Launch week: every idea card is free.Get Pro

SaaS ideas, mined from what people actually complain about.

Every idea comes from real Reddit posts, was researched against today's competitors, and survived an independent skeptic before it made the list.

MFA and Passkey Friction

IT admins struggle to migrate resistant, low-tech, or shared-account users to modern MFA and passkeys without heavy helpdesk burden.

In their words

How will you adopt this and what will be your strategy on removing this from your system?

r/IdentityManagement on Reddit

At the moment, they use a PIN written down on a Post-it note next to their monitor, so it's absolutely useless.

r/sysadmin on Reddit

It's too small to hire for and too big to handle ourselves.

r/Accounting on Reddit

Don't leave users with zero options, because they *will* default to using text files on random cloud storage.

r/sysadmin on Reddit

we're not rolling out passkeys on admin accounts yet because without a proper way to store and manage them centrally, it's just not manageable at scale

r/msp on Reddit

we have hundreds if not thousands of client records in Keeper so when we try to log into a website or app for ourselves, we have to wade through all of those client records

r/SmallMSP on Reddit

Every time I look away from the screen for thirty seconds it locks me out and I have to pull out my personal phone and wait for a little green checkmark just to look at a potassium level.

r/Residency on Reddit

everyone had the same password, something to the effect of CompanyStreetName7xx where XX was an incrementing 2 digit number

r/talesfromtechsupport on Reddit

We’ve had a cluster of breached passwords in the last 2 weeks with no connection other than being stored in ITG.

r/msp on Reddit

having to jump into your inbox starts feeling slower than just typing a password

r/Frontend on Reddit

We end up having to change the username itself to stop the attacks, but that's obviously not scalable for thousands of accounts should the scope increase.

r/entra on Reddit

Companies should provide an alternative to using a personal device for Auth.

r/ShittySysadmin on Reddit

there is a non-trivial switching cost to migrate several people (with varying technical aptitudes) that each use several platforms

Hacker News

it's simply increased Customer Service contacts I have to invest in, whenever a user changes or loses devices

Hacker News

IT admins and MSPs

Where they talk

  • r/sysadmin
  • r/Intune
  • r/entra
  • r/msp
  • r/iiiiiiitttttttttttt
  • r/cybersecurity
  • r/salesforce
  • r/ShittySysadmin

Tools they use today

  • Microsoft Authenticator
  • Microsoft Entra
  • Conditional Access
  • YubiKey
  • Microsoft Intune
  • YubiKeys
  • 1Password
  • Duo

Why those fall short

  • No priority order or admin control; providers keep prompting
  • sessions time out in 3-5 minutes and 2FA requires personal phone each login
  • fobs constantly lost, SMS limited, no self-management
  • Users lack smartphones, refuse personal device installs, or use shared devices; passkeys need phones
  • users download wrong app, can't find app, can't scan QR on one device