New startup ideas · B2B, security and compliance · Security and compliance
startup idea
Humanrail
A licensed personhood and KYC API any small merchant can turn on in an afternoon.
Humanrail is an API that answers two questions for small online businesses: is this a real, unique human, and does this customer clear the anti-money-laundering checks the merchant is legally on the hook for.
- Infrastructure and APIs
- Small business
- $100B+ market
- Collapses a cost 10x
- Global from day one
4/5
venture judge
2
similar startups, last 2 years (13 all-time)
83%
of 4 nearest real companies still alive
yes
3 matching federal grants and programs
Direction supported by government programs and grants
Scorecard
One score that balances how trendy the idea is, the demand for it and its potential for 100x, with competition measured relative to every other idea in the catalog. Recent startup trends first, government priorities second.
99
Idea Score, 0-100 · raw 60.5 x 1.64
Warm
competition: more crowded than 32% of ideas · headwind x0.84
+1.5
government priorities, secondary (3 matching grants)
Trend
73
Is the wave forming now? 2025-26 entrants vs 2023-24, rounds since 2025, the sector's live-batch direction, the 2026 trend analyst.
- Entrants 2025-26 vs 2023-24 (similar companies)90
- Rounds announced 2025+ in the sector25
- Sector direction (live batch)100
- 2026 trend analyst75
Demand
78
Does anyone want it? YC's current RFS, companies already paid for something similar, the operator judge, founders' yes-rate in decks, readers who would run the test.
- YC asks for it (current RFS: idea / sector)60
- Someone already pays (similar companies, recent / all-time)100
- Operator judge: real pain75
100x potential
61
Can it return a fund? The venture judge (double weight), market-size and moat axes, neighbours still alive, the technologist judge.
- Venture judge75
- Market size axis100
- Moat axis80
- Neighbours still alive12
- Technologist judge25
Score = 100 x cbrt(Trend x Demand x 100x) x (1 - 0.5 x crowding) + government bonus (max 5), calibrated so the 95th-percentile idea scores 90 (order never changes). A geometric mean: a weak pillar cannot be papered over. Percentiles are among the 272 ideas in the catalog; the terms matched were licensed, personhood, kyc, merchant, answers, questions, online.
The idea in full
- What
- Humanrail is an API that answers two questions for small online businesses: is this a real, unique human, and does this customer clear the anti-money-laundering checks the merchant is legally on the hook for. Humanrail holds the certifications and registrations itself, acting as the regulated verification provider so the merchant does not need its own compliance function, and escalates the small fraction of ambiguous cases to a review team. Self-serve signup, published per-check pricing, no sales call.
- Why now
- The YC Fall 2026 Requests for Startups list both Proving You're Human and AI-Native Compliance Infrastructure for this cluster, and Didit (yc W26) and Incandor (yc X26) are building identity, fraud and behavioural infrastructure right now. Scorce died in 2022 selling exactly this as unlicensed API tooling for compliance and digital onboarding, which is the part that has changed: the certification regimes small merchants can rent now exist.
- Wedge: first customer and entry point
- Solo and small-team marketplaces and fintech resellers doing a few thousand verifications a month, entering with injection-resistant liveness at a flat per-check price they can read off the pricing page.
- Path to 100x
- Global identity verification, onboarding and AML compliance spend sits above $100B and is priced today around human review and enterprise contracts that exclude small merchants entirely; on-device liveness plus agentic case review takes the fully loaded cost per verified human down about tenfold and opens the long tail. Certifications take years and audits to obtain, so the first credible self-serve licensed provider becomes the default rail that every small merchant and every platform reselling to them plugs into.
- Ceiling
- Per-check prices collapse toward commodity as model costs fall, leaving a high-volume, thin-margin utility rather than a $1B outcome.
- Closest real companies, as the generator saw them
- Didit sells identity and fraud infrastructure and Incandor sells behavioural anti-fraud signals, both as technology; Humanrail differs by carrying the licence and the regulatory liability itself, which is what a small merchant cannot build. Regbase automates corporate compliance filings rather than end-user verification. Scorce shows the unlicensed version of this does not survive.
- Main risk
- Regulators refuse to let a small merchant outsource its own obligated-entity duties, and the licence stops being rentable.
Five judges
Each judge scores every idea in the catalog with a named rubric; the venture judge decides whether a card is shown at all (4-5 is venture-grade).
Venture investor
4/5
Holding the licence itself on a $100B+ AML and identity spend is rentable defensibility, though per-check price collapse threatens margin.
Bootstrapper
2/5
Carrying the licence and obligated-entity liability yourself means years of audits, and per-check prices commoditise anyway.
Operator
4/5
AML checks are a legal obligation small merchants already pay per verification for, and self-serve pricing needs no workflow change to adopt.
Technologist
2/5
Liveness models are commodity and the durable asset is a rented licence, which is a regulatory position rather than a technical one.
Risk
5/5
Holding the certifications and regulatory liability itself is the moat, spread across self-serve long-tail merchants with no key customer or platform dependency.
trends
4/5
Hits two named Fall 2026 RFS themes, Proving You're Human and AI-Native Compliance Infrastructure, with a licensed rail the agent era newly demands.
Similar startups in the directory
Companies whose pitch matches most of the idea's terms (licensed, personhood, kyc, merchant, answers, questions, online): 13 all-time, 2 from the last two years. Same matching as Idea Check.
AI Infrastructure for insurance brokerages.
Secure frontier AI for government & adjacent knowledge work
Offers insurance to customers in a convenient & transparent way
Async personalized and actionable health education by real doctors
A competitive community of the brightest students in the world
Convert more verified users. Instantly & accurately validate user IDs.
Developer of an online middleware software designed to integrate and aggregate data from social platforms all in one place. The company's software gathers all the data from a range of social and business platforms together within a single access point and makes it simple to view and access marketing data in real time, enabling marketers and businesses to make informed decisions in an efficient manner.
Whale is an online question and answer (Q&A) community that connects users with influencers, experts, and celebrities.
From signup to citizenship, only SimpleCitizen guides applicants…
Online enterprise training in data science and analytics.…
Kickstarter for local businesses
Online polls.
The generator's reference companies
Real companies the model named as closest when it wrote the card, with their fate. A check mark is a company the radar could verify in its directory.
Public money in this direction
US federal grants, SBIR/STTR awards and open opportunities from the radar's public-money feed, matched to the idea's terms; the sector totals give the context.
3
grants and programs matching the idea
73
startup-relevant grants in Security and compliance
$18M
awarded in the sector, tracked
23
opportunities open now in the sector
- Commercializing iDEP, an interactive and reproducible tool for analyzing RNA-Seq dataawardhigh relevance
NIH / NHGRI · STTR phase I · $395K · posted 2025-09-04
- III: Optimizing Neural Sparse Representations for Efficient Text Document Retrievalawardmedium relevance
National Science Foundation · Info Integration & Informatics · $750K · posted 2026-07-24
- Collaborative Research: III: Small: Towards Well-Rounded Graph Retrieval for Retrieval-Augmented Generationawardmedium relevance
National Science Foundation · Info Integration & Informatics · $200K · posted 2026-07-17
Market signal
What the radar sees in Security and compliance: new companies by cohort year, the forming YC batch, and outcomes since the February snapshot.
Security and compliance · 42 → 45 → 83 → 75 → 32 new companies 2022 → 2026 · 94% aliveYC S26: 7 in this cluster, 3% of the batch (was 3% in X26) (F26 is still forming: 21 listed)Since February, of 171 YC companies here: 0 acquired, 2 shut down, 24 rewrote their pitch
Design attributes
The card is one cell of a designed set: every axis below was chosen before the text was written, and the text had to realize it.
- Buyer
- Small business
- Business model
- Infrastructure and APIs
- Path to 100x
- Collapses a cost 10x
- Market size
- $100B+ market
- Capital intensity
- Capital-medium (ops, field teams)
- Speed to revenue
- Revenue in 1-3 years
- Technical depth
- Deep tech: ML, hardware, bio
- Go-to-market
- Self-serve
- Moat
- License or regulatory moat
- Geography
- Global from day one
- Regulation
- Heavily regulated
- Vibe
- Hot space
Listed under
An idea sits in its own sector and in any sector its text clearly touches.
More ideas like this
B2B, security and compliance · Security and compliance
Claimyard
Marketplace turning scam, fraud and privacy losses into funded, aggregated consumer claims.
A consumer uploads what happened, screenshots of a romance scam, an unauthorized P2P transfer, a data misuse notice, and a no-code intake agent classifies the claim, pulls the paper trail from the bank or platform, and posts it to a marketplace of licensed attorneys, arbitration filers and litigation funders who bid to take it on contingency.
B2B, security and compliance · Security and compliance
Sentinet
Shared-defense agent for small firms: one member's confirmed fraud warns the whole network.
Sentinet connects in an afternoon to an SMB's mailbox, accounting system and bank feed, and runs an agent that screens invoices, vendor bank-detail changes and unusual logins.
B2B, security and compliance · Security and compliance
Vouchline
One AI agent answers your security questionnaires and reviews the ones you send.
Vouchline is an agent that sits on both sides of the vendor security review: for a small supplier it reads the buyer's questionnaire, pulls evidence from Drive, ticketing and cloud consoles, and returns a completed response in a day; for the buyer it reads incoming responses and flags the answers that contradict prior filings.
B2B, security and compliance · Security and compliance
Attestral
Agents that prove and verify vendor security continuously, replacing the questionnaire.
Attestral deploys agents inside an enterprise's stack that collect live control evidence and answer any customer's security review automatically; on the buying side, its agents interrogate a vendor's agents and check every claim against machine-readable evidence rather than prose.
B2B, security and compliance · Security and compliance
Codewarden
Continuous security for the AI-written software small businesses now run on.
Codewarden is a self-serve subscription platform that continuously scans, exploits and patches the AI-generated applications small businesses now build and deploy without security staff.
B2B, security and compliance · Security and compliance
Ironvane
Autonomous security operations agents that managed service providers resell and extend.
Ironvane gives managed service providers a runtime where security agents triage alerts, patch endpoints, revoke credentials and close tickets across their whole book of small business clients, with the provider approving actions rather than performing them.
Fictional company written 2026-08-23 from MarkosWeb data; the companies, grants and numbers around it are real and tracked. Treat the idea as a research prompt, not a plan.