Daytona Raises $60 Million at a $1 Billion Valuation to Sell Computers to AI Agents

Daytona Platforms, a New York company that rents sandboxed computers to AI agents, raised a $60 million Series B at a $1 billion valuation, announced on 20 October in a post by chief executive Ivan Burazin and covered by TechCrunch on 23 October. FirstMark Growth led. Total funding is now $91 million.

Neither the announcement nor TechCrunch says whether $1 billion is a pre-money or post-money figure. If it is post-money, $60 million buys about 6% of the company. The sum of earlier money is also worth a line: $91 million less this round less the $24 million Series A that FirstMark led in February leaves about $7 million raised before that.

What the round pays for

Daytona's announcement does not state a use of funds. It does state two company-reported growth figures: revenue up about 25 times since January, and average monthly net revenue retention of about 135%. No revenue base is given, so 25 times could describe a small number. Net revenue retention is normally measured annually, and the post compares it to Snowflake's roughly 160% a year at its IPO. A monthly figure of 135% is a different measurement, and the two should not be read as equivalent.

The round also includes strategic money: Qualcomm Ventures, Samsung Next and Okta Ventures joined, along with the angels Patrick Collison, Tobi Lütke, Aravind Srinivas, Eric Yuan, Olivier Pomel, Adam D'Angelo and Brendan Foody. Returning backers are E2VC, Upfront Ventures, FirstMark Capital and Pace Capital.

1. Series A (February 2026)24 $M
2. Series B (October 2026)60 $M
3. Total raised91 $M

Source: Daytona announcement and TechCrunch, 20 and 23 October 2026

Who is using it

The announcement names Meta and Cohere among model builders, and Handshake, Snorkel, Surge AI, Turing, AfterQuery and Trajectory among training-data teams. Product customers listed are Writer, Clay, n8n, Postman, Mintlify and bolt.new.

The one volume figure is Writer's: 300,000 sandboxes provisioned in one month, after its in-house platform passed 20,000 sandboxes a day. AfterQuery, per the same post, replaced an in-house GKE cluster with Daytona in a day. Both are Daytona's account of its customers. No customer is quoted in the post except Sam Jung, Head of Research Operations at AfterQuery, who said "As a frontier applied AI research lab, the infrastructure we need often does not exist."

The security record the round skips

Daytona's product is an isolation boundary, and the company has published two notices in 2026 about it. On 9 April a researcher reported that a sandbox's API credential sat in process memory, and the default snapshot included passwordless sudo, so anyone with a shell could take it. Daytona confirmed the issue at 18:15 UTC and had fixes live in the EU at 20:36 and the US at 20:44. It wrote that it found no evidence of exploitation but could not fully rule it out, and called the sudo default "a tradeoff we made early on for developer ergonomics."

On 11 June, Daytona said it was going closed source, giving security as the only reason. The post argued that AI tools can scan public code for flaws at scale, so publishing the isolation layer would give attackers a map. The public repository stays up but is no longer maintained.

Date	Event
9 April 2026	Credential-in-memory flaw reported and patched in four and a half hours
11 June 2026	Core code closed, old repository frozen
20 October 2026	$60 million Series B announced

For readers weighing the sector, Alter, a Y Combinator company, is selling access control for the same agents, and Legora's $550 million round shows what investors pay per dollar of revenue when a figure is disclosed. Daytona has not disclosed one.

The number to watch is the next announcement of absolute revenue or sandbox volume. Until then, the $1 billion rests on a growth multiple with no base.