Meta is creating a new business unit to sell AI products and services to companies, naming MongoDB CEO Chirantan “CJ” Desai to lead it. The Meta Enterprise Platform will initially bring together the Muse agent, Meta Business Agent, Muse API and Muse Code, CEO Mark Zuckerberg announced Monday⁠. Desai will become chief enterprise platform officer and report directly to Zuckerberg.

The move gives Meta a more explicit enterprise pitch: businesses should be able to deploy its AI stack for their own operations, rather than use Meta chiefly to advertise and reach customers.

For prospective buyers, however, Monday’s announcement describes a strategy more than a purchasable package. Meta did not specify which products are available through the new platform now, how they work together, what they cost, or what contractual and administrative controls an enterprise customer would receive.

Desai brings experience selling software to large organizations. Before becoming MongoDB’s CEO and president, he led product and engineering at Cloudflare and spent nearly eight years at ServiceNow, including time as its president and chief operating officer, according to Meta.

In a statement accompanying the announcement, he said the platform would turn Meta’s AI stack into products companies could deploy themselves and that “security and privacy are built into Meta’s enterprise products from the outset.” Meta supplied no detailed enterprise security specifications in the announcement.

What Meta can offer businesses today

The consumer Muse agent⁠, introduced earlier this month, takes actions such as sending email and booking travel. Meta says it runs in a dedicated virtual machine, asks before sensitive actions and provides a record of what it has done. It has gained substantial early traction: market intelligence firm Sensor Tower estimated more than 3.4 million downloads as of September 24, according to TechCrunch⁠. Competing estimates varied, and downloads do not establish how many people continue to use the agent. Muse also reached No. 1 in the U.S. Apple App Store and Google Play Store during its first two weeks.

Muse’s approach has a connection to OpenClaw⁠, the open-source assistant that acts through messaging apps and connected tools. Nat Friedman, Meta’s head of AI products, said⁠ Meta built Muse from scratch but drew substantial product inspiration from OpenClaw after his team experimented with it. That describes an influence on Muse’s design, not a claim that Muse runs OpenClaw’s code. The attraction for users is also the source of enterprise complexity: an agent becomes more useful as it gains access to more accounts, data and actions.

Meta has described safeguards around those capabilities, including a separate credential store and a monitoring component called Sentinel that checks an agent’s requested actions. But its security documentation⁠ says the current architecture does not technically prevent Meta from accessing information in a user’s virtual machine when needed to operate or secure the service. Meta says a forthcoming Confidential VM is intended to prevent that access through encryption; the company has not said that this protection is available in today’s Muse.

VentureBeat reported⁠ another concern last week. Security researcher Patrick Wardle found a flaw in Muse’s Mac app that could let malware already running in a user’s account capture authentication material and control the agent. Meta patched the flaw within a day; the attack required malicious code on the Mac and did not defeat Muse’s cloud isolation. VentureBeat also found that the consumer product offered an individual activity record but no documented central view for a company’s security team. In a test using a personal account, VentureBeat security correspondent Louis Columbus had Muse build a simple deal tracker and write a row to a connected Google Sheet. That demonstrated useful business-style actions, though it did not test whether corporate controls would detect or stop them.

The possible effects extend beyond a company’s own systems. In a September 27 note⁠, Apollo chief economist Torsten Slok raised a hypothetical “agentic bank run”: Muse or similar assistants might eventually move households’ spare cash from low-interest checking accounts into accounts paying more, potentially depriving banks of inexpensive deposits if adopted at scale. He cited a 0.1% national average checking yield against rates of 3.3% to 5.0% elsewhere. This is a scenario about what agents could do, not evidence that Muse currently sweeps deposits or that withdrawals are occurring.

Muse’s consumer momentum gives Meta a timely opening with businesses, but it does not answer the enterprise questions. Monday’s statement does not say how the personal agent would handle shared company data, employee permissions or approval processes.

Nor does it explain how Muse Code and the Muse API will be sold or administered as part of the enterprise offering. Buyers will need to see whether Meta can pair an agent people want to use with the visibility, controls and data protections their organizations require.

A new attempt after earlier enterprise exits

Meta has pursued business software before, and the distinctions matter. Meta for Business, previously Facebook for Business, remains an active set of tools for managing a company’s presence and customer activity across Facebook, Instagram and Messenger. It should not be confused with Workplace, Meta’s former internal communications product for employers.

Launched as Workplace by Facebook in 2016, Workplace let employees communicate and share information inside their organizations. Meta said it had reached more than seven million paid subscribers by 2021, but announced in 2024 that it would discontinue the service.

Customers could use it normally through August 2025; the product closed in May 2026. That history leaves a concrete question for buyers considering another Meta system for core operations: what long-term product and migration commitments will the company make?

Meta also pitched virtual reality as a workplace tool. It introduced Horizon Workrooms, a meeting and collaboration app, in 2021 and promoted business use of Quest headsets. Workrooms shut down in February 2026. Horizon Worlds is Meta’s social virtual-world platform; it is distinct from the Workrooms product aimed at workplace collaboration.

Those exits do not establish how Meta’s AI platform will fare. They do show why an enterprise customer may want more than a demonstration of agent capabilities. Pricing, service guarantees, data handling terms, administrator controls, integration support and an exit path will determine whether the new platform can become dependable business infrastructure. Meta’s announcement leaves those terms for another day.