Launch week: every idea card is free.Get Pro

SaaS ideas, mined from what people actually complain about.

Every idea comes from real Reddit posts, was researched against today's competitors, and survived an independent skeptic before it made the list.

Unreliable Email Filtering

Email security filters fail to reliably block phishing, spam, and malicious emails while also causing false positives and operational overhead.

In their words

Defender is doing *something*, but clearly not enough.

r/cybersecurity on Reddit

It still filters the bulk fine and the odd BEC slips but main problem here is whether I am re-signing out of pure inertia.

r/ITManagers on Reddit

we're on Google Workspace for Education Fundamentals. No Security Investigation Tool, so no easy domain-wide email purge.

r/k12sysadmin on Reddit

I'm spending more time managing Barracuda than it's saving me

r/sysadmin on Reddit

Is the SEG still pulling its weight against the stuff that actually hurts now, the BEC and vendor impersonation with no link or attachment.

r/Office365 on Reddit

Every month a few well written phishing and clean BEC messages land and get reported after the fact.

r/Office365 on Reddit

Spent an hour every day managing the dumbest email security program known to man

r/sysadmin on Reddit

I have access to about 200 DNS zones of companies, some of which have up to 400 domains in their portfolios, and none of them hardens their parked domains.

r/homelab on Reddit

it had not inspected or classified any emails in over 90 days... no errors, no warnings, no notifications

r/msp on Reddit

We have 650 users..And we are in microsoft ecosystem. Is defender plan 2 enough for email security. What is the cost effective way to have an email security

r/cybersecurity on Reddit

Last month we got an email that looked exactly like our title company changing wire instructions mid-transaction. Caught it at the last minute but it was close.

r/AskNetsec on Reddit

I've been seeing a lot more phishing and BEC attempts slip through lately.

r/CyberSecurityAdvice on Reddit

Gmail spam is the biggest threat by volume I've seen in years of managing email security for clients

Hacker News

I frequently need to get into the spam folder to discover emails that Gmail thinks they are spam, even though there is absolutely no reason for it.

Hacker News

IT and security teams

Where they talk

  • r/sysadmin
  • r/EmailSecurity
  • r/cybersecurity
  • r/msp
  • r/Office365
  • r/exchangeserver
  • r/k12sysadmin
  • r/AskNetsec

Tools they use today

  • Defender
  • Microsoft 365
  • Proofpoint
  • Exchange Online
  • Google Workspace
  • Abnormal
  • Gmail
  • Mimecast

Why those fall short

  • Email falls outside basic IT/DevOps roles; no dedicated email engineers.
  • tool blocks every email, not just malicious ones
  • Microsoft's button submits links for scanning, counted as a click by SAT platforms
  • Docusign's sending reputation is poor and Microsoft flags legitimate links as phishing.
  • Implicit allow in connector setup; docs don't warn; SPF/DMARC not checked on direct delivery.