What changed
FACT: On 2026-05, the FTC began enforcing the TAKE IT DOWN Act (TIDA), which requires covered platforms to remove non-consensual intimate imagery within 48 hours of a valid victim request, and launched TakeItDown.ftc.gov for victims to complain about non-compliant platforms (ftc.gov). FACT: Gemini 3.5 Flash added a cheap, low-latency computer-use (browser/UI automation) tier (deepmind.google). INFERENCE: the two together make automated multi-site copy-discovery + form submission economically viable for a solo builder.
Why now
The compliance duty is now federal and actively enforced (a hard 48-hour SLA with an FTC escalation channel), and cheap agentic browser control makes the previously specialist labor of hunting reposts and filing notices automatable. The 'edge' window is ~6 months until platforms converge on a common takedown API or an advocacy incumbent automates it.
Converging signals
AI capability (Flash-tier computer use) × regulation (TIDA enforcement + 48-hour SLA). This is a genuine capability×regulation convergence, but the regulation compels the PLATFORMS, not the tool's buyer — so it is not the founder's forced-filer/portal pattern.
Customer pain
FACT-adjacent/known: NCII victims face copies spreading across many sites, an emotionally acute crisis, and today either hire a lawyer/reputation firm or give up. The pain is real and urgent. HYPOTHESIS: victims will pay a low-ticket fee rather than use the free options — unproven and doubtful.
Who pays
Stated model: NCII victims direct ($50, low-ticket, distressed, largely one-time). Stronger buyer: victim-advocacy / legal-aid orgs and paid reputation-management firms buying seats to serve clients at scale. The direct-victim buyer is the weak channel; the B2B/pro channel is the only durable one.
Solved today
Free hash-based removal via StopNCII.org (Meta-backed, ~a dozen participating platforms) and NCMEC's Take It Down (minors); the new free TakeItDown.ftc.gov complaint portal; and paid lawyers / reputation firms (Ceartas, DMCA-style takedown services) who bill for discovery + filing.
Why current solutions are bad
Free hash tools only cover participating platforms and require the victim to submit the image/hash; lawyers are expensive; nothing gives the victim a single dashboard that discovers copies everywhere AND tracks the statutory 48-hour clock with auto-generated FTC escalations. That coverage+tracking gap is the only real wedge.
Proposed product
NOT the direct-to-victim $50 self-serve bot. The defensible product is a white-label case-management + agentic-filing tool sold to advocacy orgs, legal aid, and paid reputation firms: reverse-image copy discovery, per-platform form automation where ToS/anti-bot permit, a 48-hour SLA tracker, and one-click FTC-complaint generation on a missed removal.
MVP version
A case tracker that (1) ingests a report of an image/URL, (2) discovers copies via reverse-image search APIs, (3) semi-automates (human-in-the-loop, not unattended) filing on the 3-5 platforms whose forms an agent can actually complete, and (4) starts a 48-hour timer and auto-drafts an FTC complaint on miss. Validate the kill test first: can the agent complete real NCII forms end-to-end, or do identity-verification/CAPTCHA/human-only flows block it?
30-day build
Run the KILL TEST before building: attempt unattended and human-in-the-loop submission on the 5 largest covered platforms and document exactly which flows require identity verification, hashing, or human review. Interview 5-8 advocacy orgs / reputation firms on current cost and willingness to pay for seats. Map the free-path coverage gaps.
60-day build
If ≥3 platforms are automatable and a paying pro buyer exists, build the case tracker + SLA clock + FTC-complaint generator (the durable, low-PII part) and thin form-automation for the platforms that pass the kill test. Design so the tool never stores intimate images longer than necessary — prefer hash/URL workflows to reduce PII exposure.
90-day revenue plan
Sell 3-10 seats to reputation firms / advocacy orgs at a monthly per-seat price. Direct-to-victim is deprioritized: free competition + ad-platform restrictions on this sensitive category make paid acquisition unviable.
Distribution path
B2B outbound to reputation-management firms, victim-advocacy nonprofits (CCRI network), and plaintiff-side attorneys — not consumer marketing. Direct-to-victim SEO/ads are blocked by ad-platform policy on sexual-abuse topics and by free gov/nonprofit results ranking above you.
Pricing hypothesis
Per-seat SaaS for pros/orgs (~$99-$299/mo). Reject the $50 self-serve consumer price: it monetizes vulnerable claimants where free help exists — an ethical and reputational liability, and a weak business.
Technical difficulty
Moderate-to-high in practice. Computer-use agents against many private platforms break constantly (form changes, CAPTCHAs, anti-bot, identity checks); per-platform maps are ongoing maintenance, not a one-time build. The SLA tracker + FTC-complaint generator is easy; the automation is the fragile part.
Legal / regulatory risk
Handling intimate images = extreme PII/data-protection exposure. Filing legal notices for others risks unauthorized-practice-of-law if not truly self-serve. Automating private platforms violates their ToS/anti-bot terms (unlike a government portal, these platforms CAN block you). Charging distressed abuse victims where free tools exist raises a real exploitation concern.
Platform dependency
HIGH and adversarial: this submits to PRIVATE platforms (Meta, X, etc.) whose ToS prohibit automation and who can block the agent at will — the opposite of the founder's government-portal edge, where no owner can deplatform the tool.
Founder fit
Weak-to-moderate. It touches regulation + AI automation (his strengths) but it is a distressed-consumer, vulnerable-population, PII-heavy product against free incumbents — the categories he avoids — and it is NOT the government-portal forced-filer pattern where he has a proven edge (the platforms are the compelled party, not his customer).
Breakout potential
Modest. Could generalize into a broader agentic takedown/reputation product (DMCA, defamation), but that arena is crowded and equally ToS-adversarial. The 48-hour-SLA compliance angle is more interesting sold to the PLATFORMS (compliance tooling) than to victims — a different, harder enterprise business.
Final recommendation
REVISIT / PIVOT — do not build the direct-to-victim $50 self-serve bot. Run the platform kill test and validate a paying pro/advocacy buyer first; only the white-label case-tracker + SLA-clock + FTC-complaint-generator sold to firms/orgs is defensible, and even that fights free incumbents and platform anti-bot walls. Low priority versus true government-portal filing mandates.
Next action
Spend one day on the KILL TEST: attempt real NCII form submission (human-in-loop) on the 5 largest covered platforms and record which require identity verification / CAPTCHA / human-only flows — plus 5 discovery calls with reputation firms and advocacy orgs on willingness to pay per seat. Do not build until both clear.