The one-screen version: on October 22, Nvidia CEO Jensen Huang floated a figure of roughly $2,000 per GPU per year for the software that "runs agents on these AI factories." It is a floated number, not a price sheet — Nvidia hasn't said what it covers or when it starts — and The Register flagged its own line as a paraphrase. But the direction is the news: the GPU you rent is growing a recurring software toll on top of the silicon. The same week, Daytona raised $60M at a $1B valuation to sell the agent sandbox as its own infra layer. The founder's read: the rental rate you track on a price map is no longer the whole cost of running an agent — budget the fully-loaded cost per agent-run, not dollars per GPU-hour.
What actually happened#
Two numbers, four days apart, pointing the same way.
- Nvidia, Oct 22. Huang put the cost of licensing Nvidia's software stack at about $2,000 per GPU per year, tied to running agents on AI factories. For scale, Nvidia's existing AI Enterprise subscription already lists at roughly $4,500 per GPU for a one-year term — so this isn't a discount on what you may already pay. Reports read it as a different, agent-focused bundle, with terms unpublished. Run the arithmetic nobody at Nvidia ran out loud: five million licensed GPUs at $2,000 is ~$10B a year in software revenue off hardware already sold. (Illustrative — not a forecast.)
- Daytona, Oct 20. A $60M Series B at a $1B valuation, led by FirstMark, to sell isolated environments where agent code runs — configured, the company says, in ~60 milliseconds, with a reported ~25x revenue run-rate jump from January to September (a company figure, not audited). The reported customer list is the frontier itself: Anthropic, OpenAI, Nvidia, Cursor, Cognition. Town ($108M) and agentic-SecOps startup Mave ($34M) raised the same week.
One is a chip vendor reaching up into software. One is a startup building a layer that didn't exist in 2024. They describe the same thing from opposite ends: running an agent now accretes recurring infrastructure, billed in separate lines, and almost none of it shows up on the hourly GPU rate you've been tracking.
The one real idea: the GPU rate is the floor, not the bill#
For two years the honest way to compare compute was dollars per GPU-hour. You could put an H100, an H200 and a B200 on a price map, pick the cheapest that fit, and know your floor. That number is still real — but it's become the floor, not the bill.
Stack what an agent workload now actually carries:
- Raw compute — the GPU-hours. Still trackable, still substitutable (multi-cloud, spot, open hardware).
- The model — per-token, and as we wrote yesterday, increasingly swappable inside a single cloud catalog.
- The vendor software stack — the layer Huang just put a recurring, per-GPU price on.
- The sandbox — the isolated runtime an agent needs to execute code safely, now its own venture-funded market.
Only layer 1 appears on a rental price map. Layers 3 and 4 are recurring, they're priced per-unit-of-the-thing-you-already-pay-for, and they compound. This is the same mechanism as the reseller-margin math that bites wrappers: your real cost of goods is several times the naive "one call," because the taxes hide in layers the headline rate never named. A vendor that sells you the chip, and the software that runs on the chip, and takes a cut of the agent runtime has three bites of the same workload — and markets only the first one as a price.
What to do with it#
- Budget per agent-run, fully loaded. The number to defend is cost per completed task, not dollars per GPU-hour. Attribute compute, any per-GPU license, the sandbox runtime and gateway tooling to each run, or these tolls stay invisible until the invoice. Remember the costs that scale quadratically ride on top of all four layers, not just the first.
- Keep every layer substitutable. The reason a recurring toll is survivable is that an open alternative exists for each layer: open-weight models, open sandboxes (gVisor, Firecracker, Kata), open runtimes. The CUDA-adjacent stack is the stickiest of the four — which is exactly why Huang can float a price for it and a founder can't shrug it off the way they can swap a model.
- Watch where the license lands. If the $2,000 (or whatever it becomes) is folded into your cloud's committed spend, you may negotiate it as part of a larger contract. If it arrives as a separate line, you can't. That placement, not the headline figure, decides whether you have any leverage at all.
Nvidia floating a per-GPU software fee the same week a sandbox startup hit $1B is not a coincidence — it's the agent-compute bill revealing its true shape. The hardware was always the easy part to price. The recurring layers stacking on top of it are the part that will quietly set your margin, and the rental rate is just the first line on a bill that's getting longer.
Also this week: Huang, in the same remarks, waved off talk of an "AI bubble," pointing to demand he called far greater than current capacity — the standard vendor framing for why the toll is worth paying. Price it like a vendor would: as the opening number in a negotiation, not a fact.



