I have three good ideas. Help me choose idea 1, 2, or 3.
tptacek: Re: (3):* There are at least 20 products in the regulatory compliance (GRC) category, and more in the system scanning category.* What's more, IT security teams resist buying from tiny companies, because they need to integrate their purchases into their processes and need to know that they're going to get long-term support.* Most GRC products are sold via direct sales teams (pinning their price to over 50k/sale), which makes it hard to compete without a direct salesperson. Security is a category where low price connotes low quality.* The sales cycle on new security products is very long --- 2-4 months, with high engagement through the process.I wouldn't do (3) unless I had a really good idea about how to do it in a new way; that idea should be better than "good looking UI", because as soon as customers express a preference for good UI, all your competitors will drop 20k on a designer to get the merit badge.