Anthropic before the IPO: $965B, a backlash, and safety as a competitive moat

Anthropic is heading for the public markets, and the interesting question is not the valuation. On August 12 the Wall Street Journal reported the company was talking to investors ahead of a possible fall IPO on Nasdaq, targeting September or October, with Morgan Stanley, Goldman Sachs and JPMorgan running the book. The Series H in May priced it at $965 billion; some estimates now go past $1 trillion. By August 21 the reporting said a filing could come at the end of August, with annualized revenue around $65 billion and a size comparable to SpaceX. What matters for anyone who buys Claude tokens is what a public Anthropic does to pricing and to the safety posture it is now being criticised for.

The backlash, in one paragraph

A month of positive coverage turned around in late July. The WSJ reported a Silicon Valley backlash on three counts: an aggressive enterprise push with a four-flagship cadence, guardrails restrictive enough to cost real use cases, and the refusal to sign Nvidia's Open Weights and American AI Leadership letter. That letter grew from 25 to more than 50 signatories in a day, including OpenAI, Google, AMD, Cisco, Cloudflare, GitHub, Block and Ollama. Anthropic and Amazon stayed out of every version. Critics read the holdout as safety used as a competitive moat.

Safety as moat is not an insult

I think the critics are right about the mechanism and wrong about the verdict. Anthropic's line is that weights cannot be recalled, which is consistent with a closed-frontier business and with an IPO prospectus that needs a defensible story on risk. Then on August 27-28 a federal judge ruled that the Pentagon's supply-chain-risk designation and blacklist of Anthropic, imposed after the company refused unlimited military access for mass domestic surveillance and autonomous weapons, violated the First and Fifth Amendments. A provider enforced its acceptable-use policy against its largest possible customer and the court backed it.

If a vendor will say no to the Pentagon, it will say no to you too. Decide before you sign whether that is a risk or a guarantee.

For a regulated enterprise that is a feature: the red lines are real and now legally tested. For a team whose use case sits near those lines, it is a reason to keep a second provider warm.

What a public Anthropic means for your bill

The demand side is loud. Reporting on September 8 put run-rate revenue above $30 billion, up from about $9 billion at the end of 2025, with million-dollar enterprise accounts doubling in under two months. Investors are being pitched a total addressable market above $30 trillion. That is a growth story, and growth stories under quarterly scrutiny push in two directions at once.

• Pricing pressure upward on the tiers where Anthropic has no real competitor. The intro price on Sonnet 5 ($2 / $10) was scheduled to jump 50% on September 1 until Anthropic cancelled the increase on August 10 and made the rate permanent; that reversal is a data point about how much pricing power it is willing to use on the tier most agent traffic runs on.
• Pricing pressure downward where adoption is the goal: on August 28 Anthropic gave 10,000 scientists free standard seats with a $15 per month premium tier, and opened Claude for Teachers to US K-12 schools.
• Vendor stability up. A public company with audited revenue and three bulge-bracket banks is a lower counterparty risk than a private one.
• Product cadence stays aggressive. Four flagships a year is the criticised behaviour and also the thing the market will demand.

Practically: pin model IDs, keep a routing layer that can move a tier to another vendor in a config change, and re-forecast Q4 with both the intro and list prices. OpenAI is preparing its own confidential IPO filing at roughly $730 billion, so this is the shape of the whole market, not one company.

The honest gap

The revenue numbers do not agree with each other. Bloomberg's $65 billion annualized on August 21 and VentureBeat's $30 billion-plus run-rate on September 8 cannot both describe the same quarter under the same definition; one is likely a forward or bookings figure. Until there is an S-1, treat every dollar figure here as a leak with an agenda. The court ruling and the letter signatories are on the record; the money is not.