Lifecycle marketing moves below the campaign layer

The category is selling systems, not sends

The cleanest read on the fortnight is that email and lifecycle marketing vendors are trying to escape the campaign-tooling box. On 23 Sep, Klaviyo announced the acquisition of an agency team and associated technology to strengthen its CRM platform, alongside a global brand campaign featuring D’Arcy Carden. On 25 Sep, it added 138 product pages tied to AI prompt libraries and customer solutions, while removing 66 product pages and 79 customer resource pages. That is not ordinary content maintenance. It is a repositioning exercise at scale.

Braze made the same move through different signals. On 21 Sep, it announced the Forge 2026 agenda and was covered for beating earnings expectations and AI-led growth. On 26 Sep, it was recognised as a leader in the 2026 Gartner Magic Quadrant for Multichannel Marketing Hubs. Its homepage copy also changed twice in five calendar days: on 24 Sep it added headings such as “Know your customer before you engage them” and “AI-Powered Customer Engagement: A Braze Playbook”, then on 28 Sep it switched to “When technology moves fast, marketers move faster” and “Move from idea to impact at the speed of AI”. The difference matters. One version sells customer understanding, the other sells velocity.

Iterable leaned into connected customer experience. On 26 Sep, its changelog moved from Nova Intelligence relevance language towards Salesforce record connection, live product data sync and more mobile response capture. Mailchimp, meanwhile, added SSO documentation for Blackbaud Raiser's Edge, Microsoft Entra and Okta on 27 Sep, plus a Salesforce Marketing integration page. ActiveCampaign’s 18 Sep coverage of Active Intelligence 3.0 and its 21 Sep Customer Advisory Board expansion put it in the same conversation. Everyone is saying AI, but the deeper work is integration, identity and workflow ownership.

Developer surface area is now a market signal

The API and SDK trail was unusually active. On 19 Sep, Mailchimp created marketing SDK repositories across C#, Java, Swift, TypeScript, Python, Go, PHP, Ruby and Rust. On 24 Sep, it released version 6.3 of Mailchimp for WooCommerce, adding live chat support access, product-view pixel tracking and variable product enhancements. On 27 Sep, weekly downloads for @mailchimp/mailchimp_transactional rose from 133,264 to 202,845, while @mailchimp/mailchimp_marketing rose from 133,206 to 204,884.

Klaviyo pushed on mobile and API maintenance. On 20 Sep, it released version 5.4.1 of the klaviyo-swift-sdk and created mobile-app-growth-web and klaviyo-campaign-performance repositories. On 25 Sep, it released version 4.5.2 of the klaviyo-android-sdk to address an OutOfMemoryError crash affecting apps upgrading from version 4.4.1 or earlier, and created klaviyo-flutter-sdk and docker-percona-toolkit. On 28 Sep, it released version 2 of its OpenAPI, adding the latest beta specification, renaming the stable version and updating the stable version.

Braze and Iterable showed the same developer emphasis through adoption and repository movement. On 26 Sep, Braze’s top repository stars rose from 176 to 335 and it created braze-react-native-sdk and braze-android-sdk. On 27 Sep, weekly downloads for its web SDK rose 69% to 1,092,963 and react-native SDK downloads rose 56% to 212,994. Iterable released @iterable/web-sdk 2.3.2 and @iterable/react-native-sdk 3.2.0 on 23 Sep, added mcp-server and api-client repositories by 26 Sep, and saw @iterable/web-sdk weekly downloads rise 33% from 94,315 to 125,166.

The ad market was loud, but not random

Paid acquisition looked synchronised across the category. Klaviyo had 40 new Google ad creatives reported on 28 Sep, with the earliest first shown on 23 Sep, and 40 creatives running in total. Mailchimp had 35 new Google ad creatives reported on 27 Sep, with the earliest first shown on 24 Sep, also with 40 running in total. Iterable had 14 new creatives reported on 27 Sep, with the earliest first shown on 22 Sep, and 40 running in total.

ActiveCampaign had 39 new Google ad creatives reported on 26 Sep, although the earliest was first shown on 21 Aug, and it also had 40 running in total. Braze had 40 new creatives reported on 25 Sep, with the earliest first shown on 2 Jul, and another 40-new-creative set reported on 21 Sep with the earliest first shown on 26 Aug. Brevo had 40 new creatives reported on 20 Sep, with the earliest first shown on 29 Jul.

The surface read is simple: everyone is spending. The useful read is timing. Klaviyo and Mailchimp both showed fresh creative within days of reporting, while ActiveCampaign, Braze and Brevo carried longer-running creative pools into the fortnight. In a category where the product narrative changed almost daily, the ad layer separated vendors refreshing message from vendors sustaining campaigns already in market.

Reliability kept cutting through the positioning

The week’s security and reliability record was active enough to matter. On 19 Sep, multiple articles reported a supply chain attack affecting Brevo, involving malware injection into more than 100,000 websites and the use of ClickFix scripts and WordPress backdoors. On 24 Sep, further articles described a compromise involving a stolen Cloudflare API key used to inject malware into Brevo’s services. Brevo also reported a critical Contacts and Imports incident on 19 Sep, Phone and Conversations issues lasting around 149 minutes on 23 Sep, a Transactional Platform Frontend issue lasting around 14 minutes on 23 Sep, and two minor incidents on 27 Sep, resolved in around 15 minutes and 27 minutes respectively.

Mailchimp had plugin security disclosures. On 22 Sep, two CVEs published on 19 Sep were observed for Mailchimp’s WordPress plugins: CVE-2026-92435 for Mailchimp for WooCommerce and CVE-2026-87917 for MC4WP: Mailchimp for WordPress. On 27 Sep, CVE-2026-92436 was published for Mailchimp for WooCommerce prior to version 6.3, concerning authentication and ownership verification when loading a saved cart from a request-supplied identifier.

Others had operational interruptions rather than security headlines. On 18 Sep, ActiveCampaign resolved a major incident where bulk contact edit was not applying filters after about 26 minutes. On 19 Sep, Braze had a critical Support Services outage lasting around 412 minutes. Klaviyo reported minor flow sending delays on 21 Sep lasting about 155 minutes and again on 25 Sep lasting about 123 minutes. Iterable reported a minor timeout incident on User Update API endpoints on 26 Sep, resolved after around 56 minutes.

Hiring points to the markets vendors still want

Braze’s hiring signal was the broadest. On 20 Sep, it had posted 22 new openings in the prior seven days, including 2 sales roles, 14 marketing roles and 6 engineering and machine-learning roles. On 25 Sep, the count was 31 new postings, including 7 sales, 13 marketing and 11 engineering or ML roles, across locations including Dubai, Sydney, New York City, Austin, San Francisco, Chicago and Toronto. On 28 Sep, it added sales roles in Tokyo and Singapore, plus Data Lakehouse engineering roles in Toronto.

Klaviyo’s hiring was more targeted but geographically telling. On 20 Sep, it had 13 new postings, including a Head of Sales role in Sydney, 9 marketing roles across San Francisco, Boston and Dublin, and engineering roles in San Francisco and Boston. On 24 Sep, it listed 11 new postings, including sales roles in London and Dublin, marketing roles in London, Sydney and Singapore, and engineering roles in Denver, Boston and London. On 28 Sep, it added four marketing postings, including Partner Account Manager and Renewals Specialist roles in San Francisco, Boston, Denver and Dublin.

Iterable’s 19 Sep postings were narrower: a Principal Product Marketing Manager focused on AI Innovation and a Software Engineer, with locations including Atlanta, Austin, Boston, Chicago, Denver and Lisbon. In a fortnight full of AI copy, the hiring ledger was more concrete. Braze is staffing international go-to-market and data infrastructure, Klaviyo is adding regional commercial and marketing capacity, and Iterable is putting explicit product marketing weight behind AI.