Issue #06

The causal AI play

Dynatrace bet $2B ARR on deterministic causation, not probabilistic guessing. Their MCP server lets Claude query production telemetry directly. But they have zero ITSM or MSP DNA.

Dynatrace Davis AI $2B ARR June 9, 2026

What actually shipped

MCP Server

5 tools

Dynatrace ships a production MCP server. Claude Code, Copilot, any MCP client can query Grail, generate DQL, investigate problems, and explain queries via natural language. [1]

Causal AI

Not LLM

Davis AI uses deterministic graph-based causation, not probabilistic ML. Traces root cause through auto-discovered topology (Smartscape) across the full stack. Zero-config instrumentation feeds it. [2]

Agentic Workflows

Preview

AI proposes remediation actions under policy guardrails. Scale, rollback, notify, ticket. Human approves before execution. Still in Preview as of June 2026. [2]

FY2026 Revenue

$2.0B

Full year revenue $2.018B (+19% YoY). ARR $2.054B (+18%). 22 deals >$1M ACV in Q4. Log management grew >100% YoY. Free cash flow $529M. [3]

The intelligence stack

Dynatrace's AI is not bolted on. It's the core layer that everything else feeds from.

┌──────────────────────────────────────────────────────────────┐ │ Dynatrace Platform │ │ │ │ ┌──────────┐ ┌───────────┐ ┌────────────────────────┐ │ │ │ Grail │ │ Smartscape│ │ Dynatrace Intelligence │ │ │ │(Data Lake)│ │ (Topology)│ │ (Davis Causal AI) │ │ │ └────┬─────┘ └─────┬─────┘ └───────────┬────────────┘ │ │ │ │ │ │ │ ┌────┴───────────────┴─────────────────────┴──────────────┐ │ │ │ OneAgent (Auto-Discovery) │ │ │ └──────────────────────────────────────────────────────────┘ │ │ │ │ ┌─────────────────────┐ ┌──────────────────────────────┐ │ │ │ Agentic Workflows │ │ MCP Server (5 tools) │ │ │ │ (Preview) │ │ Grail Query │ DQL Explainer │ │ │ │ Policy-guarded │ │ Help Agent │ Data Analysis │ │ │ │ actions │ │ Root Cause Agent │ │ │ └─────────────────────┘ └──────────────────────────────┘ │ └──────────────────────────────────────────────────────────────┘
The key insight: Dynatrace's causal AI doesn't guess. It builds a real-time dependency graph (Smartscape) from auto-discovered topology, then traces causation chains from user request through application code to infrastructure root cause. This is fundamentally different from Datadog's probabilistic Watchdog or New Relic's NRQL-based ML.

From anomaly to resolution

The incident lifecycle in Dynatrace runs through four layers: signal collection, AI analysis, investigation, and action.

Signal Collection AI Analysis Action Layer ───────────── ───────────── ───────────── OneAgent auto- → Davis AI detects → Dynatrace Assist discovers hosts, anomaly via causal (NL investigation) services, deps topology comparison ↓ ↓ Logs, metrics, → Root cause identified → Agentic Workflows traces ingested across dependency (Preview) propose into Grail graph approved actions ↓ ↓ Custom events → Problem ticket auto- → MCP Server provides from CI/CD, generated with full context to external deployments causation chain agents (Claude, Copilot) ↓ ↓ Security findings → Risk-scored by → Runbook execution, (runtime vulns) service impact + ticket creation, exploitability notification
CapabilityAutonomousHuman-in-LoopNotes
Anomaly detectionYesAlways on, always learning baselines
Root cause analysisYesDeterministic causation graph tracing
Problem groupingYesCorrelates related anomalies into single Problem
Investigation (NL)YesAssist requires human prompting
Runbook executionNoYes (Preview)Requires approval under policy guardrails
Ticket creationYesVia integrations (ServiceNow, Jira, PagerDuty)
MCP queriesYesYesExternal agents can query, token auth required

The developer play

Dynatrace isn't building an ITSM agent. They're building the data layer that other agents query.

ToolWhat it doesState
Grail Query AgentGenerate DQL from natural languagePreview
DQL Explanation AgentExplain DQL queries in NLPreview
Help AgentAnswer general Dynatrace questionsPreview
Data Analysis AgentExecute DQL, return results (1000 record limit)Public
Root Cause AgentList problems (active/closed)Public
MCP positioning: The server endpoint is per-environment: https://{env}.apps.dynatrace.com/platform-reserved/mcp-gateway/v0.1/servers/dynatrace-mcp/mcp. It works with Claude Code, VS Code Copilot, any MCP client. Auth is bearer token (Platform Token). This isn't a toy demo — it's a production connector that lets AI coding agents query live production telemetry. [1]

Expanded in Q4 FY2026 to connect with Anthropic's Claude Code, Cowork, and Chat. Also integrates with GitHub Advanced Security for runtime context sharing. [3]

Host + consumption, AI included

No separate AI add-on fee. Dynatrace Intelligence is bundled into every tier. But consumption-based log and telemetry pricing can spike.

Core Monitoring

TierMonthly RateBilledIncludes
Foundation & Discovery$7/mo per host$0.01/hrBasic host health, topology, filesystem, OS services
Infrastructure Monitoring$29/mo per host$0.04/hr+ Process, disk, memory, network, custom metrics
Full-Stack Monitoring$58/mo per 8 GiB host$0.01/GiB-hr+ APM, root cause, profiling, Kubernetes, OTLP

Log Analytics (Consumption)

ModelIngestRetainQuery
Pay-per-Query$0.20/GiB$0.0007/GiB-day$0.0035/GiB-scanned
Bundled Queries$0.20/GiB$0.02/GiB-dayIncluded (10-35 day retention)

Security & Experience Add-ons

ModuleRateWhat it does
Runtime Vulnerability Analytics$13/mo per 8 GiB hostDetects runtime vulnerabilities
Runtime Application Protection$13/mo per 8 GiB hostBlocks exploitation attempts
Security Posture Management$5/mo per hostCIS, NIST, HIPAA compliance
RUM$2.25/1k sessionsReal user monitoring
RUM + Session Replay$4.50/1k sessions+ visual replay
AI pricing delta vs. competitors: Dynatrace includes Davis AI, Assist, anomaly detection, and root cause analysis in all tiers at no extra cost. Datadog charges ~$20/seat/month for Bits AI. PagerDuty charges $415/mo flat for Advance (Gen AI add-on). ServiceNow charges $2/conversation or $1/resolution. Dynatrace's "AI included" model simplifies procurement but means you can't opt out if you don't need it. [6]
Cost warning: Reddit users report observability costs exceeding their cloud bills. The consumption model for logs/telemetry (ingest + retain + query) can spike unpredictably during incidents — exactly when you need observability most. [7]

The observability wars, AI edition

Every observability vendor is shipping AI. The differentiation is in how they reason, not whether they use AI.

DimensionDynatraceDatadogNew RelicPagerDuty
AI approachDeterministic causationProbabilistic (Watchdog)Probabilistic (NRQL)Multi-agent (MCP)
Root causeCausal graph tracingML correlationML correlationAgent orchestration
AI pricingIncluded in subscriptionBits AI ~$20/seat add-onIncluded (AIOps)Advance $415/mo add-on
Agentic workflowsPreview (policy-guarded)Runbook Automation (GA)Vulnerability MgmtSRE Agent (GA)
MCP serverYes (5 tools)NoNoYes (multi-agent protocol)
ITSM/PSANoNoNoNo
MSP suitabilityLow (enterprise)Low (cloud-native)Low (dev-focused)Medium (incident response)
The pattern: All four vendors are building AI capabilities but none have ITSM or MSP DNA. Dynatrace and Datadog are observability-first. PagerDuty is incident-response-first. New Relic is developer-first. The ITSM/MSP gap remains wide open for a vendor that can bridge observability intelligence with service management workflows and MSP billing. [Issue #4] [Issue #5]

Acquisitions signal expansion

AcquiredWhatSignal
DevCycle (2026)Feature management platform (OpenFeature)Progressive delivery for AI-native apps
Bindplane (2026)Open-standards telemetry pipelinesGreater data flexibility, vendor-agnostic ingest

Zero MSP DNA

Dynatrace is a $2B enterprise observability platform with world-class causal AI. It has nothing an MSP needs for service delivery.

No PSA Integration

Connects to ServiceNow and Jira for ticket creation, but no ConnectWise, Autotask, or HaloPSA. No multi-tenant client separation. No client billing workflows.

No RMM Bridge

Monitors infrastructure but doesn't manage it. No NinjaOne, ConnectWise Automate, or Datto RMM integration. No patch management, no remote access triggers.

No MSP Billing

Can't attribute costs to individual clients. Can't markup AI resolution fees. Volume discounts require sales contact. No self-serve MSP pricing tier.

MCP is Dev-Only

MCP server targets VS Code/Copilot users for AI coding agents. No ITSM-specific tools (create ticket, escalate incident, notify client).

Next research

IssueTargetWhy
#7New Relic AI + GrokPer-seat AI model, Grok integration, developer-first approach
#8BMC Helix + AEOpsEnterprise ITSM AI, closest to traditional ITIL workflows
#9Ivanti NeuronsITSM + endpoint management AI, MSP-adjacent positioning
#10Kaseya + Datto AIMSP-native vendor, Datto RMM AI features
Open question for Issue #7: New Relic offers "all-in-one" pricing with AI included. Does their Grok integration give them an edge over Dynatrace's causal AI approach? Or is Grok just a chatbot wrapper on NRQL queries?

What we read

#SourceDate
[1]Dynatrace MCP Server — docs.dynatrace.comSep 2025
[2]Dynatrace Intelligence Overview — docs.dynatrace.comJan 2026
[3]FY2026 Earnings Release — BusinessWireMay 13, 2026
[4]Dynatrace Assist — docs.dynatrace.comMar 2024
[5]Agentic & Generative AI Getting Started — docs.dynatrace.comSep 2024
[6]Dynatrace Pricing — dynatrace.comJun 2026
[7]Observability costs vs. AWS bill — r/sre2024

Method: SearXNG (Google+Bing+DDG) discovery → jina.ai content extraction → docs/help/blog deep-read. Dated citations cross-checked against live URLs. Claims without live source links are flagged as uncertain.