CompliMesh: Continuous SoD & Config‑Drift Sentinel for ERP
10/10
Demand Score
Audit deadlines, regulatory fines and breach risks demand continuous control—not annual checklists—and immediate remediation proof.
7/10
Blue Ocean
Competition Level
$5k-20k
Price/Month
Predicted customer spend
16 days
Time to MVP
Difficulty: Expert
The Problem
Continuously monitors ERP security configurations, roles, transports and integrations to detect SoD conflicts, high‑risk privileges, and configuration drift. Maps controls to SOX, GDPR, ISO 27001, HIP
🔗 Validated by Real User Complaints
This problem has been verified through 3 real user complaints:
Competitor Landscape
- Onapsis
- Pathlock (Greenlight)
- SailPoint / Saviynt
- Secureframe / Drata (GRC)
- ERPScan
Must-Have Features for MVP
Prebuilt control/policy library mapped to frameworks
Connectors to SAP/Oracle/D365 and IAM
Real‑time SoD conflict and config‑drift detection
Automated evidence pack generation
Patch/CVE relevance engine and SLA tracking
Break‑glass control with session recording
SIEM/ITSM integration and risk‑based workflows
⚠️ Potential Challenges
- High‑privilege access requirements and data sensitivity
- Tuning rules to reduce false positives
- Complex SoD across multiple systems and custom roles
- Change governance fatigue from frequent alerts
Risk Level: High
🎯 Keys to Success
- Reduction in unresolved SoD conflicts and critical findings
- Audit hours saved and fewer external findings
- Mean time to remediate control breaks
- Coverage of in‑scope controls across systems
Ready to Build This?
This expert-difficulty project could be your next micro-SaaS success.