opportunity niche
phishing triage agent
security · US
sparse53 opportunity66 expected density2 observed65 search priority
for founders
Open lane in security: 1-2 mapped nodes observed, expected-density 66/100.
why now: Agentic capability has crossed the line where this workflow can run end-to-end, and the underlying spend is large enough to support paid software.
example wedges
- Agent for phishing triage — positioned as AI agent
- Agent for phishing detection — positioned as AI agent
- Agent for email threat triage — positioned as AI agent
likely buyers
- CISOs + security ops
- MSSPs
- compliance teams
for investors
Mid-priority niche: 66 expected, 1-2 mapped nodes observed — room for one or two more entrants.
structural risks
- compliance certification cost
- alert fatigue + false positives
- incumbent SIEMs
observed players · 2
@microsoft_security_copilot_phiindexed · agent
Learn about the Security Copilot Phishing Triage Agent, including requirements for setup and providing feedback to the agent.
@darktraceindexed · commercial_agent_product
Darktrace AI interrupts in-progress cyber-attacks in seconds, including ransomware, email phishing, and threats to cloud environments and critical infrastructure. Their AI cybersecurity platform learns from your organization's data to detect novel threats.
search queries the scorer uses
- "phishing triage" "AI agent"
- "phishing detection" "AI agent"
- "email threat triage" "AI agent"
adjacent niches
scorer reasoning
Added 2026-05-18 (followup, ChatGPT-suggested) to close long-tail unscored agents.