Launch week: every idea card is free.Get Pro

SaaS ideas, mined from what people actually complain about.

Every idea comes from real Reddit posts, was researched against today's competitors, and survived an independent skeptic before it made the list.

Inconsistent Security Controls

Security teams struggle to enforce, audit, and maintain consistent security controls across diverse environments, leading to misconfigurations, blind spots, and compliance risks.

In their words

The same physical device can suddenly appear as a "new device" with a different MAC address, bypassing its assigned group or rules.

r/firewalla on Reddit

unless you have something like ThreatLocker in place already to block portable browsers from running, you're not stopping random extensions across the board either

r/msp on Reddit

Most frustrating part is that they haven’t implemented a bloodhound like graph solution in the UI and instead u still get 1 path at a time

r/crowdstrike on Reddit

Looking for sandbox tools and companies that can breakdown url's on par with Joe Sandbox or better.

r/cybersecurity on Reddit

do you think we should extend crowdstrike into cloud or buy a dedicated cnapp?

r/devsecops on Reddit

So they first charge you for the software and then any strategy that might be feasible, it sends that home.

r/algotrading on Reddit

our prompt filter was watching the user input field, not the document upload

r/PromptEngineering on Reddit

I just want to answer: who’s trying to attack me and potentially mucking around inside?

r/selfhosted on Reddit

one of our backup devices was also infiltrated... This means we have about 5 devices with no backups available.

r/sysadmin on Reddit

Due to the already sparse logging, we didn’t know about it until the DNS logs started coming in.

r/cybersecurity on Reddit

I don't see why that can't be accomplished with good EDR and dns filtering without having to manage certificates and troubleshooting sites/services that break when you MiTM them.

r/sysadmin on Reddit

our FW update mechanism has no security around the FW image... the product will accept/program any image it receives to flash

r/embedded on Reddit

All the pauses that EDR does combined with Emacs mostly single threadedness is a bummer.

Hacker News

our automated detection only covered our own prefixes, not customer prefixes we announce on their behalf

Hacker News

Security and IT admins

Where they talk

  • r/sysadmin
  • r/AskNetsec
  • r/cybersecurity
  • r/Intune
  • r/DefenderATP
  • r/msp
  • r/AI_Agents
  • r/networking

Tools they use today

  • Defender
  • Microsoft Intune
  • Claude
  • CrowdStrike
  • CrowdStrike Falcon
  • Microsoft Entra
  • Docker
  • Fortinet

Why those fall short

  • filters watch only the chat input, not documents or other ingestion channels
  • Backup device was on network and got encrypted too
  • logging was sparse, so activity went unnoticed until DNS logs arrived
  • Disabling Run misses Terminal and Explorer address bar variants; users still reach PowerShell
  • no way to verify what attacks are actually possible