Cross-market opportunity research · US → India

Every Uber has found its Ola. Every Toast has found its Posist.

We research which US-proven businesses are ready for India next, and hand you the evidence your partners will ask for: competitor map, score, and a falsifying experiment. A shortlist you can defend.

✓

A shortlist to defend

A ranked shortlist of 3 to 5 US businesses with India transfer potential, ready for your next partner meeting.

✓

Every claim, sourced

Every data point comes with a source and an access date. If we cannot show where a number came from, it stays out.

✓

Built to be disproven

Each brief includes a falsifying experiment: a specific test that would prove the transfer will not work, before you spend a quarter on it.

✓

Clear scoring

A 49 out of 100 means the same thing every time. Six weighted dimensions. You can disagree with the weights and adjust them.

Why this exists

Uber found Ola. Toast found Posist. Stripe found Razorpay. The pattern is consistent enough to bet on. Almost nobody tracks the next ones before they are obvious.

Every quarter, 50 to 100 US companies launch models that could transfer to India. Most India-focused studios and seed VCs find out after someone else has already funded the local version. Research still lives in Notion docs and one-off Slack threads.

We deliver weekly transfer research briefs. Each one names a US company, scores the India transfer on six dimensions, cites sources, marks coverage limits, and includes a falsifying experiment that would kill the thesis. Meant for partner meeting.

That process is what shows up in your inbox every week.

How it works

  1. Curate. We scan US startup activity weekly for funding, launches, and hiring signals that point to unresolved India demand.
  2. Research. For each candidate we build a brief with an India competitor map, localization checklist, demand evidence, and a composite score.
  3. Stress-test. Every brief includes a falsifying experiment with a kill signal, then lands in a ranked shortlist with sources attached.

What one week's research looks like

Hex Security → India

Still openContinuous AI pentesting · US (YC W26) → India

Score49 / 100

ConfidenceSpeculative

EvidenceHypothesis

Researched2026-07-26

Score breakdown

Source traction 30%68

YC W26, self-reported $1M ARR in 8 weeks; only $125K disclosed [1][2][3]

India demand 20%62

RBI/SEBI VAPT mandates; largest buyers are regulated BFSI [7][8]

Whitespace 20%28

Astra (800+ teams, CERT-In empanelled) plus TAC Security domestically [5]

Localization 15%22

CERT-In, CREST, PCI ASV credentials take years; blocks regulated sales

Timing 10%58

AI pentesting tailwind; Pentera and NodeZero already funded in US [4]

Execution 5%38

~10 people, pre-seed; wedge limited to SaaS startups and GCCs

Composite weights from our opportunity model (30 / 20 / 20 / 15 / 10 / 5). Whitespace and localization drag the score despite strong US traction signals.

US source traction

Hex Security (San Francisco, founded 2026, ~10 people). AI agents for continuous penetration testing of web apps, APIs, and infrastructure. Self-reported $1M ARR within eight weeks of founding. $125K disclosed pre-seed (YC standard check). One of the most fought-over companies at W26 Demo Day. [1][2][3]

India competitor map

AS
Astra Security

New Delhi · 2018 · $2.82M raised · 800+ teams

Read: Direct overlap. CERT-In empanelled, CREST, PCI ASV. Mamaearth, Dream11.

TS
TAC Security

India · vulnerability and risk management

Read: Named by Astra as domestic competitor; adds field density.

PE
Pentera / NodeZero

US · autonomous continuous pentesting

Read: Category already proven globally before Hex entered.

Localization checklist

Gaps Hex still needs for regulated India sales.

  • CERT-In empanelment

    For RBI / SEBI / IRDAI-regulated VAPT buyers

  • Audit-ready reporting

    Mapped to Indian regulator clauses

  • CI/CD and deploy hooks

    Integrations for Indian SaaS stacks

  • India pricing

    Single-product startups vs. enterprise PTaaS contracts

Coverage

Checked

  • US company profile

    Funding from YC, PitchBook, Crunchbase

  • India competitor map

    Astra, TAC, and empanelled VAPT firms

  • Regulatory buyers

    RBI, SEBI, and CERT-In requirements

  • US category competitors

    Pentera and NodeZero

Not checked

  • Buyer interviews

    Indian CISO or security-lead conversations

  • ARR verification

    Independent check of Hex $1M ARR claim

  • Post-Demo-Day round

    Size and valuation still undisclosed

  • Spend and ERP vendors

    India spend-management and ERP vendor map

Falsifying experiment

Test

Interview 10 CTOs or security leads at Indian SaaS companies closing US enterprise deals. Ask what they bought for continuous testing, whether CERT-In empanelment mattered, and whether they chose Astra, a US tool, or a manual VAPT vendor.

Kill signal

Most buyers say compliance credentials drove vendor choice, or they already use Astra and would not switch for deploy-time agentic testing alone.

[1] YC - ycombinator.com/companies/hex-security - 2026-07-26

[2] TechCrunch W26 Demo Day - 2026-03-28

[3] PitchBook / Crunchbase - hex-security - 2026-07-26

[4] YC Tier List - yctierlist.com/w26/hex-security - 2026-07-26

[5] Astra Security - getastra.com, Inc42 Feb 2025 - 2026-07-26

[6] Tracxn - Astra profile - 2026-07-26

[7] RBI/SEBI VAPT guides - getastra.com/blog/compliance - 2026-07-26

[8] CERT-In empanelment - c9lab.com, cybersecify.com - 2026-07-26

Excerpt · full brief includes PDF export and linked evidence cards

Why it matters

Deal-sourcing tools find the company. We tell you if the transfer is worth betting your studio's quarter on, with the evidence your partners will ask for.

Beyond company discovery

Company databases and signal scrapers

Finding a promising US company is the easy part. Plenty of tools already do that.

The harder question is whether the model survives India's regulation, distribution, and price. That is what we research.

Before you have a pitch

Pitch scorers and founder-side validators

Most teams start with an idea and work backward to evidence.

We build the ranked shortlist first, with a falsifying experiment attached. You are not bringing us a pitch to score.