Braze deal turns messaging into CRM infrastructure

The fortnight was not quiet. On 29 Oct, reports said Salesforce intended to acquire Braze. By 30 Oct and 6 Nov, the reported value was $5.66 billion, with later reporting also citing $5.7 billion. The transaction was framed as a move to strengthen Salesforce in real-time marketing and AI, and on 5 Nov reporting noted Braze stock at a 52-week high of $45.95. On 6 Nov, the announcement was followed by a reported 50% surge in Braze shares and analysts dropping coverage.

That matters because Braze has long competed as the independent customer engagement system for sophisticated brands. Salesforce buying it would pull one of the category's clearest enterprise challengers into the CRM incumbent's gravitational field. The fight to own the customer message becomes less about campaign tooling and more about which system sits closest to customer data, orchestration and real-time decisioning.

Braze was not behaving like a company waiting for the market to settle. On 4 Nov it had listed 31 new jobs in the prior week, across sales, marketing and engineering or ML. On 7 Nov, postings included four AI Architect roles, alongside sales roles in Singapore and Paris and a Technical Account Manager role. The observed hiring mix says the strategic story remained AI depth, enterprise selling and account execution, even as the ownership question moved to the front page.

Klaviyo's AI language moved quickly and visibly. On 28 Oct, its homepage hero changed from “The AI marketing agent that finds revenue before you ask” to “Your AI marketing agent, always a step ahead”. On 31 Oct, Klaviyo added product pages covering topics including brand voice AI and autonomous CRM. On 4 Nov, it changed a call-to-action to “Composer (AI Marketing Agent)”. On 5 Nov, its navigation added a new Composer section labelled as a Marketing Agent, while the previous Customer Hub section was removed.

The cadence is the point. A headline shift on 28 Oct, a content burst on 29 to 31 Oct, a CTA edit on 4 Nov, a navigation change on 5 Nov, then a $1 first-month promotion on 7 Nov is not a single launch moment. It is a repositioning being tuned in public. Klaviyo also ran 19 new Google ad creatives first shown from 19 Oct, then 13 new creatives first shown from 28 Oct, and by 6 Nov had 15 newer creatives with at least 40 running in total.

The same AI pressure showed elsewhere, but with different expression. Brevo released brevo-cli 2.6.0 on 2 Nov, adding installation support for Codex and Gemini CLI agent skills as well as Claude Code. Iterable listed three remote US Senior Machine Learning Engineer roles on 7 Nov tied to Nova Intelligence, its AI customer engagement platform, and released mcp-server 1.9.1 on 8 Nov with security patches while creating new cli and api-client repositories. ActiveCampaign added seven AI and email marketing blog posts on 31 Oct. In this market, AI is no longer campaign copy. It is homepage promise, navigation, developer interface and hiring plan.

SDK and integration work was unusually active. Klaviyo released klaviyo-swift-sdk 5.6.0 on 2 Nov, removing a vendored TCA dependency and rebuilding the request queue and flush engine with no API or default behaviour changes. That refactor then appeared through the stack: klaviyo-react-native-sdk 2.7.0 on 7 Nov and klaviyo-flutter-sdk 0.5.0 on 6 and 8 Nov both upgraded iOS to KlaviyoSwift 5.6.0, while Android remained unchanged.

Iterable also worked the plumbing. On 30 Oct and again on 4 Nov, it released react-native-sdk 3.2.1 to fix an Android crash when marking in-app messages as read. On 6 Nov, iterable-android-sdk 3.11.1 replaced AsyncTask usage in push registration and deep-link handling. On 5 Nov, Iterable added a flink-connector-pulsar repository, pointing to streaming integration work, and on 8 Nov created cli and api-client repositories.

Usage signals moved with the code. On 29 Oct, Braze web SDK weekly downloads rose 34 percent from 669,510 to 896,007, while its react-native SDK rose 35 percent from 155,057 to 209,671 and its expo plugin rose 34 percent from 78,826 to 105,950. On the same day, Iterable's web SDK downloads rose from 115,377 to 163,425, and on 30 Oct its react-native SDK rose from 57,210 to 74,784 while its expo plugin rose from 37,803 to 50,046. These are not brand metrics. They are signs of how deeply vendors are being embedded into app and commerce stacks.

Mailchimp's integration work was more commerce and support oriented. On 1 Nov, Mailchimp for WooCommerce v6.3 added a “Connect to support” button opening Zendesk live chat, product-view pixel tracking for page-builder product templates and enhancements for variable product events. On 7 Nov, its mc-magento2 package released 103.4.87 with a composer v1 warning and installation guidance, limited to Magento 2.4. Brevo's brevo-java 1.1.11 on 30 Oct added createdSince and modifiedSince filters for contact export, a small change with real operational value for teams moving customer data between systems.

Mailchimp pushed towards larger-account packaging. On 6 Nov, it introduced Enterprise Single Sign-On for Premium plan users, allowing login through identity provider credentials rather than traditional passwords. On 30 Oct and 1 Nov, its pricing section was observed listing subscriber tiers from 0 to 500 through to over 1,000,000, a more granular public framing of scale. At the same time, Mailchimp repeatedly changed expert partner content, adding and removing expert pages across 28 Oct, 29 Oct, 30 Oct, 31 Oct, 1 Nov and 3 Nov.

The operational record was less tidy across the category. Klaviyo reported two incidents on 1 Nov: elevated flow recipient skips with no impact, resolved after about 1,423 minutes, and campaign sending delays classified as major, resolved after about 130 minutes. On 5 Nov, Klaviyo detected a major incident causing app slowness and said it was monitoring the issue. ActiveCampaign reported a major outage on 6 Nov affecting Landing Pages for EU customers, resolved after about 203 minutes.

Security also surfaced around the ecosystem rather than only the core vendors. On 29 Oct, CVE-2026-107097 was published for Royal Addons for Elementor before version 1.7.1070, citing missing authorisation checks for Mailchimp credentials, alongside another Mailchimp-related WordPress plugin CVE. On 7 Nov, three further CVEs were noted from 6 Nov for the MC4WP: Mailchimp for WordPress plugin, with CVSS scores of 4.8 and 5.3. The signal for buyers is familiar: lifecycle marketing platforms are judged not just by message design, but by the long tail of plugins, SDKs, queues, exports and identity controls attached to them.