ShieldBOM — SBOM & CRA Compliance Platform para PMEs Europeias
Gap: Nenhuma ferramenta combina (1) geração automática de SBOM, (2) mapping CRA requirements → checklist accionável, (3) dashboard visual compliance %, (4) multilingue, (5) preço <€200/mês para PMEs.
O Problema (com evidência específica)
O EU Cyber Resilience Act (CRA) entrou em vigor a 10 Dez 2024 e vai obrigar todos os fabricantes de "produtos com elementos digitais" a:
- Gerar e manter um SBOM (Software Bill of Materials) por produto
- Reportar vulnerabilidades exploradas ativamente (obrigatório a partir de 11 Set 2026)
- Conformidade total até 11 Dez 2027
Evidência de desespero:
- r/europrivacy: "Open source tool for automated EU AI Act compliance documentation" — developers a procurar ferramentas automatizadas (reddit.com/r/europrivacy/comments/1rkhrg8)
- r/Entrepreneurs: "The EU AI Act is live and most businesses using AI aren't ready" — panic posts sobre multas de até €35M ou 7% revenue (reddit.com/r/Entrepreneurs/comments/1rp72cb)
- r/cybersecurity: "So what is considered the best AI compliance tool?" — comunidade a pedir soluções acessíveis (reddit.com/r/cybersecurity/comments/1r3lg8e)
- OneKey study: quase 2/3 das empresas desconhecem os requisitos do CRA (onekey.com)
- BearingPoint: lançou serviço de SBOM compliance, validando procura enterprise (bearingpoint.com)
O gap concreto: As ferramentas existentes (Anchore, FOSSA, Snyk) são:
- Developer-first (CLI, CI/CD pipelines) — CTOs de PMEs não sabem usá-las
- Priced para enterprise ($5K-70K/ano para Snyk)
- Focadas em scanning, não em compliance holística CRA
- Sem UI em português ou outras línguas EU
- Não mapeiam automaticamente requisitos CRA a acções concretas
Ready to build this?
This idea scored 81/100. Get tomorrow's in your inbox, free, no account needed.
Related Ideas
LocalLens — AI-Powered Business Intelligence for Neighborhood Businesses
Data Rich, Insight Poor: Local businesses generate massive amounts of data — POS transactions, customer emails, delivery orders, social media interactions, online reviews — but lack tools to understand what it means. A restaurant knows Tuesday sales were €1,200 but doesn't know if that's good compar
AgentBrake — Runtime Safety Proxy & Circuit Breaker for AI Agent Startups
AI agents are going to production — and exploding. Literally. A Reddit founder watched his agent loop 8,000 times in 4 hours, racking up $340 in API fees for what should've been a 2-minute call summarization. Amazon's Kiro agent deleted a production environment and caused a 13-hour AWS outage after
Opportunity #1: AEO Booster — Answer Engine Optimization for SMBs
Small businesses are becoming invisible in the new AI-powered search landscape. When potential customers ask ChatGPT "best dentist near me" or Perplexity "reliable plumber in Porto", traditional SEO doesn't help if your business isn't mentioned in AI responses. Indie Hackers describe this as "the gr