What changed
FACT (per the Reddit signal, 1571): Meta enabled a feature where anyone can generate AI images of a person/brand from their public Instagram photos via @-mention, default-on, without per-use consent. FACT (Gemma signal, 1045): a 12B open-weights multimodal model exists that can plausibly run image+text detection cheaply. FACT (Fortress signal, 1472): an MCP stealth-browser product launched for agents blocked by anti-bot systems.
Why now
The exposure is new, default-on, and generating visible panic in SMB communities right now. HYPOTHESIS: the demand window is a news-cycle spike, not durable — Meta may add friction/opt-outs and the panic fades within weeks.
Converging signals
Cheap local multimodal detection (Gemma 4 12B) + agent-driven crawling of anti-bot sites (Fortress MCP) + a new platform behavior creating mass unwitting exposure (Meta @-mention generation).
Customer pain
FACT: at least one r/smallbusiness thread shows SMBs alarmed that their photos are AI-fodder by default. HYPOTHESIS: sustained willingness to PAY monthly is unproven — no demand_evidence array was provided, no HIRING/SPEND evidence, no FORCED BUYER mandate. The pain is anxiety, not a compelled action with a deadline.
Who pays
HYPOTHESIS: creators and image-conscious SMBs (salons, gyms, realtors, boutique brands). Weak: these are low-ARPU, high-churn buyers, and the free fix (change settings / follow an opt-out guide) is one blog post away.
Solved today
Free opt-out walkthroughs in news articles and Reddit; enterprise brand-protection vendors (ZeroFox, Red Points, BrandShield) for real monitoring; most people do nothing.
Why current solutions are bad
Guides go stale as Meta changes settings; enterprise tools are overkill and cost thousands. But 'free guide is good enough' is itself a strong kill argument for a paid audit.
Proposed product
One-time $29 exposure audit (settings check + public-photo likeness inventory + opt-out walkthrough) upselling to $19-49/mo monitoring that crawls Instagram for reposts/lookalike accounts using local Gemma-based likeness matching.
MVP version
A landing page + agent script: user provides handle (and ideally logs in via guided flow to read their own settings), tool inventories public photos, checks the AI-generation setting state, outputs a PDF exposure report with fix steps. 1-2 weeks with AI-assisted build.
30-day build
Ship the audit report generator; post genuinely useful free opt-out content in the exact Reddit/Facebook SMB communities where the panic lives; sell the $29 audit off that content.
60-day build
If audits sell (>50 units), add scheduled re-checks and impersonation-account scanning; convert audit buyers to monthly monitoring.
90-day revenue plan
HYPOTHESIS: 100 audits + 40 subscribers ≈ $4-5k cumulative — only if the panic persists and conversion from free content works, neither of which is evidenced.
Distribution path
Reddit/Facebook SMB and creator communities, TikTok/IG explainer clips riding the news cycle. No enterprise sales needed, but this is content-virality-dependent distribution, which the founder profile disfavors (ad/attention-driven).
Technical difficulty
Moderate. The audit is easy. The monitoring promise is the trap: you CANNOT see what images strangers generate privately via @-mention — that data is not publicly crawlable, so the headline promise ('who is generating with my brand') is largely undeliverable. Public repost/impersonation scanning requires sustained Instagram scraping against Meta's anti-bot systems.
Legal / regulatory risk
Scraping Instagram with a stealth browser violates Meta ToS; Meta actively litigates scrapers. Handling users' logins to check settings adds credential-handling risk. This is a business built on ToS violation against one of the most aggressive anti-scraping companies.
Platform dependency
Extreme and adversarial. Meta controls the feature, the settings, and the crawl surface; any change breaks the product or moots the panic. Single-platform, hostile-platform dependency.
Founder fit
Low-moderate. This is NOT the proven government-portal/forced-filer shape — no mandate, no deadline, no per-filing monetization. It is a consumer-social-adjacent, news-cycle, scraping-dependent product in the founder's stated avoid zone (platform policy risk, attention-driven distribution), despite matching his AI-automation strengths.
Breakout potential
Low. If likeness anxiety proves durable it expands to TikTok/X monitoring, but incumbents (ZeroFox, Red Points) own the paid tier and free guides own the bottom.
Final recommendation
PASS as a SaaS. The only defensible slice is a 1-week experiment: free opt-out content + a $29 one-time audit to test real willingness to pay, with zero scraping infrastructure built until money appears. Do not build the monitoring layer.
Next action
Post a free, genuinely complete opt-out walkthrough in r/smallbusiness and 2-3 creator communities with a link to a $29 'full exposure audit' checkout; kill the idea if <10 sales in 14 days.