[bityard]

There are lots of players in the enterprise space for compliance and security of software, e.g. Black Duck. I think the trick would be to figure out where those solutions are lacking for smaller dev teams and try to serve them

[hardwaresofton]

Thanks for mentioning black duck — yeah this would definitely start out looking like a consultancy at first I guess