Startup idea: Browser-Only Security for BYOD Contractors
A client has ~50 offshore support contractors on personal Windows PCs working only in the browser (Google Workspace, Shopify admin, Zendesk); MDM doesn't apply and leak risk is real.
Get the PRD prompt, $9.99 Market: $168K in 3 years
r/sysadmin · Sep 14, 2026 – Oct 14, 2026 · 21 upvotes
Securing BYOD contractor PCs (browser-only SaaS no…
Read the thread · 40 comments
Browser-Only Security for BYOD Contractors is a startup idea for IT managers and BPO companies. A client has ~50 offshore support contractors on personal Windows PCs working only in the browser (Google Workspace, Shopify admin, Zendesk); MDM doesn't apply and leak risk is real. A thread in r/sysadmin drew 21 upvotes and 40 comments between Sep 14, 2026 – Oct 14, 2026. People get by with Island, Talon, and Citrix, and that still leaves this job open. Hotness is 3.55, Hot. Strong pain. Buyers already spend real money here. The thread drew 21 upvotes and 40 comments. Gaps in existing tools. Needs integrations or data deals. A first version is a hard build, about 5+ weeks, priced at $200 a month or more and charged as a B2B subscription. The pain, the source, the alternatives, the scope notes, and the questions on this page are free to read and free to build from. The agent starter prompt is the paid part. The first slice is on the page. One credit unlocks the rest, to paste into a coding agent, download as Markdown, or send as a private link.
Who has it
IT managers and BPO companies.
- IT managers
- BPO companies
- B2B
- Global
- r/sysadmin
What people use now
3 options, and the gap between them.
Island
Talon
Citrix
Real gaps in the existing tools.
Browser-Only Security for BYOD Contractors is built for the part these leave undone.
A way through
A security tool for browser-only BYOD contractors: browser-session policy (no device agent) controlling copy/download with access logging.
MVP scope
The first version, in 6 weeks.
- 00 Goal
The one job
Session-level controls on copy, download and access logs for contractors on their own PCs, no MDM agent.
- 01 Weeks 1–2
The core
Set browser-session policy for BYOD contractors, with no device agent.
- 02 Weeks 3–4
The follow-through
Control copy and download, and log access.
- 03 Weeks 5–6
How it ships
As a browser extension that works on the pages people already use. No AI is needed for the first version.
- — Not in v1
Left out on purpose
Replacing Island. Version one does the one job above and stops there.
How it could charge
The business model, at a glance.
- Model
- B2B SaaS
- Price
- $200 and up
- Buyer
- CompaniesA business with a budget pays
- Region
- Global
Hotness
Why it scores 3.55.
Strong pain. Buyers already spend real money here. The thread drew 21 upvotes and 40 comments. Gaps in existing tools. Needs integrations or data deals.
21 upvotes 40 comments r/sysadmin Sep 14, 2026 – Oct 14, 2026 verified Oct 14, 2026 Thread ↗
Weights: pain 25%, willingness to pay 20%, demand 20%, gap 15%, ease 10%, recency 10%. Recency is recomputed every build. The source report’s 1–10 score is not shown.
Market size · estimate
How big this could get
A bottom-up estimate for Browser-Only Security for BYOD Contractors: real customer counts × a realistic price. Not a forecast.
$114M a year
19,000 firms · 20% of US employer firms with 100–499 staff
$34.2M a year
5,700 firms · sold direct
$168K a year
28 firms · 0.5% of the reachable segment in three years
What that means
28 firms at $500/mo = $168K ARR
Low confidenceHow we estimated this
- Base: 93,300 US employer firms with 100–499 staff.
- Has the problem: 20% (assume 20% rely heavily on contractors).
- Revenue per firm: $6,000 per year ($500/mo).
- Reachable: 30% (sold direct).
- Three-year capture: 0.5% of the reachable segment.
TAM = customers with the problem × revenue per customer. SAM = the part an early product can reach. SOM = a conservative three-year share of SAM. Bars use a log scale. Shares marked “assume” are our judgment, not measured.
Take it to a build
Build Browser-Only Security for BYOD Contractors with an agent, or with us.
Agent starter prompt
$9.99 / 1 credit
A full PRD written for a coding agent: scope, data model, screens, edge cases, and the first week of tasks for this idea.
- Copy it straight into Claude Code, Cursor, or Codex.
- Download it as a .md file you keep.
- Send your bot a private link that refreshes every seven days.
# Agent starter prompt: Browser-Only Security for BYOD Contractors You are a senior product engineer. Build only the product described in this document. If a detail is missing, choose the smallest option and write it down in the README. Do not invent a second product, a marketplace of marketplaces, or a growth hack. ## Product Name: Browser-Only Security for BYOD Contractors One line: Session-level controls on copy, download and access logs for contractors on their own PCs, no MDM agent. Shape: Browser extension AI stance: No AI needed Region for v1: Global Hotness (context only, not a requirement): 3.55 (hot). Strong pain; buyers already spend real money here; thread engagement 21▲/40💬 (demand 2/5); gaps in existing tools; needs integrations or data deals. ## Problem A client has ~50 offshore support contractors on personal Windows PCs working only in the browser (Google Workspace, Shopify admin, Zendesk); MDM doesn't apply and leak risk is real. Who feels it: IT managers and BPO companies.
The first slice is above. The rest unlocks for 1 credit and is never in this page’s HTML.
Credits work on both sites. On Business Ideas to Build the same credit unlocks the business plan and growth playbook for Browser-Only Security for BYOD Contractors.
Or we build it
Your first version, shipped by our team.
A working product in your repo, built from this PRD. You own the code.
$1,000 scoping fee, credited toward the build.
Equity instead of cash is an application, not a checkout →Questions
Is this idea already taken?
People already use Island, Talon, Citrix. Those options do not do the job in the solution above. The idea is free to build. Nothing here is an exclusive claim.
How hard is a first version?
Hard. A tight MVP is about 6 weeks (5+ weeks), assuming the regulated or partner-gated parts are stubbed. The paid prompt turns that into tasks.
Who would pay, and how?
The audience is IT managers and BPO companies. Charge a B2B subscription, and test a price at $200 a month or more. Willingness to pay is one input to Hotness, not a promise that someone will buy.
Can I use the evidence?
Yes. Build the product. The thread title is a short excerpt with a link, not a quote we are putting in someone's mouth. Exact post dates and verbatim lines are added only after a manual check. Ideas are suggestions, not medical, legal, or financial advice.
If you want the operating plan rather than the build document, it lives on the sister site. Get the business-plan prompt