A few years ago I started a niche healthcare case management SaaS. While I sometimes add new features, upgrade software, or fix bugs, it mostly runs itself. There's currently a handful of clients each paying ~$8k annually.
Fortunately no specific certifications are required. So it was mostly writing policies and ensuring best practices that met HIPAA controls in the beginning.