SaaS ideas your next customers are already looking for
100 SaaS startup ideas for the people who said they'd pay, from agency owners to dentists. Micro SaaS ideas, AI SaaS ideas and B2B SaaS ideas: find yours, build it, sign them up.
Popular:
| # | Idea |
|---|
No idea matches this filter.
Pain points in business: what people struggle with
Search the problems to solve, as people described them on Reddit and other platforms, in their own words.
Popular:
| # | Pain point |
|---|
No pain point matches this filter.
Inconsistent Security Controls
Security teams struggle to enforce, audit, and maintain consistent security controls across diverse environments, leading to misconfigurations, blind spots, and compliance risks.
In their words
The same physical device can suddenly appear as a "new device" with a different MAC address, bypassing its assigned group or rules.
unless you have something like ThreatLocker in place already to block portable browsers from running, you're not stopping random extensions across the board either
Most frustrating part is that they haven’t implemented a bloodhound like graph solution in the UI and instead u still get 1 path at a time
Looking for sandbox tools and companies that can breakdown url's on par with Joe Sandbox or better.
do you think we should extend crowdstrike into cloud or buy a dedicated cnapp?
So they first charge you for the software and then any strategy that might be feasible, it sends that home.
our prompt filter was watching the user input field, not the document upload
I just want to answer: who’s trying to attack me and potentially mucking around inside?
one of our backup devices was also infiltrated... This means we have about 5 devices with no backups available.
Due to the already sparse logging, we didn’t know about it until the DNS logs started coming in.
I don't see why that can't be accomplished with good EDR and dns filtering without having to manage certificates and troubleshooting sites/services that break when you MiTM them.
our FW update mechanism has no security around the FW image... the product will accept/program any image it receives to flash
All the pauses that EDR does combined with Emacs mostly single threadedness is a bummer.
our automated detection only covered our own prefixes, not customer prefixes we announce on their behalf
Security and IT admins
Where they talk
- r/sysadmin
- r/AskNetsec
- r/cybersecurity
- r/Intune
- r/DefenderATP
- r/msp
- r/AI_Agents
- r/networking
Tools they use today
- Defender
- Microsoft Intune
- Claude
- CrowdStrike
- CrowdStrike Falcon
- Microsoft Entra
- Docker
- Fortinet
Why those fall short
- filters watch only the chat input, not documents or other ingestion channels
- Backup device was on network and got encrypted too
- logging was sparse, so activity went unnoticed until DNS logs arrived
- Disabling Run misses Terminal and Explorer address bar variants; users still reach PowerShell
- no way to verify what attacks are actually possible
Map of ideas
Drawing the map…





