Sonny Valindra
In a swift and unexpected turn of events, early-stage AI security startup Runlayer and enterprise software giant Rippling announced on Wednesday night the mutual dismissal of all lawsuits filed against each other. Court documents obtained by TechCrunch reveal that the dissolution of legal proceedings occurred without any settlement, financial exchange, or even the allocation of legal fees between the parties. This abrupt conclusion to a contentious legal dispute leaves the underlying product rivalry at the forefront, with Rippling immediately leveraging the situation to launch its much-anticipated MCP gateway, a product directly competing with Runlayer’s core offering.
The saga, though brief, serves as a potent cautionary tale for founders navigating the rapidly evolving landscape of artificial intelligence. In an era where software development has been democratized to an unprecedented degree, the identity of future competitors can be fluid and unpredictable, potentially emerging from unexpected quarters, including past collaborators and even prospective clients.
Genesis of the Dispute: A Year of Collaboration and a Sudden Pivot
The legal entanglement originated from a year-long collaborative testing period between Rippling and Runlayer. Runlayer, a startup that emerged from stealth in November 2025 with $42 million in venture funding from prominent investors such as Khosla Ventures, led by Keith Rabois, and Felicis, has been helmed by seasoned entrepreneur Andrew Berman. Berman’s prior successes include the popular baby-monitor maker Nanit and the AI video conferencing tool Vowel, which was acquired by Zapier in 2024.
According to Runlayer’s initial lawsuit, the close working relationship between the engineering teams involved Rippling extensively testing Runlayer’s Multi-Cloud Platform (MCP) gateway. Despite this prolonged engagement, Rippling never formally signed on as a customer. The situation escalated when, as alleged by Runlayer, an employee of Rippling informed Berman that his employer was developing its own MCP gateway, intending to release it as a commercial product. This communication further characterized Rippling’s impending offering as a direct "clone" of Runlayer’s technology.
Runlayer’s legal action was predicated on the claim that Rippling had violated contractual agreements governing the product testing phase. At its core, an MCP gateway is designed to securely manage an enterprise’s AI agent requests for data residing within various software systems. For example, a human resources professional might query an AI agent to identify the top five candidates for a job opening, including their contact information. Instead of granting the AI agent direct access to the company’s sensitive recruitment software, the MCP gateway acts as an intermediary, retrieving the necessary data. Furthermore, these gateways are engineered to enforce granular controls such as role-based access (differentiating permissions for managers versus interns), and to provide comprehensive observability through logging and usage trails, thereby enhancing security and compliance.
The Counter-Offensive and Mutual Withdrawal
In response to Runlayer’s lawsuit, Rippling initiated a counter-suit. Rippling alleged that Runlayer was infringing upon certain of its patents. This strategic move was perceived by Runlayer as an attempt to force them to drop their original suit by escalating legal expenses and complexity.
The protracted legal battle, characterized by intense discovery phases, ultimately led to Runlayer’s decision to withdraw its lawsuit. Shortly thereafter, Rippling followed suit, dropping its own claims without securing any form of settlement. The outcome, as observed by TechCrunch and alluded to in public social media commentary, resulted in considerable "public flaming" but no tangible resolution in the form of financial compensation or legal concessions.
The AI Frontier: A New Era of Competition and Disruption
While the legal confrontation has seemingly concluded without substantive resolution, the underlying implications for the burgeoning AI industry are profound. The rapid pace of innovation in AI means that traditional business models and competitive dynamics are being fundamentally reshaped. The lengthy technical evaluations and contractual negotiations that enterprises have historically imposed on startups may no longer be tenable. The inherent volatility of the AI landscape means that an enterprise’s strategic priorities and technological needs can shift dramatically within the timeframe of such protracted engagements.
Rippling’s Strategic Leap into AI Governance and Security
Coinciding with the dismissal of the lawsuits, Rippling wasted no time in formally launching its MCP gateway. This product represents a significant strategic expansion for Rippling, a company historically recognized for its core offerings in payroll and benefits management. The company has reportedly invested heavily in AI capabilities in recent months, a strategy evidenced by the rapid development and release of tools like an employee ROI calculator.
Rippling’s new MCP gateway is designed to intelligently route AI agent requests to various large language models (LLMs) and provides a dashboard for tracking token expenditure by individual employees. This positions Rippling directly against established players in the AI model routing and management space, including prominent companies like Stripe, Ramp, and Databricks, all of which have introduced similar functionalities to their platforms.
Furthermore, with the introduction of its MCP gateway, Rippling is making a decisive entry into the AI security sector. By integrating AI access controls with employee roles and responsibilities, the company aims to enhance enterprise security and compliance for AI applications. In this domain, Rippling now finds itself in direct competition with specialized AI security firms like Runlayer, as well as broader cloud infrastructure providers such as Docker and Amazon Bedrock, which offer platforms for managing and securing AI workloads.
Runlayer’s Vision: Comprehensive AI Agent Security
Runlayer, despite the legal setback, continues to advocate for a broader suite of AI agent security services. Their proposed solution encompasses the entire lifecycle of AI agents within an enterprise, from their initial creation and deployment to the critical task of identifying and mitigating "shadow AI" agents – unauthorized or unknown AI applications operating within an organization’s IT infrastructure. This comprehensive approach aims to provide organizations with a unified and robust framework for managing and securing their growing reliance on AI.
Broader Implications for the Tech Ecosystem
The Runlayer-Rippling dispute underscores a critical shift in the technological landscape. The ease with which sophisticated AI software can be developed, coupled with the rapid evolution of enterprise needs, creates an environment where partnerships can quickly morph into fierce competition. For startups, this necessitates agility, robust intellectual property protection, and a clear understanding of potential competitive risks, even from entities with whom they engage in collaborative testing.
For established companies like Rippling, the situation highlights the strategic imperative to innovate rapidly and integrate emerging technologies to maintain market leadership. The swift development and launch of the MCP gateway demonstrate a proactive approach to capturing market share in the rapidly expanding AI governance and security sector.
The resolution, or lack thereof, in terms of settlement, also brings into focus the financial and operational drain of protracted legal battles for startups. The ability to quickly resolve disputes, or to strategically navigate them to minimize disruption, is crucial for early-stage companies focused on product development and market growth.
As the AI revolution continues to accelerate, the boundaries between developers, customers, and competitors are becoming increasingly blurred. The Runlayer and Rippling case serves as a stark reminder that in this dynamic environment, vigilance, adaptability, and a clear strategic vision are paramount for survival and success. The ongoing race to define and secure the future of AI governance and security promises further innovation, and potentially, further high-stakes rivalries.
