aug 2026 baseline (400M+ monthly prompts / 6 surfaces) to September update-heavy free-tier expansion (Webmaster Tools users get it free) and Report Builder / Topics feature velocity — pricing pressure on Peec + Otterly tier now visible.

DOWNGRADED

• "CVE-2026-59822 first MCP on KEV" framing (C28) — DOWNGRADED to "first LiteLLM entry"; CVE-2026-48710 Kludex Starlette same-day KEV addition means the Sept-2 batch was already MCP-count-two. Rotation-D reread of the KEV batch identifies both as MCP-ecosystem-adjacent. Correction, not contradiction.

CONFIRMED

• phase_flip 0.50 — twelfth cycle; Microsoft signed-manifest MCP mandate remains sole platform-default tool-manifest-verification-class control.
• Cloudflare Sept 15 default block — Day 8 at cycle close; ecosystem impact still measuring; scope-of-impact watch-item unresolved.
• MCP 2026-07-28 spec FINAL — +57 days at cycle close.
• EU AI Act Article 50 — Day 52 live.
• ChatGPT VLOSE — Day 23 of 4-month compliance clock (December 2026 practical compliance).
• CISA BOD 26-04 Dec 7 remediation phase unchanged (G-T4 fire test).
• France Google AI Mode + AIO — Day 62 live (baseline correction C28 holds).
• Chinese GEO ¥3B market / 12× YoY — Sept 21 Ohsem 12-provider methodology-transparency ranking publishes as a proxy for compliance sorting.
• x402 Foundation — Chainalysis 100M-on-Base cleared Q1 2026 (C28 baseline); mid-July x402.org dashboard snapshot ~75M tx / $24M trailing-30d.
• Great American AI Act — still discussion-draft only; potential December floor vote per Rep. Obernolte July signal; no September floor action within window.
• Google search updates — August 2026 spam update remains most recent ranking event; no new spam or core update in September per Google Search Status Dashboard.

STALE / CORRECTED

• CORRECTION: C28 stated "first Model Context Protocol implementation ever on CISA KEV" for CVE-2026-59822 (LiteLLM). The Sept-2 seven-flaw KEV batch contained TWO MCP-ecosystem entries: CVE-2026-48710 (Kludex Starlette) and CVE-2026-59822 (LiteLLM). Both federal-remediation-clocked Sept 16. Correction strengthens the MCP-federal-tempo precedent (not the reverse).

X-Pulse (Topics 11 + 12)

Native X search unavailable on this substrate; pulse reconstructed from forum/news coverage.

• Topic 11 (Enterprise Tooling): Practitioner-side dominant thread is Profound Series D vs Peec Series A gap widening; Cloudflare default block Day 8 chatter shifts from "will it be blunt?" to "SearchGPT/Perplexity referral traffic first-week data unclear"; Ahrefs Brand Radar free-tier expansion widely discussed as pricing lever on Peec/Otterly mid-market.
• Topic 12 (MCP security): CVE-2026-48710 Kludex Starlette reframing as "MCP-count-two on KEV" the dominant correction; CVSS-10 mysql_mcp_server + IBM mcp-context-forge Sept-16 threads active; 23-PR malicious-MCP-campaign discussion emerging as npm-postmark-mcp-successor-vector.

6. Market Map

White-Hat GEO/AEO Agencies

Tier-1/2 rosters and pricing carried from C13 → C28 (Monitor $1K–$2.5K/mo; Active $3K–$8K/mo; Full-Service $8K–$25K+/mo; platform average $337/mo). Compression thesis complicates with Profound Series D $1.8B leader-decoupling (Rotation-D upgrade) — pure-play top of the market escapes the bundling compression via absolute mind-share dominance, while the middle continues collapsing under Adobe/Semrush/Ahrefs/Cloudflare/GSC-AI infrastructure-tier stacks.

Enterprise Tooling

• Tier 1 (Full-stack + defensible moat): Adobe Brand Visibility (LLM Optimizer + Semrush AI Optimization data, 10 LLM families); Sitecore + Scrunch (Core 4 / Enterprise 9 engine tiers; Sept-2026 DAM ↔︎ Knowledge Studio integration shipped); Profound (Series D $180M @ $1.8B — new Tier-1 entry post-round).
• Tier 2 (Full-stack, competing on pricing / infrastructure): Cloudflare AEO stack (AEO Visibility Dashboard + Agent Readiness + Sept-15 default block + Pay Per Use); BrightEdge (Content Advisor + Copilot + Autopilot); HubSpot AEO Grader (Warmly + XFunnel acquisitions; $50/mo tier).
• Tier 3 (Mid-market pure-play): Peec AI ($21M Series A / $200M valuation / $4M ARR — Rotation-D specialty is product/entity-level monitoring, SaaS/e-comm); AthenaHQ (narrative/tone analysis; Shopify integration; e-comm focus); Otterly.AI ($29/$189/$489/$1K+ tiers; budget-friendly entry); Bluefish AI (enterprise-focus lens on GEO); GenOptima; Emberos ($1.2M seed; powers Stagwell Search+ — 57% AI Overviews lift on early software client); Webflow AEO (private beta + Vidoso.ai acquisition).
• Incumbent (Ahrefs family): Ahrefs Brand Radar — September upgrade wave (free-tier extension to Webmaster Tools users; Google Sheets export; Report Builder Brand Radar 2.0 charts; Topics report + Overview widget); 400M+ monthly prompts / 6 surfaces baseline. API parameter deprecation Sept 30 (new AI-adjusted volume).
• First-party / operator: Google Search Console generative-AI performance reports (worldwide rollout complete Aug 31; adds AI-Mode + AI-Overviews + Discover impressions view; no click data; block-toggle in production).
• New M&A this window: xSeek → LLMonade (Sept 15, Canada); Salesforce → Contentful (Dreamforce 2026, adjacent-composable-content for Agentforce).

Black/Grey-Hat (carry from C28 with adds)

• Chinese GEO grey market — ¥250M → ~¥3B YoY (12×); Ohsem Sept-21 published a 12-provider methodology-transparency + pricing ranking (compliance-proxy for buyers).
• Chinese agent-IDE data-exfiltration — Z.ai ZCode silent-workspace-upload disable Sept 22 adds a Chinese-vendor case to the C28 postmark-mcp / MCP-marketplace-poisoning taxonomy.
• MCP marketplace poisoning — 23-PR-in-74-min single-account campaign (Sept 2026) as npm-successor vector; postmark-mcp (Sept 2025) baseline anchor holds; MCPTox 36.5% avg / 72.8% peak ecosystem-scale ASR (C28).
• Western — press-release flooding (Muck Rack 3.5× baseline); listicle farms inside Google spam boundary (May-15 2026); parasite subfolders degrading (Google now scores site sections independently, Sept 2026 SEO commentary).

7. Tactics Taxonomy (delta only)

All C13–C28 entries carried unchanged. New/refined for Rotation D:

Tier 1 — Active in Production, Named Attack Class

Add:

• Malicious MCP-server pull request campaigns — 23 PRs in 74 min from a single account across unrelated projects (Sept 2026). New sub-vector under MCP marketplace supply-chain, distinct from npm (postmark-mcp Sept 2025) — targets Git-hosted MCP servers directly through code-review pipelines.
• Chinese agent-IDE silent data-exfiltration — Z.ai ZCode Sept-22 case; enterprise-tooling-adjacent because the exfiltration surface is the coding-agent workspace itself, where enterprise GEO/AEO IP concentrates.

Tier 2 — Demonstrated / Research (carry)

All C28 entries carried. GEO Defender arXiv 2609.02964 (Sept-2 preprint) refined: retains 94.12% of benign-evidence use, generalizes to unseen attacks, does not require target-LLM fine-tuning. arXiv 2609.25189 GroundedGEO newly-indexed in the same September cluster (evidence-gap auditing of generative-search rankings) — Rotation-D adjacency.

Tier 3 — Theoretical / Early Signal (carry)

• llms.txt-driven cloaking — Google 15 June 2026 optimization guidance: "You don't need to create new machine readable files"; Google Search does not consume llms.txt. Rotation-D reread: Perplexity + Claude + coding agents do use llms.txt — cloaking asymmetry between search-engine (Google-neutral) and answer-engine (consumption-positive) provides a real GEO vector even though Google-audience use is nil.

8. Five-Layer Poisoning Taxonomy (delta only)

• L1 (Weight): unchanged.
• L2 (Retrieval): Cloudflare Sept-15 default block Day 8 — first-week ecosystem impact chatter reframed (see X-Pulse) as "measurement lag" rather than "under-scope"; ACM WebConf 2026 >99.78% retrieval-phase filter (C28) carried.
• L3 (Memory): unchanged.
• L4 (Context): CRITICAL — ESCALATING FURTHER. Sept-2 KEV batch now correctly counted as 2 MCP entries (Kludex Starlette + LiteLLM); Sept-16 CVE brief adds two CVSS-10 MCP-server flaws (mysql_mcp_server + IBM mcp-context-forge); 23-PR malicious-MCP-campaign adds a marketplace-poisoning surface. No new platform-default defense; phase_flip HOLDS 0.50 (12 cycles). GSA Sept 30 (T-7d) remains the nearest structural forcing function.
• L5 (User): COLLAPSE CONTINUING — with structural counter-currents. Cloudflare Sept-15 defaults + Adobe Brand Visibility + Google Search Console AI + Ahrefs Brand Radar free-tier all extend measurement-and-mitigation surface to operator/publisher without addressing generation-side vulnerabilities; Comet Plus $42.5M/80-20 baseline (C28) holds but no publisher-side revenue disclosure this window.

phase_flip HOLDS 0.50 — 12th cycle. GSA Sept 30 (T-7d) remains the nearest structural forcing function for elevation to 0.70. Anthropic Stainless acquisition ($300M+, SDK/MCP-server generator scope across 5 major platforms) creates a code-generation-pipeline second-vendor-default candidate distinct from runtime-verification second-vendor-default candidates — new adjudication input.

9. Agent-Facing Web Evolution (delta only)

• Cloudflare Sept 15 — Day 8 live; agent-traffic-share >50% of Internet traffic per Cloudflare 2026 agentic-internet report. First-week impact chatter dominant on measurement lag.
• MCP spec 2026-07-28 — +57 days; two more MCP CVEs (CVSS 10) surfaced but not KEV-listed at cycle close.
• WebMCP / MSTI (C27 baseline) carried.
• x402 — no new milestone within window; mid-July x402.org ~75M tx / $24M trailing-30d snapshot carried.
• Google Home MCP (Sept 16) — smart-home surface for Antigravity/Claude/OpenClaw agents; adds domestic-agent surface distinct from enterprise MCP but confirms Google's MCP posture as consumer-adjacent.

10. Microsoft / MCP Defense Follow-up

• CVE-2026-48710 (Kludex Starlette) + CVE-2026-59822 (LiteLLM) — Sept-2 KEV batch corrected to two MCP-ecosystem entries. Both federal-remediation-clocked Sept 16 under BOD 22-01.
• Microsoft signed-manifest MCP mandate — sole platform-default tool-manifest-verification-class control at 0.50 rung for the 12th cycle. Anthropic Stainless acquisition creates a SDK-generator-side candidate defense in the pipeline (code-generation-pipeline hardening).
• BOD 26-04 — 4-factor risk model with 3-day fix for all-four-factor CVEs; Dec 7 full compliance = G-T4 fire test.

11. Platform Defenses (delta only)

Western Platforms

• Google — no new spam or core update in September; AI Mode folding into AI Overviews; link-carousel cards for developing stories (Sept). llms.txt Google-Search-nonconsumption reconfirmed in 15 June 2026 guidance.
• Microsoft — no new material within window; signed-manifest mandate carried.
• Anthropic — Sept 22 outage (Mythos/Fable/Opus 5, resolved same day). Stainless acquisition $300M+ confirmed. September threat report documents attacker "delegating multiple stages" to AI systems.
• OpenAI — VLOSE Day 23; no new material within window.
• Perplexity — Comet Plus $42.5M / 80-20 baseline carried; CNN partnership dispute (May 2026 lawsuit) noted; no updated partner list published.
• Cloudflare — Day 8 of Sept-15 defaults; AEO Visibility Dashboard Day 48; agentic-internet-bot report 2026 published (>50% non-human traffic).

Chinese Platforms

• Ohsem Sept-21 12-provider methodology + pricing ranking published — third-party compliance-proxy signal.
• Z.ai ZCode silent-workspace-upload disable Sept 22 (Chinese-agent-IDE data-exfiltration case).
• SAMR / CAICT — no new named enforcement within window.

12. Regulatory Landscape (delta only)

• US — Colorado: T-0 today — DOL revised proposed rulemaking draft due Sept 23; hearing Oct 26; effective Jan 1, 2027.
• US — CISA: BOD 22-01 clock closed on Kludex Starlette + LiteLLM (Sept 16); BOD 26-04 Phase III Dec 7 unchanged (4-factor risk model / 3-day/14d/60d tiers / FedRAMP alignment same date).
• US — GSA: T-7d.
• US — Great American AI Act: discussion-draft only; possible December floor vote per Obernolte-Trahan July signal. No September floor action.
• EU — DSA: ChatGPT VLOSE Day 23; December 2026 practical compliance.
• EU — AI Act Art. 50: Day 52 live.
• France: Day 62 live.
• UK — CMA: 9-month implementation continues.
• China: no new named enforcement.
• International — FSB: October 2026 final report = G-T1 fire test; Fed Vice-Chair Bowman July remarks anchor US position.

13. Enterprise Tooling (delta only)

Full Rotation-D deep dive follows in Section 14. Delta only here:

• Profound Series D creates first pure-play GEO/AEO decacorn-trajectory candidate at $1.8B.
• Sitecore/Scrunch first product integration ships (Sept 2026, DAM ↔︎ Knowledge Studio early access).
• Ahrefs Brand Radar goes free-tier for Webmaster Tools users (Sept 10) — pricing pressure on Peec + Otterly mid-market.
• HubSpot AEO 28-day trial expanded to 25 prompts / 3 engines.
• BrightEdge Copilot + Autopilot full-stack enterprise AEO (SEO workflow + audit + keyword + AI-visibility + citation + trend + content optimization).
• xSeek → LLMonade M&A (Sept 15) adds a second-mover consolidation datapoint.

14. Rotation D Deep Dive — Enterprise Tooling (2026-09-17 → 09-23 window emphasis)

Category structure

Pricing structure snapshot

Funding-and-M&A punch list, H2 2026

• Sitecore ← Scrunch AI ~$225M (June 3) — reference multiple.
• Adobe ← Semrush ~$1.9B (April 28 closed) — suite-bundling anchor.
• HubSpot ← Warmly (June 30 announced) — GEO/AI-search bolt-on.
• HubSpot ← XFunnel (2025-10-31) — earlier bolt-on.
• Webflow ← Vidoso.ai (March 12) — website-builder-native.
• Anthropic ← Stainless ($300M+, in-window confirmed) — SDK/MCP-server code-generation pipeline.
• xSeek ← LLMonade (September 15) — consolidation begins.
• Salesforce ← Contentful (Dreamforce 2026, adjacent-composable-content).
• Peec AI Series A — $21M / $29M total / $200M valuation / $10M ARR (July 2026 window; NY office).
• Profound Series C — $96M / $1B valuation (February 2026).
• Profound Series D — $180M / $1.8B valuation (September 15, 2026) — largest pure-play GEO/AEO round on record.

Rotation-D synthesis

Three structural reads: (1) Compression continues at the middle, but the leader escapes. The bundling wave (Adobe/Semrush + Ahrefs Brand Radar free-tier + Cloudflare AEO + Google Search Console AI + BrightEdge Autopilot + HubSpot AEO Grader) tightens the middle floor for pure-play mid-market entrants (Peec, Otterly, AthenaHQ). But Profound Series D at $1.8B is the first datapoint where the pure-play top of the market escapes via absolute mind-share dominance. Compression thesis upgrades to "four-directional-plus-leader-decoupling". (2) Ahrefs is now the pricing lever on mid-market pure-play. September 10 free-tier extension to Webmaster Tools users, plus Google Sheets export and Report Builder 2.0 charts, plus Topics report, gives Ahrefs a data-plus-workflow bundle that Peec + Otterly cannot match at their pricing tier — the mid-market floor becomes brittle. (3) M&A shifts from acquisition of pure-play into consolidation of consolidators. Sitecore-Scrunch (June) and Adobe-Semrush (April) were pure-play acquisitions by enterprise suites; xSeek-LLMonade (Sept 15) is a mid-market-to-mid-market consolidation move — the second-mover phase of the M&A cycle begins. Salesforce-Contentful is adjacent-composable-content but confirms that enterprise-suite buyers are now assembling delivery pipelines (Agentforce) rather than acquiring pure-play tooling.

15. Maturity Classification (delta only)

16. Convergence with Agent Commerce (delta only)

• Anthropic Stainless acquisition creates a code-generation-pipeline for SDKs across Anthropic + OpenAI + Google + Cloudflare + Meta — the same pipeline that generates MCP servers. Distinct from the runtime-verification second-vendor-default candidates.
• Cloudflare agentic-internet-bot report 2026 — >50% Internet traffic non-human; Cloudflare AEO stack now the reference monetization-plus-defense-plus-measurement full stack.
• x402 — mid-July x402.org ~75M tx / $24M trailing-30d snapshot; Chainalysis 100M cumulative on Base Q1 (C28); ecosystem branching Algorand/Solana continues.
• Google Home MCP (Sept 16) adds consumer-domestic MCP surface distinct from enterprise.

17. Cross-Tracker Handoff

• agent-advertising-tracker → Profound Series D $180M @ $1.8B (largest pure-play GEO round); Ahrefs Brand Radar Sept-update wave (free-tier for Webmaster Tools users); Cloudflare Day-8 defaults + agentic-internet report (>50% non-human); Sitecore DAM ↔︎ Scrunch Knowledge Studio ships.
• agent-commerce-tracker → Anthropic Stainless $300M+ (SDK/MCP-server code-generation pipeline); x402 mid-July snapshot; two more MCP CVEs (CVSS 10) Sept 16; KEV batch correction to two MCP entries.
• agent-native-arrival-tracker → Cloudflare Day-8 defaults; Cloudflare 2026 agentic-internet report (>50% non-human traffic first-time crossing); Google Home MCP Sept 16.
• digital-silk-roads-tracker → Z.ai ZCode silent-workspace-upload disable (Sept 22); Ohsem Sept-21 Chinese-GEO 12-provider methodology-transparency + pricing ranking.
• sovereign-events-scout → Colorado ADAI T-0 today (DOL draft due; hearing Oct 26; effective Jan 1, 2027); Great American AI Act no September floor action.
• model-intelligence-tracker → CVE-2026-59971 (mysql_mcp_server) + CVE-2026-53710 (IBM mcp-context-forge) both CVSS 10 Sept 16; Anthropic Sept-22 outage on Mythos 5.1 / Fable 5.1 / Opus 5.
• Georg (🍐) → G-T4 fired-adjacent (holds) — Sept-2 KEV batch correction (two MCP entries: Kludex Starlette + LiteLLM) strengthens federal-tempo-MCP precedent; BOD 26-04 detail refined (4-factor risk / 3-day fix / Dec 7 compliance); test still Phase III Dec 7. G-T1 adjudication remains pending — FSB October final = fire test. G-T3 not fired. New attack-graph nodes: two MCP CVEs on KEV; two CVSS-10 MCP-server 0-days; 23-PR malicious-MCP campaign; Anthropic Stainless SDK/MCP-generator pipeline consolidation.

18. Georg Trigger Status

Georg message (C29): No trigger fired — no routing message sent this cycle (per protocol, route on fire). New G-T1 adjudication input carries; new G-T4 adjacent evidence (KEV batch correction + BOD 26-04 detail) and Anthropic-Stainless SDK/MCP-generator-pipeline consolidation logged in section 17 for next constellation sync.

19. Validation Alerts

1. Profound Series D valuation — multi-outlet primary-confirmed for $180M / $1.8B; Sequoia + Kleiner Perkins lead; February 2026 Series C ($96M @ $1B) baseline holds.
2. KEV MCP-count correction — Sept-2 seven-flaw batch: CVE-2026-48710 (Kludex Starlette) and CVE-2026-59822 (LiteLLM) both MCP-ecosystem-adjacent; correction, not contradiction; Forkast, Yahoo Tech, CryptoRank all count "three of seven" as AI-infrastructure-targeting.
3. CVSS-10 MCP-server 0-days — cvebrief.com Sept 16 primary; CVE-2026-59971 (mysql_mcp_server) + CVE-2026-53710 (IBM mcp-context-forge). Not KEV-listed at cycle close.
4. 23-PR malicious-MCP campaign — Adversa AI Sept 2026 primary; corroborated by Practical DevSecOps.
5. Anthropic Stainless acquisition — public knowledge (developer coverage + timeline compilations); $300M+ figure widely reported; scope of code-generation pipeline (Anthropic + OpenAI + Google + Cloudflare + Meta + MCP servers) primary from Stainless customer list.
6. Ahrefs Brand Radar September updates — Ahrefs newsletter primary; four separate feature-drops between Sept 10 and Sept 12.
7. Semrush 126M-prompt AI Visibility Index — Semrush press release primary; 22 industries + 45% cannot-measure / 9% full-toolkit stats primary.
8. Sitecore DAM ↔︎ Scrunch Knowledge Studio — FettesPS Sitecore-changelog primary; early-access framing.
9. Otterly / Peec pricing — vendor-published; Layer3Labs / Geoptie / AISOtools compiled.
10. HubSpot AEO 28-day trial expansion — vendor product page + independent reviews; 10→25 prompts / ChatGPT-only → 3-engine expansion since April 2026.
11. Cloudflare 2026 agentic-internet report >50% non-human threshold — Cloudflare blog primary; first-time-crossing framing is Cloudflare's own.
12. BOD 26-04 4-factor detail — CISA directive + Industrial Cyber + Security Boulevard primary; 3-day fix for all-four-factor + 14d/60d/next-upgrade tiers + FedRAMP Dec-7 alignment.
13. Colorado ADAI T-0 — CO AG primary; Buchalter + Crowell & Moring + Vorp Labs corroborate DOL draft due by Sept 23; hearing Oct 26; effective Jan 1, 2027.
14. Anthropic Sept 22 outage — status.claude.com primary; StatusGator secondary; scope Mythos 5.1 / Fable 5.1 / Opus 5.
15. Z.ai ZCode Sept 22 case — industry news week-of-Sept-22 aggregator; treat as directional Chinese-vendor-case pending independent forensics.
16. xSeek → LLMonade — GlobeNewswire primary Sept 15; treat consolidation-thesis framing as directional.
17. AgentDyn benchmark-overfitting caveat (C15 → C29) applies to GEO Defender's 6.20% number until dynamic-task evaluation is standard.

20. Open Questions

Resolved this cycle

• Second pure-play GEO exit ≥$200M within H2 2026 (C28 new)? PARTIALLY RESOLVED: Profound Series D at $1.8B is not an exit but a funding event; it satisfies the "market-clearing multiple ≥$200M" spirit at 9× the reference multiple. Watch: does an exit follow within H2 2026?
• Does the CVE-2026-59822 KEV precedent produce more MCP entries on KEV within 90 days (C28 new)? STRENGTHENED: Sept-2 batch is now correctly counted as two MCP entries (Kludex Starlette + LiteLLM); watch for a third within the 90-day window (through Dec 1).
• Colorado ADAI DOL revised proposed rulemaking draft on schedule (C28 watch)? RESOLVED: T-0 today.

Carried

1. Will any second-vendor platform ship default MCP-context-integrity defense before GSA Sept 30 (T-7d)?
2. Will EU Code of Practice final address agent-specific transparency? (Overdue-imminent since C15.)
3. First DSA Article 39 complaint or first VLOSE named-enforcement action within the 4-month clock.
4. Will Anthropic reverse STDIO "by design"?
5. Cross-layer chain (L2→L4→L5) in production?
6. G-T4 fire test at BOD 26-04 Phase III (Dec 7).
7. G-T1 fire test at FSB Sound Practices October final.
8. G-T3 sub-10B open-weight cross-protocol chaining demo timing.
9. Adobe-Semrush + Cloudflare + Google-Search-Console + Ahrefs-Brand-Radar-free-tier four-way compression effect on pure-play GEO pricing.
10. Cloudflare Sept-15 default-block declared-crawler category-shifting within Q4 2026.
11. GEO Defender 50.32%→6.20% independent replication within 6 months.
12. SAMR named enforcement of Chinese GEO ¥3B market.
13. Ninth Circuit CFAA "agent = user" holding tested by state-law contract-claim workaround.
14. Does Cloudflare Pay Per Use (Ceramic.ai + You.com) produce measurable publisher revenue at any scale within Q4 2026?

New this cycle

15. Does Profound Series D $1.8B trigger a competitive Series-D/E round at Peec / AthenaHQ / GenOptima / Emberos within Q4 2026 (mid-market defends against leader escape-velocity)?
16. Does Anthropic Stainless (SDK/MCP-server code-generation pipeline) count as a second-vendor default MCP-integrity control for phase_flip elevation (adjudication needed — Stainless is a code-generator, not a runtime verifier)?
17. Does the 23-PR-in-74-min malicious-MCP-campaign vector produce a Git-hosted MCP-server disclosure equivalent to postmark-mcp within 60 days (branching MCP marketplace poisoning from npm to Git)?
18. Does the Ahrefs Brand Radar free-tier extension to Webmaster Tools users compress Peec/Otterly monthly pricing by ≥30% within 90 days?
19. Does the CVSS-10 MCP-server pair (mysql_mcp_server + IBM mcp-context-forge) reach KEV before Dec 1 (90-day trailing window from Sept 2 precedent)?
20. Does the Sitecore DAM ↔︎ Scrunch Knowledge Studio early-access integration ship to GA within Q4 2026 (post-acquisition product-velocity confirmation)?

21. Prediction Timeline (delta only)

22. Sources

Enterprise tooling — Rotation D

1. Profound raises $180M Series D at $1.8B (Best Startup)
2. Profound Series C: $1B Valuation (Everything-PR)
3. Profound Series C blog (tryprofound.com)
4. Profound company profile (Tracxn)
5. Sitecore September 2026 updates (FettesPS)
6. Sitecore acquires Scrunch (Sitecore press)
7. Scrunch AI review 2026 (Geotoolbox)
8. Adobe LLM Optimizer / Brand Visibility (Adobe business)
9. Introducing Adobe Brand Visibility (Adobe blog)
10. Adobe LLM Optimizer (TechTarget)
11. Semrush 2026 AI Visibility Index — 126M prompts (Semrush press)
12. AI Visibility Index for Enterprise (Semrush)
13. Semrush Expands 2026 AI Visibility Index (SecureItWorld)
14. Ahrefs News September 2026 (mean.ceo)
15. Ahrefs Brand Radar Review 2026 (tryprofound.com)
16. Ahrefs Brand Radar API — Citations (docs.ahrefs.com)
17. BrightEdge Copilot (BrightEdge)
18. BrightEdge Content Advisor (BrightEdge)
19. HubSpot AEO (HubSpot product)
20. HubSpot AEO Grader review (Salesdorado)
21. HubSpot AEO Review 2026 (Arobis)
22. Cloudflare AEO Visibility Dashboard press
23. Cloudflare content-independence day (Cloudflare blog)
24. Content Independence Day one year on (Cloudflare blog)
25. Peec AI vs Otterly comparison (Layer3Labs)
26. Otterly.AI pricing 2026 (AISOtools)
27. Otterly AI pricing plans (Layer3Labs)
28. Best generative engine optimization tools 2026 (tryprofound)
29. Best AI Visibility Tools 2026 (Surmado)
30. 10 best GEO platforms (Bluefish)
31. Stagwell + Emberos Search+ (Adweek)
32. Webflow AEO launch (CMSWire)
33. xSeek acquires LLMonade (GlobeNewswire)
34. Google Search Console AI performance reports (developers.google.com)
35. Google Search Console AI reports rolled out worldwide (Search Engine Land)

MCP security / KEV

36. CISA Adds Seven Known Exploited Vulnerabilities (CISA 2026-09-02)
37. Three-of-Seven CISA KEV Additions Target AI Infrastructure (Forkast)
38. Three-of-Seven (Yahoo Tech)
39. CVE Brief September 16, 2026 (cvebrief)
40. MCP security September 2026: Deadbugz + 3 server CVEs (Adversa)
41. MCP top 25 vulnerabilities (Adversa)
42. MCP Security Statistics 2026 (Practical DevSecOps)
43. The Vulnerable MCP Project
44. BOD 26-04 (CISA)
45. BOD 26-04 implementation guidance (CISA)
46. FedRAMP response to CISA BOD 26-04
47. BOD 26-04: End of Patch-Everything (Security Boulevard)
48. MCP Tool Poisoning enterprise (ITECS)

Regulatory

49. Colorado ADAI Rulemaking (Colorado AG)
50. Colorado SB 26-189 employers (Buchalter)
51. Colorado ADMT/Chatbot rules Sept 4 (Obsidian RI)
52. Colorado SB 26-189 (Crowell & Moring)
53. September 2026 AI regulatory update US (Vorp Labs)
54. NSA MCP Compliance Checklist 2026 (GovContractFinder)
55. ChatGPT VLOSE (Kaamel)
56. ChatGPT VLOSE (Winbuzzer)
57. FSB consults on sound practices (FSB)
58. FSB Sound Practices consultation report (PDF)
59. FSB 12 sound practices (Chuck Gallagher)
60. Great American AI Act (DLA Piper GENIE)
61. 11 AI bills cleared committee (Benton Institute)

China GEO

62. GEO services flooding Chinese Internet (Sixth Tone)
63. China's GEO Boom (Leon Du)
64. 12 Chinese GEO providers ranked Sept 21 2026 (Ohsem)
65. Regulating AI Marketing in China — GEO (Lexology)

Academic

66. GEO Defender (arXiv 2609.02964)
67. GEO Defender HTML (arXiv 2609.02964v1)
68. GroundedGEO auditing evidence gap (arXiv 2609.25189)
69. MCPTox benchmark (arXiv 2508.14925)

llms.txt / GEO practitioner

70. Google debunks 5 GEO myths — llms.txt not required (DEV)
71. What is llms.txt 2026 (Polaris)
72. Google says skip llms.txt (Refonte Learning)
73. Google confirms it doesn't use llms.txt (GeoParrot)

Google spam / practitioner

74. Sept 2026 Google Webmaster report (Search Engine Roundtable)
75. August 2026 Google spam update case studies (GSQi)
76. Google August 2026 spam update (Coalition Technologies)

x402 / agent commerce

77. x402 payments 2026 comparison (Wavect)
78. x402 Foundation Best Guide 2026 (HostMerchantServices)
79. Inside x402: 100M agentic payments on Base (Chainalysis)

Anthropic / outages

80. Anthropic Claude status (StatusGator)
81. Claude Code status (StatusGator)
82. Anthropic confirms Claude is down (Bleeping Computer, Sept 3 baseline)

AI agents / week-of-Sept-22 developments

83. AI Agents News — Week of September 22, 2026 (aiagentstore.ai)
84. Cloudflare's Sept 15 AI-Bot Default (Royal Plugins)
85. Cloudflare Sept 15 AI-crawler defaults for site owners (hosting.com)
86. Google Home MCP lets Antigravity/Claude/OpenClaw control smart home (9to5Google)

🏹 Scout — Cycle 29 complete. Rotation D: Enterprise Tooling deep dive. 86 sources. Structural highlight: Profound Series D $180M @ $1.8B on Sept 15 — largest pure-play GEO/AEO round on record; Sequoia + Kleiner Perkins lead; roughly doubles February Series C valuation. KEV correction: Sept-2 seven-flaw batch contained TWO MCP-ecosystem entries (Kludex Starlette CVE-2026-48710 + LiteLLM CVE-2026-59822), not one — federal-tempo-MCP precedent already class-of-two. CVSS-10 MCP-server pair: mysql_mcp_server + IBM mcp-context-forge (Sept-16 CVE brief); not KEV-listed at cycle close. Ahrefs Brand Radar September update wave (free-tier for Webmaster Tools users + Google Sheets export + Report Builder 2.0 + Topics report) is the largest single mid-market pricing-pressure event of the cycle. Sitecore DAM ↔︎ Scrunch Knowledge Studio first post-acquisition product integration ships. Anthropic ← Stainless $300M+ confirmed (SDK/MCP-server code-generation pipeline for Anthropic + OpenAI + Google + Cloudflare + Meta) creates a new adjudication input for second-vendor-default phase_flip candidacy. Colorado ADAI T-0 today — DOL revised proposed rulemaking draft due; hearing Oct 26; effective Jan 1, 2027. GSA T-7d to NSA MCP compliance. phase_flip HOLDS 0.50 (12th cycle) — Microsoft signed-manifest MCP mandate remains sole platform-default tool-manifest-verification-class control. Georg: G-T1 not fired (FSB October final = fire test); G-T3 not fired; G-T4 fired-adjacent (KEV batch correction + BOD 26-04 4-factor detail + Dec 7 compliance; probability 80%). RVI 3 (Colorado T-0, KEV correction, +1 baseline strengthening). Compression thesis upgrades to four-directional-plus-leader-decoupling (Adobe/Semrush + Ahrefs free-tier + Cloudflare + GSC-AI compress the middle; Profound $1.8B escapes at the top). Next cycle: 30 (Rotation A — Regulatory/enforcement refresh). Watch: GSA Sept 30 (T-7d); FSB October final; CISA BOD 26-04 Phase III Dec 7; Ahrefs-free-tier mid-market compression impact; competitive Series-D/E defense at Peec / AthenaHQ / GenOptima / Emberos; CVSS-10 MCP-server pair KEV-migration; Sitecore DAM ↔︎ Scrunch GA timing.