↓ Skip to main content
  1. Articles/

Anaconda Buys Kilo Code: The Model-Agnostic Bet on the 'Token-Maxxing' Enterprise

·1133 words·6 mins·
Florent Clairambault
Author
Florent Clairambault
CTO & software engineer — writing daily about spec-driven development and agentic coding

Anaconda Buys Kilo Code: The Model-Agnostic Bet on the ‘Token-Maxxing’ Enterprise
Anaconda announced on July 15 that it has acquired Kilo Code, the open-source agentic coding platform that grew from zero to 3 million developers in 16 months. Terms weren’t disclosed. It’s a smaller deal than the SpaceX-Cursor merger or Cognition’s acquisition of Windsurf, but it’s the clearest signal yet of a split forming in this market: platforms that bet on owning the full stack, and platforms that bet on brokering across everyone else’s.

Kilo Code is squarely the second kind, and understanding why Anaconda wanted it tells you more about where enterprise AI spending pain actually lives than another benchmark release would.

What Anaconda Bought
#

Kilo Code is an Apache-2.0, open-source coding agent that runs in VS Code, JetBrains, a CLI, and — via a hosted component called KiloClaw — the cloud, where an agent keeps working after you close the IDE. Its pitch is model neutrality: pick from more than 500 commercial and open-source models, switch mid-task, pay the provider’s own rate with no markup. Five built-in agent modes (Orchestrator, Architect, Coder, Debugger, Ask) handle the kind of multi-step, repo-spanning work this blog usually calls agentic engineering rather than autocomplete. By Anaconda’s own numbers, Kilo now orchestrates almost 10 trillion tokens a month.

That scale is exactly what Anaconda wanted. This is the same company that bought AI-orchestration startup Outerbounds earlier this year, and it reaches 52 million developers and 95% of the Fortune 500 through its existing package and environment management business. Kilo Code is the missing layer: Anaconda had the enterprise distribution and the governance instincts, not an agentic coding front end. Now it has both.

The Problem They’re Actually Selling Against
#

The quotes from the announcement are more interesting than the acquisition itself. Anaconda CEO David DeSanto framed the rationale bluntly: “There’s been no real answer to token-maxxing. Organizations are spending enormous sums, with very little visibility into where the risk is and if they are getting an ROI.” Kilo co-founder Scott Breitenother put the choice in front of enterprises just as directly: “Developers aren’t going to stop using AI. The question is whether enterprises are going to own that experience end to end or just hope for the best.” Early customers are cited as seeing 30-50% reductions in token consumption after adopting the combined platform.

That’s a real problem, and this blog has documented exactly why it’s real. The MCP Token Tax research we covered in June found up to 32x token overhead once tool schemas and orchestration layers get bolted onto a workflow — a $120/month task becoming a $51,000/month one purely from architectural bloat, not from the underlying model getting smarter. “Token-maxxing” isn’t a marketing phrase; it’s what happens when nobody owns the plumbing between a developer’s prompt and the model actually doing the work.

Where Kilo Code differs from Claude Code is how it proposes to fix that. Kilo’s answer is brokerage: put a governance and routing layer in front of 500+ models so an enterprise can shop for whichever backend is cheapest or fastest for a given task, with Anaconda’s platform providing the audit trail. It’s a legitimate strategy, and for organizations that have already committed to a multi-vendor model portfolio for procurement or compliance reasons, it’s arguably the only strategy available to them.

Why “Own the Stack” Still Wins the Argument
#

But it’s worth being honest about what that brokerage layer doesn’t solve. Routing across 500 models doesn’t average out their quality — you still get whatever the weakest model in a given task’s rotation produces, and now you’re debugging which model made the mistake on top of debugging the mistake itself. And a governance layer built to sit on top of someone else’s infrastructure is, structurally, always going to be playing catch-up to whatever primitives the model vendor ships natively.

Anthropic has already shipped the enterprise cost-and-governance answer to this exact problem, without needing to acquire anyone: the Analytics API gives per-user, per-day token cost and tool-acceptance data out of the box; sandbox.credentials and Workload Identity Federation handle the security half of “visibility into where the risk is” that DeSanto is describing; and the Claude Apps Gateway is a self-hosted control plane with per-user and per-org spend caps, routing, and failover — running on Bedrock or Google Cloud with no inference data sent to Anthropic unless you configure it that way. Those aren’t a broker’s guess at what a model is doing; they’re first-party primitives from the company that built the model. When Kilo Code needs to add governance for a model it doesn’t control, it’s reverse-engineering a guardrail. When Claude Code ships one, it’s a guarantee.

A Consolidation Pattern, Not an Isolated Deal
#

Widen the lens and this is the third independent agentic coding platform absorbed by a larger, non-AI-native parent company in 2026: SpaceX bought Cursor for $60 billion in a deal that closed in June; Cognition acquired Windsurf (now rebranded Devin Desktop) back in March; and now Anaconda has Kilo Code. Three different acquirers, three different strategic logics — a rocket-and-satellite company buying developer-tool distribution, an agent company buying an IDE user base, a data-science platform buying a governance layer — but the same underlying tell: none of these standalone agentic coding startups had the balance sheet or the enterprise trust to solve the cost-and-governance problem on their own. They needed a parent with existing distribution.

Anthropic hasn’t needed one. Claude Code’s enterprise stack — Analytics API, Workload Identity Federation, the Apps Gateway, sandbox.credentials — was built in-house, iteratively, by the company that also builds the model everything routes through. That’s the actual argument for vertical integration in this market: it isn’t nostalgia for a single vendor, it’s that owning both the model and the harness means governance features ship as fast as the security and cost problems appear, instead of waiting for an acquisition to bolt them on.

What to Watch
#

Two things are worth checking independently rather than taking on faith. First, that 30-50% token-reduction figure is a vendor claim from the announcement itself, not an independently audited number — treat it with the same skepticism this blog has applied to Grok 4.5’s and GPT-5.6 Sol’s self-reported benchmarks until someone outside the deal verifies it. Second, Kilo’s own materials describe its codebase as “open source and source-available,” a slightly hedged phrase worth watching now that it sits inside a platform company with its own commercial incentives — Anaconda says Kilo remains available for individual builders and teams under the existing terms, but licensing commitments make and break these open-source acquisitions regularly, and it’s early days.


Sources:

AI Tools

Claude Code's Next Five Releases: Screen Reader Mode, Auto Mode Goes Cloud-Native, and a Quiet Accessibility Push

Claude Code shipped five more releases — v2.1.205 through v2.1.209 — between July 8 and July 14, 2026: Auto mode is now on by default across Bedrock, Vertex AI, and Foundry with no opt-in flag, and v2.1.208 introduced a full screen reader mode via claude --ax-screen-reader. Neither shipped with a launch post; both are more consequential than most things that get one.

Jul 14, 2026 · 5 min read

AI Tools

GhostApproval: Claude Code Correctly Identified the Attack — Then Showed You a Lie Anyway

Wiz Research disclosed GhostApproval on July 8: a symlink trust-boundary flaw in six AI coding agents — including Claude Code, Cursor, Windsurf, Amazon Q, Augment, and Google Antigravity — where the agent’s own reasoning correctly flags a malicious file target, but the permission dialog shown to the user displays the decoy filename instead. Anthropic initially rejected the report as outside its threat model; the fix that quietly landed nine days earlier turned out to be unrelated.

Jul 14, 2026 · 6 min read

AI Tools

Claude Code Shipped Six Releases in a Week — and the Press Got the Biggest One Wrong

Claude Code shipped six releases (v2.1.199–204) between July 2 and 8, including a 7MB binary/memory cut, a security fix for leaking API endpoints in background sessions, and OTel telemetry for Dynamic Workflows. The most-reported change — a supposed ‘Auto to Manual’ permission-mode reversal — isn’t what the changelog actually says, and no primary Anthropic source backs the version of the story that’s spreading.

Jul 8, 2026 · 5 min read

AI Tools

Claude Apps Gateway: Anthropic Ships the Control Plane Enterprises Were Building Themselves

Anthropic launched the Claude apps gateway on June 29 — a self-hosted, stateless control plane that adds corporate SSO, RBAC, per-user spend limits, and multi-cloud failover to Claude Code on Amazon Bedrock and Google Cloud, without routing traffic through Anthropic’s own servers.

Jul 2, 2026 · 5 min read

AI Tools

Claude Sonnet 5: Anthropic's 'Most Agentic Sonnet Yet' Closes the Gap With Opus — For Half the Price

Anthropic shipped Claude Sonnet 5 on June 30 as the new default model in Claude Code and across all plans — native 1M-token context, 63.2% on agentic coding evals (vs. 58.1% for Sonnet 4.6), and introductory pricing of $2/$10 per million tokens through August 31.

Jul 1, 2026 · 5 min read