Not promising: free add-ons for coding agents. Local 'firewalls', multi-agent desktop shells, token-compression proxies, open-source voice agent bases. Funded companies give them away free to build enterprise funnels, and individuals don't pay.
- Status
- Close (not recommended to follow: individual developers don't pay, enterprises need compliance and sales, funded companies are using free tiers to build funnels, and vendors reset everything with an update).
- Why this is written up
- All four product types placed top-3 on Product Hunt's daily chart and have several thousand to over a hundred thousand GitHub stars. They look like a trend. But among the PH sample, 7 companies with backing are all free, and not one has revenue evidence. The next step is all enterprise: MDM distribution, team editions, a $300/month Team tier, private deployments for BFSI. A small team following this hits the same wall: individuals don't pay, enterprises need compliance and sales, and you don't have $2M.
- Confidence
- Medium-high. Conditions that would overturn this (when it becomes doable for a small team): an indie interceptor, compressor, or multi-agent shell built by a team of one or two gets over $5k in revenue in 30 days and doesn't drop for two straight months; or Cursor / Claude Code enterprise editions start requiring third-party agent audit reports and a self-serve, per-seat paid tier appears.
Evidence
Grouped by store. Each group starts with the charts that can be graphed (real curves, data dates below the chart), then the scanner's original notes and source links.
GitHub4 evidence · 5 products with curves
- GitHub (2026-11-02): hardenrun/aif has 1,805 stars and 392 forks, growing 0 for 6 straight days since 10-27 (repo marked "cooling"). The repo contains only README / LICENSE, 8 commits, 25 KB, and no source code. Of the latest 100 forks, 97 came from new accounts registered on the same day 2026-08 (archive inference points to an account farm). Behind it is VizopsAI, with $2M pre-seed (NewsBytes web report, single source).
- GitHub (2026-11-02): generalaction/emdash at 6,141 stars, adding 8–10 stars a day in a straight line since its PH launch (2026-05-20,405 votes). YC W26, desktop app free, team plan 2.0 is waitlist-only. The site claims "1M+ downloads," but broken down, that's update checks: of v1.2.8's 170,489 downloads, only 2.7K were installers (from the GitHub Releases API on the web, see archive 11-01).
- GitHub (2026-11-02): JuliusBrussee/caveman 116,663 stars (+8,380 in 30 days), DietrichGebert/ponytail 182,027 stars. The "save tokens" slot is taken by two free repos. Caveman 10-13 became a YC F26 company and launched Cloud Team at $300/month. There's no indie library entry for caveman.so and no revenue evidence in two weeks. HN 904 points (id 47647455), but the skeptic thread with 89 points (id 47954745) measured real task output tokens dropping only 8.5–9%.
- GitHub (2026-11-02): dograh-hq/dograh has 6,005 stars and 1,537 forks (fork/star ratio 25.6%, users are "taking it to self-host"). The Docker image has about 87k pulls (web Docker Hub). PH 583 votes, daily chart #1 (2026-08-12). The cloud version is 1¢/minute. No dograh.com for indie developers, and zero public revenue evidence.
Product Hunt1 pieces of evidence
- PH (2026-09-09): Harden 369 votes (379 today), daily chart #2, 98 comments. Over the same period, Show HN got only 9 points (id 49472151). The personal edition is "free forever." The enterprise edition goes through MDM / Jamf distribution plus contact sales. Not a single revenue or user figure can be found.
Indie product revenue (TrustMRR)1 evidence · 2 products with curves
- indie (30-day revenue, as of 11-01): the small teams in this space with visible revenue are tiny. Headroom (menu bar app that cuts Claude Code spend) $2,962, Token Cut (tokencut.lol) $0.
Already doing it
Harden (VizopsAI), Emdash (YC W26), Conductor, Codex App, Superset; Caveman (YC F26), Ponytail; Dograh, LiveKit, Pipecat. Claude Code, Codex and Cursor are also adding permissions, sandboxes and parallel sessions themselves. [012] (security scanning for Skills / MCP, free and open source from big vendors) is the runtime version of the same conclusion; [004] (usage tracking) is in the same coding-agent periphery. All of them crowd into spots vendors will fill themselves.
In our product dossiers: Harden (AIF / Agentic Integrity Foundation), Emdash, Dograh
The hardest step
Paid. Free and open source is the default option; enterprise sales cycles are the only moat, and one vendor update can make the third-party layer redundant.
Who it's for
Not a good fit for a small team alone. Open spots: the "adversarial (prompt injection) detection" that Harden has carved out on its trust page needs security research background; bundle by industry on Dograh / Pipecat (hospital booking, restaurant phone answering) and sell directly to SMBs; a lightweight compressor for individuals and small teams that takes a cut of the savings (inferred).
Should every product builder know this?
Yes. PH votes and GitHub stars are the easiest demand signals to misread in this category, and Harden also showed stars and forks can be faked.
Change log
Original: Scanner opportunity library #080 (updated daily, 06:00); this page was generated on the 2026-11-08 edition.