SaaS ideas your next customers are already looking for
100 SaaS startup ideas for the people who said they'd pay, from agency owners to dentists. Micro SaaS ideas, AI SaaS ideas and B2B SaaS ideas: find yours, build it, sign them up.
Popular:
| # | Idea |
|---|
No idea matches this filter.
Pain points in business: what people struggle with
Search the problems to solve, as people described them on Reddit and other platforms, in their own words.
Popular:
| # | Pain point |
|---|
No pain point matches this filter.
Security Remediation Tracking
Security teams struggle to track, prioritize, and remediate findings across fragmented tools and audits.
In their words
What are some tools you think are really important if you were building out a competent cyber function?
The biggest issue isn't finding things, it's figuring out what actually matters.
when management asks what we're getting for that spend, the answers feel thin
they give a snapshot rather than a living view of control effectiveness. Once we close the findings, the environment has already moved on.
We need another employee just to manage our AW account. It's so annoying.
We are moving away from point-in-time quarterly pentests and looking to adopt a continuous validation model.
I had recommended a complete overhaul of their IT infrastructure as basically almost everything was wrong and had no proper security, no backups, nothing.
IT gets an email saying they need "access to the router" so they can put the system online.
What I cant tell you is whether the 250 we fixed were the 250 that mattered.
are we testing the right things, at the right frequency, in a way that would actually surface something real before an attacker does?
Most of what I've seen seems geared toward running scans on a monthly basis, which feels too infrequent.
How are other CISOs grading vendor pentest credibility during TPRM reviews?
We secured our tools under WAF with standard approaches (rate limits, blocking IPs, bot detection), but it feels like there's always a flaw/leak somewhere to fix.
Security teams and engineers
Where they talk
- r/cybersecurity
- r/AskNetsec
- r/grc
- r/sysadmin
- r/ciso
- r/blueteamsec
- r/devsecops
- r/Pentesting
Tools they use today
- Confluence
- Jira
- Varonis
- Cobalt
- CrowdStrike
- Excel
- SafeBreach
- Splunk
Why those fall short
- no senior guidance or repeatable review methodology
- separate platforms, no integration, manual work, no automation
- reviews are manual and responsibilities keep being dropped on whoever has capacity
- Vendors install with open ports, default passwords, no cybersecurity in engineering team
- Findings are just CVEs with scores; no asset criticality, ownership or business context
Map of ideas
Drawing the map…