# GOAT of the MOAT: the apps built to last

> A weekly award for the apps we expect to still be standing in a few years, judged on the eight moats that hold once code is cheap. See the podium, score your own app, nominate one.

Canonical: https://www.runtheworld.ai/goat-of-the-moat

GOAT of the MOAT is our weekly trophy for the apps we expect to still be standing in a few years. Code keeps getting cheaper, so we judge what's left when it's free: eight moats, from who trusts you to what's hard to keep running.
## This week's podium: Issue 1, 31 October 2026
1. **Stripe**, The Golden Horn. For moving the money, not just the numbers about it.
2. **Gusto**, The Hoof Cup. For the accountants who bring the business in.
3. **Avalara**, The Summit. For keeping up with every tax rule so nobody else has to.
## The eight moats
1. **Buyers know and trust you.** Has someone built a business or a career on recommending you?
2. **System of record.** Would leaving mean rebuilding something that only lives in your app?
3. **Allowed to act.** Does your app do the work, not just advise on it?
4. **They don't check your work.** Do customers trust what it produces without checking it?
5. **Someone official said yes.** Do you hold an approval a rival would have to wait for?
6. **Everyone's already in.** Would a rival have to move everyone at once to win one account?
7. **Every customer makes it smarter.** Does one customer's result make it better for all the others?
8. **Hard to keep running.** Do you keep something running that nobody wants to run themselves?
## The whole field
- **[Stripe](https://stripe.com)** (Ultra; Allowed to act, Every customer makes it smarter, Someone official said yes). It moves the money itself, under the licences that takes, and its fraud screening learns from every payment on its network. Tools for AI agents to take payments Runner reads your monthly revenue from your own Stripe account.
- **[Gusto](https://gusto.com)** (Marathon; Buyers know and trust you, They don't check your work). Accountants run their clients' payroll from a workspace Gusto gives them for free, so the people small businesses trust most bring the business in. And payroll is the work owners stop checking. An accountant's AI can work across every client at once
- **[Avalara](https://www.avalara.com)** (Marathon; Hard to keep running, They don't check your work, Someone official said yes). It keeps sales tax rules current across thousands of places and files the returns, with the state certifications a newcomer has to earn first. The rules never stop changing, and keeping up is the moat. Agents that decide by rule, the same answer every time
- **[Churnkey](https://churnkey.co)** (10K; Allowed to act, Every customer makes it smarter). It steps into the cancel flow and the failed payment and keeps the customer, and every save it runs grades the plays it hands the next business. Its whole playbook, open to AI agents
- **[Attio](https://attio.com)** (Half; System of record). A team's relationships, emails and deals live in it, which makes it the record everything else reads from. A CRM built around AI from the first screen Runner reads your Attio contacts.
- **[Ramp](https://ramp.com)** (Marathon; Every customer makes it smarter, Allowed to act). Every correction a finance team makes teaches its spend checks, and it pays the bills as well as tracking them. AI agents that review spend
- **[Toss Place](https://tossplace.com)** (Marathon; Someone official said yes, System of record). Shops across Korea take payments and run the counter on it, on the payment licences a newcomer has to earn. Toss Place connects to Runner to read your shop's sales.
- **[Twilio](https://www.twilio.com)** (Ultra; Someone official said yes, Hard to keep running). Carrier registration and consent rules are the hard part of a text message. Twilio carries them, and keeps the messages arriving. A phone line and a voice for AI agents Runner gives a team member a phone number on your own Twilio account.
- **[Cloudflare](https://www.cloudflare.com)** (Ultra; Hard to keep running, Every customer makes it smarter). It keeps a large share of the web up and fast, and every attack it sees on one site helps it stop the next one somewhere else. AI models running on its own network Runner protects your forms with your own Cloudflare Turnstile keys.
- **[Slack](https://slack.com)** (Ultra; Everyone's already in). The whole company is already in it, so moving means moving everyone at once. AI agents in the channels where the team already talks Runner posts its alerts to a Slack channel you pick.
- **[Square](https://squareup.com)** (Ultra; System of record, Everyone's already in). A shop's sales, items, staff and customers live in it, and the whole team clocks in on it. Square connects to Runner to read your shop's sales.
- **[Shopify](https://www.shopify.com)** (Ultra; Buyers know and trust you, System of record). Agencies and developers built whole careers on it, and a shop's products, orders and customers all live there. An AI assistant inside every store's admin Runner reads your Shopify POS orders report.
- **[Apify](https://apify.com)** (Half; Everyone's already in, Hard to keep running). A store of ready-made web tools built by independent developers, who are paid each time someone runs theirs. Apify keeps the proxies and anti-blocking working, so builders keep publishing and buyers keep coming back. A hosted MCP server for AI agents Runner runs account research on an Apify account you connect.
- **[Close](https://www.close.com)** (Half; System of record, Allowed to act). Calling, email and texting live inside the CRM, so a sales team's conversations sit beside the leads they belong to. AI agents that draft follow-ups and keep lead fields current Runner reads your Close contacts.
- **[Discourse](https://www.discourse.org)** (Half; System of record, Hard to keep running). A community's whole conversation becomes a searchable library its members come back to, and its spam filtering keeps moderators ahead as the place grows. AI summaries, semantic search and spam detection
- **[Lob](https://www.lob.com)** (Half; Allowed to act, Someone official said yes, Hard to keep running). An API call becomes a printed letter or postcard, produced near the address it is going to and mailed from there, with address checks the US Postal Service has certified.
- **[Moonlit](https://www.moonlit.ai)** (10K; Hard to keep running, Every customer makes it smarter). Laws, regulations and court decisions in a linked legal library kept current as the law changes, and enriched by expert review and validated contributions from its users. A data API and an MCP server for AI assistants
- **[Handwrytten](https://www.handwrytten.com)** (10K; Hard to keep running, Allowed to act). Robots holding real pens write the cards, then Handwrytten stamps and mails them, so a thank-you note can go out from a CRM or a chat. An MCP connector for Claude
- **[DataForSEO](https://dataforseo.com)** (10K; Hard to keep running, Buyers know and trust you). Live search results, keyword data and backlinks served through an API, and a whole trade of SEO tools and agencies builds its products on it. Its own MCP server for AI agents Runner reads the top ten for any keyword with your own DataForSEO key.
- **[Ghost](https://ghost.org)** (10K; Allowed to act, Buyers know and trust you). It publishes a writer's posts to the web and delivers them as an email newsletter, paid subscriptions built in, and independent designers and developers build Ghost sites for a living.
- **[Polar](https://polar.sh)** (10K; Allowed to act, Hard to keep running). It sells your software as the merchant of record, so filing and paying the sales tax becomes its job, and its meters bill tokens and agent runs straight onto the invoice. A hosted MCP server, and usage billing built for AI products
- **[Quaderno](https://www.quaderno.io)** (10K; Hard to keep running, Allowed to act). It works out sales tax, VAT and GST at checkout, issues the invoices and receipts, and files the returns, with a team following rule changes in every market it covers.
- **[Bento](https://bentonow.com)** (5K; Hard to keep running, Allowed to act). It sends a business's campaigns, automations and receipts, and a person reviews every account before it sends, so the sending reputation its customers share stays healthy. A hosted MCP server, and AI that drafts automations
- **[Keygen](https://keygen.sh)** (5K; System of record). It issues the licence keys, device activations and entitlements a developer's software checks against, so it holds the record of who owns what.