← The Vault

What AI Founders Need to Know About the Iran War

The conflict changed your cost model, your infrastructure risk, your fundraising environment, and your security requirements. Here's what to do about each one.


The conflict in the Middle East is first and foremost a human tragedy. Thousands killed, millions displaced. That reality should frame everything else in this piece.

But there are second and third order effects rippling through the technology industry that most founders haven’t fully processed yet. The cost structure of AI, the physical safety of cloud infrastructure, the fundraising environment, and the security landscape all changed in the last 30 days. If you’re building a company right now, some of your core assumptions may no longer hold.

Your cost model needs a stress test

We’re in the middle of the worst global energy disruption in decades. Crude oil prices have surged over 50% in a month. The IEA called it the largest supply disruption in the history of the global oil market.

If you’re running AI workloads, energy is roughly half your operating cost. That line item just moved against you. And it could get worse before it gets better.

The less visible problem is the semiconductor supply chain. A third of the world’s helium production went offline when a major facility in Qatar was damaged. Helium is irreplaceable in chip manufacturing. There is no substitute. Memory prices had already more than doubled over the past year because manufacturers shifted capacity toward AI chips. Now the fabs themselves face input shortages on top of an existing crisis.

Cloud providers are passing these costs through. Some have announced 5 to 10% price increases. Smaller providers are hiking 30 to 50%.

What to do: pull up your infrastructure costs from the last three months. Model what happens if those numbers go up 20 to 50% and stay there for a year. If your margins break under that scenario, you need to know now. Not in Q3 when the bills arrive and you’re mid-fundraise.

Your infrastructure has physical risk you probably haven’t modeled

For the first time in history, a hyperscale cloud provider’s data centers were struck by military drones. Multiple availability zones went down simultaneously. The standard redundancy model, the one that’s supposed to protect you from outages, wasn’t designed for coordinated attacks across a region.

This matters even if you have zero customers in the Middle East. It establishes a precedent. Data centers are now demonstrated military targets. That changes how they get insured, where new ones get built, and what questions enterprise buyers ask their vendors.

Your enterprise customers are going to start asking harder questions about disaster recovery, data sovereignty, and multi-region failover. These are reasonable questions. Having thoughtful answers matters more now than it did two months ago.

What to do: audit your infrastructure dependencies. Where do your workloads actually run? What happens if an entire region goes offline for weeks? If you’re on a single cloud provider in a single region, at least understand the risk you’re carrying and have a plan on paper for how you’d respond.

The fundraising environment split in half

The macro picture shifted fast. Recession odds are up. The Fed is now more likely to raise rates than cut them. Public software stocks are down nearly 30% from their peak. The Nasdaq entered correction territory.

But the money didn’t disappear. It concentrated.

AI startups captured 90% of February’s global VC funding. Defense tech pulled in $49 billion last year. Cybersecurity startups raised $18 billion. Companies building at the intersection of AI and security raised billions in the last few months alone. Capital is flowing hard toward anything that addresses the problems this crisis made visible.

If you’re building outside those categories, the bar is higher than it was 60 days ago. Enterprise buyers are delaying discretionary purchases. Higher energy costs feed into inflation, which feeds into tighter monetary policy, which feeds into compressed valuations. These effects take quarters to fully arrive, but they’re already in motion.

What to do: be honest with yourself about where you sit. If your product connects to the problems the crisis surfaced, like resilience, security, cost management, or supply chain visibility, explain that connection clearly to investors. Not as opportunism. As context for why the problem you’re solving matters more now than it did before. If your product doesn’t connect to those themes, make sure your unit economics and runway can absorb a harder fundraising market through the rest of the year.

The security problem nobody’s ready for

State-sponsored cyberattacks have escalated dramatically since the conflict began. Critical infrastructure, hospitals, water systems, financial services, and major corporations have all been hit. One Fortune 500 company had 200,000 devices wiped through a single compromised admin credential.

For founders building in the AI and agentic space, there’s a deeper structural issue. Every AI agent that autonomously accesses a database, an API, or a cloud service represents a machine identity that can be compromised. Machine identities now outnumber human users 82 to 1 in enterprise environments. The entire security stack was built for humans. It doesn’t work for autonomous agents.

Enterprises are deploying agents much faster than the security solutions designed to protect them. That gap is the single largest unaddressed risk in enterprise AI right now. Bessemer Venture Partners called it the defining cybersecurity challenge of 2026. Several well funded startups are working on pieces of it, but the problem is far from solved.

What to do: if you’re a technical founder looking for where your skills matter most, this intersection of agentic AI and security has genuine, unmet need. But the wedge has to be specific. You need a concrete problem that a specific buyer needs solved this quarter. Not a platform. Not a framework. A painkiller for a person with a budget.

Putting it together

It feels uncomfortable to write practical advice while a war is happening. But ignoring the downstream effects until they hit you unprepared doesn’t help anyone.

Three things are true at once right now. The physical layer of AI infrastructure is more fragile than anyone assumed. The security requirements for AI systems just escalated categorically, not incrementally. And the funding environment is rewarding companies that address these newly urgent problems while getting harder for everything else.

None of us chose the timing of this. But we do choose how carefully we pay attention to what changed and how thoughtfully we respond.