Slidebean startup newsletter

13 Oct | Read online Sponsored by ✦ Good morning, innovators. 🕶️ Hope your coffee is stronger than your Q4 pipeline. The US Air Force just told a balloon company it's the only one able to do the job. Meta built its strongest model yet and kept the best version inside its own app. And in Europe, roughly 52 bodies can certify a medical device, but only one, by its own count, specializes in AI. It just raised $50M. Three different businesses, one shared idea: scarcity is the product. Models get copied, features get cloned, prices get matched. What does your company own that nobody can buy somewhere else? In today's newsletter, we'll get into: How 700 balloons became the Air Force's only option Meta's frontier model, and the version it kept Two CEOs, two org charts, one choice for you Hacked supermarket fridges and a $90K cookie ✦ FOUNDER BOARD 🏥 Swap the Gold plan for one Bronze HDHP plus a reimbursement plan covering costs past $1,000. One broker estimates the savings at about $3,000 per employee a year. Check with counsel. 🧊 Agent37 (YC F26) says its agent sandboxes average $0.37 a month by renting from Hetzner and OVH instead of hyperscalers, and by buying hosts for RAM, not CPU. 🧭 Anthropic's Dario Amodei has 1 direct report; Jensen Huang has about 60. Both chose their org chart on purpose. Most founders end up with eight by accident. 🍔 McDonald's discount blitz didn't stop US same-store sales growth sliding from 3.9% in Q1 to 0.8% in Q2. Discounts train customers to wait for the next one. 🧑💼 Before hiring a big-name CMO, check for three warning signs: no repeatable lead flow, a budget not tied to results, no channel you can name. See any of them? Go fractional first. Financial Model Template Use Slidebean's FREE Financial Model Template to estimate your revenue, expenses, and how much money your startup needs to raise. Check it out ✦ RUSHIN' ROULETTE Five bullets of updates 🧊 Hackers hijacked Danfoss refrigeration software and pushed Intermarché fridges to 50°C for six hours, in an attack that hit about 500 French supermarkets across several chains. Danfoss says the affected units were legacy models that could no longer be updated, and some stores reported small fires. If your business runs on connected hardware, list every device that no longer gets patches. That list is your attack surface. 🍪 Google paid a $90,000 bounty for a top-severity remote-code-execution bug on its developer docs site, where one OAuth secret also signed session cookies. The researcher reported it August 6, and the fix shipped October 7. One key doing two jobs meant a forged cookie could run code on Google's server. Give every secret exactly one job, and rotate it the day it starts moonlighting. 🎮 Epic Games, which laid off 1,000 people in March, has delayed its Marvel and Star Wars game with Disney and told staff it's now an "AI first" project with "no more hand-written code," per Bloomberg. Bloomberg says Epic underestimated how many people the game needed. Cut the team before you scope the work, and AI becomes the rescue plan instead of the strategy. 🏓 The Picklr, an indoor pickleball franchisor valued at $59M in 2024, filed for Chapter 11 to renegotiate leases it guaranteed for early franchisees. "That's on us," CEO Jorge Barragan told Sports Business Journal. The clubs stay open; the parent company took the hit. Before you guarantee anything to speed up a partner's launch, price it as debt on your own balance sheet. 📝 KKR is voiding non-competes for every portfolio-company worker earning under $100,000, roughly 800,000 people. That frees up a big pool of experienced operators for startups hiring in those sectors. And if your own contracts still put non-competes on junior staff, you're now stricter than a private-equity giant. Poach a rival's operator, or train your own? KKR just freed 800,000 workers under $100K from non-competes. We think most of you say "train." Prove us wrong. Poach. Experience beats