New startup ideas · B2B, security and compliance · B2B SaaS
startup idea
Ruleplane
Regulated-data infrastructure as an API: storage, retention and audit that pass inspection by default.
Ruleplane builds compliance-certified infrastructure primitives - storage, messaging, retention, deletion and audit-log APIs that come pre-audited for HIPAA, GDPR and financial record-keeping rules.
- Infrastructure and APIs
- Enterprise
- $100B+ market
- Creates a new category
- Global from day one
3/5
venture judge
9
similar startups, last 2 years (35 all-time)
96%
of 3 nearest real companies still alive
yes
8 matching federal grants and programs
Direction supported by government programs and grants
Scorecard
One score that balances how trendy the idea is, the demand for it and its potential for 100x, with competition measured relative to every other idea in the catalog. Recent startup trends first, government priorities second.
53
Idea Score, 0-100 · raw 32.2 x 1.64
Active
competition: more crowded than 69% of ideas · headwind x0.65
+3.6
government priorities, secondary (34 matching grants)
Trend
47
Is the wave forming now? 2025-26 entrants vs 2023-24, rounds since 2025, the sector's live-batch direction, the 2026 trend analyst.
- Entrants 2025-26 vs 2023-24 (similar companies)46
- Rounds announced 2025+ in the sector93
- Sector direction (live batch)0
- 2026 trend analyst50
Demand
33
Does anyone want it? YC's current RFS, companies already paid for something similar, the operator judge, founders' yes-rate in decks, readers who would run the test.
- YC asks for it (current RFS: idea / sector)0
- Someone already pays (similar companies, recent / all-time)100
- Operator judge: real pain0
100x potential
53
Can it return a fund? The venture judge (double weight), market-size and moat axes, neighbours still alive, the technologist judge.
- Venture judge50
- Market size axis100
- Moat axis20
- Neighbours still alive75
- Technologist judge25
Score = 100 x cbrt(Trend x Demand x 100x) x (1 - 0.5 x crowding) + government bonus (max 5), calibrated so the 95th-percentile idea scores 90 (order never changes). A geometric mean: a weak pillar cannot be papered over. Percentiles are among the 272 ideas in the catalog; the terms matched were regulated-data, infrastructure, storage, retention, audit, pass, inspection, builds.
The idea in full
- What
- Ruleplane builds compliance-certified infrastructure primitives - storage, messaging, retention, deletion and audit-log APIs that come pre-audited for HIPAA, GDPR and financial record-keeping rules. Enterprise developers self-serve the way they do with a cloud provider, and every regulated workflow built on Ruleplane inherits its certifications instead of undergoing its own audit. The first three years go into engineering and passing the audits; revenue follows once the primitives are certified.
- Why now
- Floracene (YC S26) sells vibecoded HIPAA-compliant internal tools and Complir (YC X26) pitches itself as Vanta for physical products - both are symptoms that compliance is still bolted on per-application; nobody sells it as the substrate underneath.
- Wedge: first customer and entry point
- Digital health engineering teams who today spend months per app on HIPAA controls; a certified storage-plus-audit-log API they can adopt from documentation, without talking to sales.
- Path to 100x
- Enterprises spend well over $100B a year on compliance, governance and the engineering work of keeping regulated data lawful, almost all of it rebuilt per company. If certified primitives become a category the way managed databases did, the standard-setter takes cloud-platform economics; there is no moat at the start, which is exactly why the prize goes to whoever accumulates certifications and becomes the default first.
- Ceiling
- Most plausibly it never escapes being a HIPAA-storage niche vendor, because each new regulation requires a new multi-year audit cycle and the hyperscalers own the customer relationship.
- Closest real companies, as the generator saw them
- Floracene generates compliant apps one at a time and Complir checks compliance after the fact; Ruleplane moves compliance below the application layer so any app built on it is compliant by construction. None of the tracked companies sell certified primitives as infrastructure.
- Main risk
- AWS or Azure ships certified-by-default regulated primitives before Ruleplane finishes its audit cycle, and the category is absorbed into the hyperscalers.
Five judges
Each judge scores every idea in the catalog with a named rubric; the venture judge decides whether a card is shown at all (4-5 is venture-grade).
Venture investor
3/5
Certified primitives could earn cloud-platform economics, but three years of audits before revenue against AWS shipping the same thing is a coin flip.
Bootstrapper
1/5
Three years of multi-year audit cycles before a dollar of revenue, with AWS able to ship certified primitives first.
Operator
1/5
Three years of audits before revenue, and buyers must rebuild regulated apps on a substrate AWS could certify first - nobody is paying for this today.
Technologist
2/5
The moat is audit certificates rather than engineering, and the card names its own killer: AWS shipping certified regulated primitives first.
Risk
3/5
Accumulated HIPAA and GDPR certifications are exactly the regulatory footing this lens rewards, but three pre-revenue audit years against AWS shipping first is a real race.
trends
3/5
Lands on the F26 AI-Native Compliance Infrastructure RFS, but its bolted-on-compliance premise was equally true in 2023 and revenue waits three years.
Similar startups in the directory
Companies whose pitch matches most of the idea's terms (regulated-data, infrastructure, storage, retention, audit, pass, inspection, builds): 35 all-time, 9 from the last two years. Same matching as Idea Check.
SDK for adding an agent and human governance layer to your product
Identity infrastructure for connected travel
Hypercubic is building the best-in-class agentic AI platform for maintaining and modernizing legacy mainframe systems running COBOL.
Monitoring and learning layer for long-running agents
Autonomous Drones for Earth Observation
Automated infrastructure for modern commercial lenders.
API for unlimited, durable, real-time streams
Payment infrastructure for AI agents
Human-Context Data Infrastructure for High-Stakes Decisions
Turn scattered data into one platform for decision-making
Fluid Wire Robotics develops high-performance force-controllable robotic arms for operations in critical environments. Based on proprietary "Fluid Wire" technology, they enable advanced manipulation in oil & gas facilities, underwater areas, nuclear power plants, mines and clean-rooms.
Java-native multi-agentic AI operating system for enterprise
The generator's reference companies
Real companies the model named as closest when it wrote the card, with their fate. A check mark is a company the radar could verify in its directory.
Public money in this direction
US federal grants, SBIR/STTR awards and open opportunities from the radar's public-money feed, matched to the idea's terms; the sector totals give the context.
8
grants and programs matching the idea
15
startup-relevant grants in B2B SaaS
$3M
awarded in the sector, tracked
5
opportunities open now in the sector
- I-Corps: Translation Potential of a Longitudinal Diagnostic Method for Residential Branch Circuits Serving Sustained High Impact Electrical Loadsawardhigh relevance
National Science Foundation · I-Corps · $50K · posted 2026-08-19
- I-Corps: Translation Potential of Safer, Longer-Life Lithium-Ion Energy Storage for Critical Infrastructureawardhigh relevance
National Science Foundation · I-Corps · $50K · posted 2026-08-19
- SBIR Phase I: Purification of Electrochemical Graphite for Use as a Critical Material for U.S. Power Infrastructureawardhigh relevance
National Science Foundation · SBIR Phase I · $304K · posted 2026-08-11
- SBIR Phase II: Advanced Manufacturing for Aerogels for Battery Safety Applicationsawardhigh relevance
National Science Foundation · SBIR Phase II · $1M · posted 2026-08-04
- I-Corps: Translation Potential of a Battery Monitoring and Degradation Detection Tool Using Non-Contact Methodsawardhigh relevance
National Science Foundation · I-Corps · $50K · posted 2026-07-29
- I-Corps: Translation potential of drone propellers with bio-inspired surface features designed to reduce drone noiseawardhigh relevance
National Science Foundation · I-Corps · $50K · posted 2026-07-17
- CAREER: Towards Automated Vulnerability Management: Vulnerability Discovery, Localization, and Continuous Monitoringawardhigh relevance
National Science Foundation · Secure &Trustworthy Cyberspace · $625K · posted 2026-03-26
- CAREER: Enabling Efficient AI Computing at Scale with Heterogeneous Retention-Aware Memory Systemsawardmedium relevance
National Science Foundation · Software & Hardware Foundation · $730K · posted 2026-03-31
Market signal
What the radar sees in B2B SaaS: new companies by cohort year, the forming YC batch, and outcomes since the February snapshot.
B2B SaaS · 181 → 198 → 204 → 116 → 75 new companies 2022 → 2026 · 92% aliveYC S26: 9 in this cluster, 4% of the batch (was 4% in X26) (F26 is still forming: 21 listed)Since February, of 756 YC companies here: 10 acquired, 9 shut down, 72 rewrote their pitch
Design attributes
The card is one cell of a designed set: every axis below was chosen before the text was written, and the text had to realize it.
- Buyer
- Enterprise
- Business model
- Infrastructure and APIs
- Path to 100x
- Creates a new category
- Market size
- $100B+ market
- Capital intensity
- Capital-medium (ops, field teams)
- Speed to revenue
- R&D first, revenue after 3 years
- Technical depth
- Real engineering
- Go-to-market
- Self-serve
- Moat
- No moat yet
- Geography
- Global from day one
- Regulation
- Heavily regulated
- Vibe
- Boring business
Listed under
An idea sits in its own sector and in any sector its text clearly touches.
More ideas like this
B2B, security and compliance · B2B SaaS
Baseplate
The record network linking contractors, engineers, and state DOTs on federal-aid projects.
A network of record for federal-aid construction: contractors submit materials certifications, test results, submittals and inspection records once, and Baseplate routes them in each agency's required format to state DOTs and engineers of record, with AI pre-review trained on previously approved submittals.
B2B, security and compliance · B2B SaaS
Carepuck
A $99 puck that watches a parent's home, with an app store for care.
Carepuck is a plug-in device with millimeter-wave motion sensing and on-device audio that adult children buy online and mail to a parent living alone; it learns the household routine and texts the family when something breaks the pattern, with no cameras and no medical claims.
B2B, security and compliance · B2B SaaS
Bordera
AI clearance agents that file, bond, and finance customs entries across every major trade lane.
Bordera runs AI agents that classify goods, file customs entries, and advance duties for enterprise importers, executing through Bordera's own licensed brokerage subsidiaries and bonded entities in each jurisdiction.
B2B, security and compliance · B2B SaaS
Stocklight
A demand forecasting model any small merchant can self-serve, any app can embed.
Stocklight is a subscription forecasting layer for small merchants who make, move or sell physical goods: connect a store, a POS or a wholesale ledger and get SKU-level demand, reorder points and stockout risk that account for promotions, seasonality and local events.
B2B, security and compliance · B2B SaaS
Tradewire
The ordering and payment network connecting independent distributors with the retailers they supply.
Tradewire is an API network that lets small US wholesale distributors and their retail customers exchange orders, invoices, and payment terms in one standard format, replacing faxed POs and legacy EDI.
B2B, security and compliance · B2B SaaS
Wayline
Registry and API that make enterprise catalogs, prices and policies readable by AI agents.
Wayline is an infrastructure layer where large brands, retailers and travel operators publish machine-readable manifests of their inventory, prices, eligibility rules and fulfillment terms, and AI agents query one API instead of scraping websites.
Fictional company written 2026-08-26 from MarkosWeb data; the companies, grants and numbers around it are real and tracked. Treat the idea as a research prompt, not a plan.