Launch week: every idea card is free.Get Pro

SaaS ideas, mined from what people actually complain about.

Every idea comes from real Reddit posts, was researched against today's competitors, and survived an independent skeptic before it made the list.

Bot Traffic Skews Analytics

Automated bot and AI crawler traffic inflates analytics, skews conversion metrics, and drives up server and hosting costs while evading existing blocking tools.

In their words

foreign IPs for bots got past that Managed Challenge and ended up continuing to hit our backend!

r/CloudFlare on Reddit

I have a small e-commerce site that keeps getting fake customer accounts set up by bots.

r/CloudFlare on Reddit

My live traffic view in wordfence is constant bot after bot. I block them and more show up.

r/woocommerce on Reddit

When I send a newsletter, there are certain recipients that always, immediately, open the email and click the first three links. It is obvious they are not real.

r/MailChimp on Reddit

Over 2,100 accounts had been created in less than 20 minutes.

r/developersIndia on Reddit

In the last 24h: 685 requests from germany, 266000 from the US

r/selfhosted on Reddit

my sprint task for the week is to somehow build a complex exclusion filter in looker studio so their vanity metrics still look ok-ish

r/analytics on Reddit

I tried blocking, they still sent tens of thousands of requests per day.

r/selfhosted on Reddit

Meta essentially DDOSes me all the time. They seem to think that sending 1k+ requests per second to my site is acceptable.

r/webdev on Reddit

I manage 100's of WP sites and I've had a few dozen Wordfence reports today from thousands of Amsterdam and Bulgarian IPs just hammering my sites.

r/Wordpress on Reddit

the real business traffic is actually very low (only a few orders per day), but we still experience regular downtime

r/dotnet on Reddit

80% of our traffic are AI bots... We have to feed the infra to support all this traffic.

r/OpenAI on Reddit

flooded with hundreds of thousands of requests coming from scraper bots ... This made me hit the bandwith cap of my hosting provider and had to pay extra per TB used that month from my own pocket

Hacker News

121 of them turned out to be cloud scrapers using normal Chrome and iPhone user agents.

Indie Hackers

Website owners and developers

Where they talk

  • r/webdev
  • r/CloudFlare
  • r/Wordpress
  • r/shopify
  • r/GoogleAnalytics
  • r/FacebookAds
  • r/woocommerce
  • r/ecommerce

Tools they use today

  • Cloudflare
  • Google Analytics
  • Shopify
  • Anubis
  • nginx
  • Google Search Console
  • captcha
  • Meta Ads

Why those fall short

  • basic rate limiting alone was not enough to stop the attack
  • Rotating IPs defeat rate limits; headless browsers simulate real users
  • unknown
  • crawlers ignore crawl-delay and rotate IPs and user agents
  • no upstream bot filtering; dashboards show inflated vanity metrics