SaaS ideas your next customers are already looking for
100 SaaS startup ideas for the people who said they'd pay, from agency owners to dentists. Micro SaaS ideas, AI SaaS ideas and B2B SaaS ideas: find yours, build it, sign them up.
Popular:
| # | Idea |
|---|
No idea matches this filter.
Pain points in business: what people struggle with
Search the problems to solve, as people described them on Reddit and other platforms, in their own words.
Popular:
| # | Pain point |
|---|
No pain point matches this filter.
Insecure Credential Handling
Teams struggle to securely store, share, rotate, and revoke credentials and OAuth tokens across tools, clients, and environments, leading to exposure and breakage.
In their words
Need something you get a link, you click it, you get the password. No auth required, can work publicly with no VPN.
I'd be happy to pay a nominal fee to not need to set calendar reminders and then spend some time trying to fiddle around to reset the timer.
Email-based auth is killing our signup funnel. Are we missing something obvious?
the API for our password manager is lacking. OTS meets our need to send secrets in an automated way, which our other tools didn't meet.
what I really want is actual token numbers — a running total for the current session, the session's token limit, and the same for the weekly cap.
the NetSuite authentication token expires every few days, requiring a manual refresh
assumes the auth is done on a device where a browser exists
Is there a software or tool my company can use? Something ideal where the client doesnt have to have an account/create an account because its a 1 time thing.
endpoints e credenciais de API hardcoded no código
half the team still pastes credentials into config files under deadline pressure
we found some code using API keys directly that were not managed in our normal key system
my biggest headache is MCP / Function auth to external tools
my account was stuck in some sort of limbo where they can't see the state of it and their engineering couldn't figure it out
At ~30 clients this is genuinely painful: no central place showing what access we have per client, no expiry tracking, keys living in inboxes forever.
Developers, sysadmins, agencies
Where they talk
- r/MicrosoftFabric
- r/sysadmin
- r/n8n
- r/devops
- r/AI_Agents
- r/SaaS
- r/cybersecurity
- r/mcp
Tools they use today
- Microsoft Entra
- n8n
- Microsoft Fabric
- Keycloak
- Claude
- MCP
- OAuth
- Supabase
Why those fall short
- auto-expiration and hibernation; no persistence
- Vendors lack OIDC and rotation endpoints; handlers verify only one secret during overlap
- emergency hand-over needs a lawyer or pre-selected people; works alone
- GMSA refused; no one knows original passwords or where creds are configured
- assumes user interaction and a browser on the device
Map of ideas
Drawing the map…