181 karma · joined December 27, 2022
Thats alot of money to spend.
Only when laid off.
Only when laid off.
[1] https://www.bankinfosecurity.com/blogs/cyberstarts- program-sparks-debate-over-ethical-boundaries-p-3763
[2] https://www.forbes.com/sites/iainmartin/2024/10/28/this-vc-b...
These are the real numbers - https://dzone.com/articles/performance-and-scalability-analy...
Does not match with your benchmarks.
Objective security - things like do not open mongodb server with default passwords to internet etc. which are definitely bad.
Subjective security - blogs and consultants saying something is bad and do not have objectivity to back it. It may not be a bad things, ugly sure, but it would need lot of context.
It could be bananas, ugly etc. but may not bit a big deal. Sure things, go wrong white remote editing. Did I bring a server down, you could do the same while VI thinking it UAT but it turns out to prod or rm a mount.
Are millions of orgs doing this day-in day-out? yep.
Their bidding mechanism is not how a retail transaction works, where either you buy or you don't, it is not binary.
Thats the scam. They are acting both as broker and seller without transparently revealing the relationship.
It is like, you go to buy a house, the broker says the advertised price is 2 million, i recommend paying 3.2 million and then you realise the broker was the owner of the house.
For eg.
Cyberark
Checkpoint harmony
Teleport [https://goteleport.com]
Strongdm [https://www.strongdm.com/]
Adaptive [https://adaptive.dev/]
and there are many other tools like these.
- They might be running shadow IT
- Security and compliance is not their priority.
Since you have implemented BG and other controls. My follow up question is are these devs in that case EOR or contractors whose payroll is processed via you. Your org starts to look like deel, remote or midsource.
The whole PR assigning to junior devs feels gimmicky, no?
However, there are two problem statements you are solving. I agree with the first premise, remote junior devs will get better opportunities and confidence when they do this exercise. I think the second part of value generation, I think risk is too high for a closed source org.
- This does not work beyond OSS projects. This is literally a compliance leaders nightmare. I just don't know who is touching the code, how and where ahead of time, no background checks etc.
- Secondly, this feels like a nice way to "growth hack" you Github stars and fake some metrics for VCs. Your pitchdeck can 100s of contributors and 1000s of stars without really creating much value.
Also, it is not very clear which market segment you are going after. If it is midmarket then my narrative is kind of what happens there. In early stage you have low ticket size problem. In enterprise, you have hubspot, salesforce and various other tools.
Building a salesforce knock off does not make sense. As you said, `The startup world is littered with ghosts of so-called "Salesforce killers"`, there must be a reason why. Most likely , it is the fact that there is no market for salesforce killers.
I think your pricing is off. It is $30 per user per month, Post 50 users, your platform is more expensive than hubspot's CRM suite which includes everything.