New startup ideas · AI and software · Developer tools

startup idea

Patchwright

An upgrade agent that keeps small software companies current, with a recipe store others fill.

Patchwright is a hosted agent that watches a small software vendor's repositories and does the maintenance work nobody staffs: dependency and framework upgrades, breaking API migrations, deprecation fixes, and the evidence trail for SOC 2, GDPR and accessibility questionnaires that their own customers demand.

AI agent as a service
Small business
$1-10B market
Platform others build on
Global from day one

3/5

venture judge

similar startups, last 2 years (2 all-time)

95%

of 4 nearest real companies still alive

yes

2 matching federal grants and programs

Direction supported by government programs and grants

Test it before you build it

$600 · 3 weeks · 40 prospects

For $600 and 3 weeks, prove that founders of small SaaS companies on end-of-life frameworks will put $300 down on a $1,500 upgrade the week a customer's security questionnaire threatens a deal.

Riskiest assumption · A founder of a 2-10 person SaaS on an end-of-life framework will pay a fixed price to an outside agent service in the same week a customer's security questionnaire threatens a deal, rather than defer the upgrade or hand it to a free general coding agent.

1Focus group: who and where

The founder or de facto CTO of a 2-10 person US SaaS company running an end-of-life stack (Node 16, Django 3, Rails 6) who has received a security questionnaire or vendor-review request from a larger customer in the current quarter

where to find 40 · A BuiltWith export of US SaaS sites still on end-of-life Node or Django versions (the list), the MicroConf Connect community (the community), Indie Hackers groups and r/SaaS (the channels where these founders already complain about enterprise security reviews)

2Sell first, build later

One upgrade that unblocks the deal - for example Node 16 to 20 or Django 3 to 5 - delivered as reviewable pull requests against a preview environment within 14 days of the deposit, plus a one-page evidence summary the founder can paste into the customer's security questionnaire.

the ask · $1,500 flat per upgrade; $300 deposit up front, $1,200 invoiced when the first pull request opens.

a real yes · A real yes is the $300 deposit paid. Booked calls, 'send me the scan first', and promises to buy after the customer deal closes are not.

3Small experiments

The first one attacks the riskiest assumption; each ends with a number that says whether to run the next.

1. Cold offers to stale-stack vendors
$450 · 14 days
Pull 40 US SaaS companies on EOL Node or Django from a BuiltWith report, verify the version by hand, and send each founder a personal email naming their exact stack and the offer: the one upgrade that unblocks their deal, as reviewable PRs in 14 days, $1,500 flat with a $300 deposit. Take every reply to a 20-minute call and ask for the deposit on the call.
keep going if · 8 of 40 book a call, and 4 of those agree to pay the $300 deposit
2. Recipe publisher probes
$0 · 7 days
Email the developer relations contacts of 10 API and framework projects whose migrations these 40 companies need (e.g., Stripe API versions, Django LTS, Node LTS) and ask one question: would you publish your official migration as a versioned recipe in a registry your users' agents run? No build, just a documented yes or no with a named migration.
keep going if · 3 of 10 say yes and name the migration they would publish first
3. Free scan lead magnet
$150 · 14 days
Put up a one-page site offering a free EOL and dependency-risk scan with the $1,500 upgrade priced beside it, and post it once each in MicroConf Connect, Indie Hackers and r/SaaS in a founder-voice thread about failing security reviews. The scan is run by hand with existing open-source tools; every scan reply gets the paid offer.
keep going if · 15 scan requests, of which 5 convert to an offer call

4Collect a deposit up front

Tesla took $1,000 refundable reservations for the Model 3 and $100 for the Cybertruck before building either: the deposit is the measurement, not the revenue.

$300

per prospect, refundable

how · A $300 deposit paid on a card checkout page linked from the offer email - these founders buy every tool self-serve on a company card with no procurement, so a card checkout is the instrument they already use; the founder clicks, nothing is signed. set up: Stripe Checkout ↗

what it reserves · A slot in the first upgrade cohort, a 14-day delivery clock that starts within 10 business days, and the $1,500 flat price locked.

refund · Fully refundable any time before the first pull request opens; after that it applies to the $1,500 balance.

target · 5 deposits from 20 offer conversations within 21 days.

before taking money · Sell the upgrade and its evidence trail as engineering work, never as SOC 2 or GDPR certification - make no compliance attestation until counsel has reviewed the wording.

Go: build it if

5 or more $300 deposits from at most 20 offer conversations, plus at least 3 of 10 API or framework teams saying they would publish a recipe - the paid wedge and the registry premise both confirmed.

Kill: stop if

Fewer than 2 deposits from 20 offer conversations, or a majority of founders on calls saying a free coding agent or Dependabot already did the upgrade - either means the deal-blocked founder does not pay an outsider.

5 Scripts to run itoutreach message, landing copy, deposit terms · click to open

outreach message

Your app is running Node 16, which went end of life in 2023 - exactly the kind of finding enterprise security questionnaires now flag before a deal closes. I run the upgrade as reviewable pull requests against a preview environment, with a one-page evidence summary for the questionnaire: $1,500 flat, done in 14 days, $300 down and nothing else until you see the first PR. If a stale framework is sitting between you and a signed deal, can we take 20 minutes this week?

landing page

Pass the security questionnaire without pausing your roadmap $1,500 flat: one framework or dependency upgrade, shipped as reviewable pull requests in 14 days Put down $300 to reserve a slot in this month's cohort

deposit terms

Your $300 deposit reserves a slot in the current upgrade cohort and locks the $1,500 flat price; work starts within 10 business days and the balance is only invoiced when the first pull request opens. Refundable in full any time before that first PR.

Would you run this test?

One tap. The yes-share feeds the Demand pillar of this idea's score; nobody sees who answered.

Budgets are out-of-pocket estimates for a team of one to three, US market. Size the deposit to the deal, and check the terms before taking money in a regulated line.

Scorecard

One score that balances how trendy the idea is, the demand for it and its potential for 100x, with competition measured relative to every other idea in the catalog. Recent startup trends first, government priorities second.

Idea Score, 0-100 · raw 38.0 x 1.61

Warm

competition: more crowded than 32% of ideas · headwind x0.84

+1.2

government priorities, secondary (2 matching grants)

Trend

Is the wave forming now? 2025-26 entrants vs 2023-24, rounds since 2025, the sector's live-batch direction, the 2026 trend analyst.

Entrants 2025-26 vs 2023-24 (similar companies)90
Rounds announced 2025+ in the sector16
Sector direction (live batch)50
2026 trend analyst50

Demand

Does anyone want it? YC's current RFS, companies already paid for something similar, the operator judge, founders' yes-rate in decks, readers who would run the test.

YC asks for it (current RFS: idea / sector)30
Someone already pays (similar companies, recent / all-time)33
Operator judge: real pain75

100x potential

Can it return a fund? The venture judge (double weight), market-size and moat axes, neighbours still alive, the technologist judge.

Venture judge50
Market size axis33
Moat axis20
Technologist judge25

Score = 100 x cbrt(Trend x Demand x 100x) x (1 - 0.5 x crowding) + government bonus (max 5), calibrated so the 95th-percentile idea scores 90 (order never changes). A geometric mean: a weak pillar cannot be papered over. Percentiles are among the 272 ideas in the catalog; the terms matched were upgrade, current, recipe, hosted, watches, vendor, repositories.

The idea in full

What: Patchwright is a hosted agent that watches a small software vendor's repositories and does the maintenance work nobody staffs: dependency and framework upgrades, breaking API migrations, deprecation fixes, and the evidence trail for SOC 2, GDPR and accessibility questionnaires that their own customers demand. The agent runs migrations as reviewable pull requests against a preview environment, and every migration is expressed as a versioned recipe. Third parties (API vendors, framework maintainers, compliance tool makers) publish their own recipes to the registry so their users upgrade themselves, which is the platform layer others build on.
Why now: YC's Fall 2026 RFS names 'A Cloud for Small Software' for this cluster, and 112 companies have entered dev tools in the last two years while only 85% of checked sites are still alive; the small vendors that survive have working code and no maintenance staff. Vendo (yc S26) is already selling the idea that a product should be extended by outsiders, which is the same registry logic applied to upgrades.
Wedge: first customer and entry point: Two-to-ten-person SaaS vendors on stale Node or Django versions who just got a security questionnaire from a bigger customer: free scan, first paid job is the single upgrade that unblocks the deal.
Path to 100x: Software maintenance tooling for small vendors is a $1-10B slice, and at $200-800 per month across hundreds of thousands of small software companies globally a $150M+ ARR business is reachable; the 100x comes from the recipe registry becoming the default place a framework or API publishes its migration, which makes every new API vendor a distributor. Winner-takes-most only if recipes accumulate faster than any single agent vendor can regenerate them.
Ceiling: Upgrades are a feature of general coding agents, so the ceiling is a $50-100M ARR utility bought on price with no registry to defend.
Closest real companies, as the generator saw them: Alchemize ('Ship more code with confidence') and Superlog ('Make software self-healing') both aim at code health but at the code-writing and runtime layers; Patchwright is narrower (upgrades and their evidence) and is the only one turning migrations into a third-party recipe registry. GodHands keeps knowledge current, not code.
Main risk: Framework vendors and coding agents ship free automatic upgrades, and the recipe registry never gets a reason to exist.

Five judges

Each judge scores every idea in the catalog with a named rubric; the venture judge decides whether a card is shown at all (4-5 is venture-grade).

Venture investor
3/5
Recipe registry could compound, but the card admits upgrades are a feature general coding agents absorb, capping it near $100M ARR.
Bootstrapper
4/5
Two-to-ten-person SaaS vendors with a stalled security questionnaire pay today, capital-light software margins, but first paid upgrade sits 1-3 years out.
Operator
4/5
The founder of a two-person SaaS staring at a customer's security questionnaire has a dated deadline and a deal at risk, so the first invoice writes itself.
Technologist
2/5
Upgrade migrations are a first-class feature of general coding agents, so the recipe registry is a thin layer a Claude Code release absorbs.
Risk
4/5
Hundreds of thousands of self-serve small vendors means no key-customer concentration, and upgrade recipes are not hostage to any one platform's terms.
trends
3/5
Cites the Cloud for Small Software RFS, but dependency upgrades were sellable in 2023 via Dependabot-style tools and dev tools cohorts are shrinking 88 to 44.

Similar startups in the directory

Companies whose pitch matches most of the idea's terms (upgrade, current, recipe, hosted, watches, vendor, repositories): 2 all-time, 2 from the last two years. Same matching as Idea Check.

Graphify Labsyc S26 · 2026 · Developer toolsalive
On-device Knowledge Graph engine for Enterprise Software
DiffEnderalchemist Alchemist Class 38 · 2025 · Developer toolsunchecked
Ship 2x faster with AI-Assisted Code Reviews

Run this as an Idea Check →

The generator's reference companies

Real companies the model named as closest when it wrote the card, with their fate. A check mark is a company the radar could verify in its directory.

Public money in this direction

US federal grants, SBIR/STTR awards and open opportunities from the radar's public-money feed, matched to the idea's terms; the sector totals give the context.

grants and programs matching the idea

122

startup-relevant grants in Developer tools

$70M

awarded in the sector, tracked

opportunities open now in the sector

SeeInMe: Digital Profiles Facilitating Person-centered Coordinated Care for People with Dementiaawardhigh relevance
NIH / NIA · SBIR phase I · $326K · posted 2025-09-22
NSF PCL-Test Bed: Towards a General Platform for AI-Driven High-Throughput Reaction Discovery and Automationawardmedium relevance
National Science Foundation · PCL-Programmable Cloud Labs · $20M · posted 2026-07-21

All public money by sector →

Market signal

What the radar sees in Developer tools: new companies by cohort year, the forming YC batch, and outcomes since the February snapshot.

Developer tools · 64 → 105 → 121 → 90 → 57 new companies 2022 → 2026 · 87% aliveYC F26 live: 8 in this cluster, 6% of the batch (was 3% in S26)Since February, of 474 YC companies here: 6 acquired, 8 shut down, 59 rewrote their pitch

Developer tools: companies, trend and grants →

Design attributes

The card is one cell of a designed set: every axis below was chosen before the text was written, and the text had to realize it.

Buyer: Small business
Business model: AI agent as a service
Path to 100x: Platform others build on
Market size: $1-10B market
Capital intensity: Capital-light (software margins)
Speed to revenue: Revenue in 1-3 years
Technical depth: Real engineering
Go-to-market: Self-serve
Moat: No moat yet
Geography: Global from day one
Regulation: Some regulation
Vibe: Boring business