Coloured pencils laid out in a graded arrangement from blue to pink.

The wrapper risk index

Wrapper risk is the most argued-about property of an AI company and the least measured. Here it is for all 29 markets, with tests of whether it predicts saturation and whether it predicts death.

16 September 2026 · 9 min read · Data frozen 16 September 2026

Wrapper risk is the single most argued-about property of an AI company and the least measured. This report puts a number on it for all twenty-nine markets we track, shows how it distributes, and tests whether it predicts the two things people assume it predicts: saturation, and death.

The short version

  • 6,113 live tools carry a wrapper-risk score. The distribution is bimodal: 3,962 below 20, 1,182 at 60 or above, 53 in the 40–59 band.
  • Market averages range from 7.7 (AI Models) to 55.0 (Writing) — a sevenfold spread.
  • Wrapper risk and saturation move together across markets. The correlation is the strongest relationship between any two of our market-level measures.
  • It does not predict failure. Thin markets are crowded, but their products do not die faster than thick ones.

Definition and coverage

Wrapper risk is a 0–100 estimate of how much of a product’s value derives from a general-purpose model it does not own. It rises with thin interfaces over public APIs and falls with proprietary data, workflow depth, regulatory access, or a model trained in-house. It is a statement about defensibility, not about quality. The complete definition is on our methodology page.

6,113 of 6,441 live tools carry a score. The remaining 328 are recent additions we have not assessed, and are excluded from every figure here rather than counted as zero. Market averages are reported only for markets with at least 40 scored tools, which is all 29.

A second, stricter measure appears alongside it: the count of tools we have flagged outright as wrappers, 405 across the live catalog. The score is a spectrum; the flag is a judgement. Both are shown below because they disagree in useful places.

6,113
live tools scored
1,182
score 60 or above
53
in the 40–59 band
405
flagged outright as wrappers

Finding one: the score is bimodal

Live tools by wrapper-risk band
0–193962
20–39916
40–5953
60–791004
80–100178

6,113 scored live tools. Falcoscan catalog, 16 September 2026.

3,962 tools score under 20 and 1,182 score 60 or above. Between 40 and 59 there are 53 — under one percent of the scored population. A measure intended as a continuum is behaving as a classification.

We take that as a property of the thing being measured rather than of the measurement. There is no gradual way to half-own a model or half-hold a regulated integration. A company either has an asset the model provider does not, or its product is an arrangement of prompts around one that does. The middle of this distribution is empty because the middle does not exist in practice.

Finding two: a sevenfold spread by market

Average wrapper risk by market
Writing55 · 351 tools
Social45.1 · 264 tools
Productivity44.7 · 290 tools
Support39.7 · 220 tools
Learning35.1 · 236 tools
Coding32.8 · 416 tools
Agents31.5 · 322 tools
Marketing29.6 · 269 tools
Sales29.4 · 268 tools
Design25.4 · 356 tools
Image23.2 · 391 tools
Video21.4 · 291 tools
Ecommerce21.3 · 284 tools
Search & SEO16.4 · 66 tools
Music16 · 59 tools
Human Resources15.6 · 82 tools
Voice15.5 · 265 tools
3D & AR/VR15.5 · 65 tools
Real Estate15.5 · 70 tools
Gaming15.3 · 56 tools
Research15.2 · 76 tools
Automation14.6 · 99 tools
Avatars14.4 · 66 tools
Data12.1 · 270 tools
Legal12.1 · 75 tools
Finance11.7 · 255 tools
Healthcare8.8 · 104 tools
Security8.6 · 239 tools
AI Models7.7 · 308 tools

Mean wrapper-risk score across each market's scored live tools. Falcoscan catalog, 16 September 2026.

Writing averages 55.0 and AI Models 7.7. The ordering is close to a ranking of how directly each market’s core task overlaps with what a general-purpose model does unaided. Writing, social posting, summarising, scheduling and tutoring sit at the top. Training models, defending networks, and operating inside clinical or financial systems sit at the bottom.

Finding three: it tracks saturation

Wrapper risk against saturation, market by market
MarketWrapper riskSaturationOpportunityFlagged wrappersScored tools
Writing55644062351
Social45.1565447264
Productivity44.7466353290
Support39.7396743220
Learning35.1426332236
Coding32.8446028416
Agents31.5317321322
Marketing29.6495828269
Sales29.4446419268
Design25.4415318356
Image23.2524910391
Video21.4436314291
Ecommerce21.3366512284
Search & SEO16.42469366
Music161973159
Human Resources15.61973082
Voice15.541665265
3D & AR/VR15.51377065
Real Estate15.51376070
Gaming15.31478256
Research15.21476176
Automation14.62372099
Avatars14.41575066
Data12.133683270
Legal12.11180075
Finance11.735672255
Healthcare8.811820104
Security8.633680239
AI Models7.730731308

Each market's average wrapper-risk score next to its average saturation score, ordered by wrapper risk. Falcoscan catalog, 16 September 2026.

The six thinnest markets average 42.1 on wrapper risk and 48.5 on saturation. The six thickest average 10.2 and 25.5. This is the most useful relationship in our market-level data, and it supplies a causal story that the raw saturation number does not: markets do not become crowded because they are lucrative, they become crowded because the barrier to entering them is an API key.

It also explains why saturation is difficult to reverse. A market whose barrier is low stays low. Every departure is replaced, because replacement costs a weekend.

Finding four: it does not predict death

The intuitive next step is that thin products should fail more often. They do not, at least not measurably. Writing, the thinnest market in the catalog, has a failure rate of 8.6% — essentially the catalog average of 8.4%. Social, second thinnest, is at 6.7%, better than average. Gaming, which ranks 20th of 29 on wrapper risk at 15.3, has the worst failure rate in the catalog at 32.9%.

The explanation is that wrapper risk and mortality describe different failure modes. A thin product usually does not shut down; it gets squeezed. Its pricing power erodes, its free tier is matched by the model provider, and it persists as a smaller business than it planned to be. What kills companies, according to our mortality report, is selling a generated artefact to a churning consumer — which is a revenue problem, not a defensibility one.

For an investor that distinction matters. Wrapper risk is a margin question. Category and buyer are the survival questions. A diligence process that only asks the first one is asking about the wrong risk.

What this measure cannot do

Three limits worth stating. It is assessed at a point in time, and a company that ships a proprietary dataset next quarter will not move until we reassess it. It says nothing about revenue: several high-scoring products are among the most commercially successful in their markets. And it is a judgement about business model made from outside the company, which means it will be wrong about specific firms in both directions even where the market-level pattern holds.

The market averages are the durable part of this report. Use the per-tool scores on each product page as a prompt for a question, not as an answer to one.

Photo: Lucas George Wendt / Pexels. Colour-graded for Falcoscan.

Citing these numbers

Every figure here is from the Falcoscan catalog as it stood on 16 September 2026, and is frozen at that reading. Later changes to the catalog will not alter this page, so a number you quote today will still say the same thing when someone checks it.

Falcoscan, “The wrapper risk index”, 16 September 2026. https://falcoscan.com/reports/the-wrapper-risk-index

All reports