Flusk
👤 Victor Nihoul & Wesley Wasielewski (Nihoul taught himself Bubble in 2017, rose to no-code agency CTO, won Bubble's Trailblazer award; Wasielewski co-founded.)🌐 siteLinkedIn
Automated security scans for Bubble apps — 20+ checks per deploy. Bubble bought the product and both founders in 2024.
Will it work? · our read
Buy-over-build. Flusk became the missing security layer for a booming platform, so Bubble bought the product and both founders. The catch: it lived 100% inside one platform.
01How the money moves
Build the missing security layer on Bubble
→
Free tier + $29-65/mo + one-off enterprise audits
→
Bubble buys the product + both founders (2024)
02The numbers
$240K
ARR at exit
founder
100
paying users
They Got Acq
18 mo
launch to exit
fact
Under 18 months from launch (April 2023) to acquisition (October 2024), with only about 100 paying users — Bubble bought the strategic fit, not the revenue. bubble.io/blog
About $240K annualized at the September 2024 exit — but only $10K/mo was recurring subscriptions; the other $10K/mo came from one-off enterprise audits. About 1,000 users, 100 paying. founder-stated to They Got Acquired. Deal price undisclosed (reported 6-figure base + founder salaries).
03Weight class — CENTStap an axis
Control Low
Lives entirely inside Bubble's ecosystem. Bubble sets the API and could ship native security anytime (sherlock risk).
04The key move
Productize the service
They first sold Bubble support by hand — one client, $5K/mo, no scale. So they packaged it into a self-serve product. You can't buy a consulting gig; you can buy a product plus two expert founders.
fact
The counter-intuitive move
The non-obvious part: they optimized for strategic fit, not scale. When a user's YouTube review said 'Bubble should just buy them,' Bubble reached out two weeks later.
fact
05Where the moat is
Not the code — Bubble could build it. The moat was:
Platform insider — Bubble Trailblazer winnersBuilt ON Bubble — native to the ecosystemThe obvious build-vs-buy target for BubbleFounders + product = an acquihire, not just IP
06How it diesmedium confidence
The platform copies you instead of buying you. Bubble could have shipped native security and sherlocked Flusk to zero — its whole market was Bubble's users. Building instead of buying kills you. our read
Show evidence · counter
Evidence: Flusk's entire market was Bubble's own users (fact); Control is the weak CENTS axis. Platforms routinely ship native versions of popular add-ons (sherlocking).
Counter: But deep expertise plus community trust made buying cheaper than building — and Bubble wanted the founders, not just the feature. Fit beat sherlocking here.
07Against rivals
The old option was a $5K+ manual audit few indie makers could afford. Flusk made security self-serve and cheap — then became Bubble's built-in answer. our read
08Who uses it
🏗 No-code agencies building Bubble apps🚀 Bubble startups shipping to production🔒 Enterprise Bubble teams needing audits🛠 Solo makers worried about data leaks
★Would it work for you?
Is there a fast-growing platform whose ecosystem has an obvious missing layer — one you could become the answer to?
Flusk's edge was insider standing, not better code. Which ecosystem do you already live inside? We don't score you — you answer.
🚀Use it as a launchpada prompt for your own AI
Copy → paste into your AI → then develop it freely in the conversation.
You are a sharp, honest startup strategist. Use the proven case below as a launchpad for MY idea — help me find my own angle, not copy it.
<my_profile>
Domain I know: [your domain]
My unfair advantage (access/audience): [your edge]
Interests: [your interests]
Resources & goal: [your resources] · [your goal]
</my_profile>
<case name="Flusk" model="devtool">
What it does: Built a self-serve security-audit and monitoring tool for apps made on Bubble (no-code); 20+ checks per deploy, free tier plus $29-65/mo, and about $10K/mo in enterprise audits.
Why it won (moat): Deep Bubble-specific expertise plus community trust (Trailblazer award) made them the obvious build-vs-buy target for the platform.
Weakest axis (CENTS): Control and Scale are low — the whole business lived inside Bubble's ecosystem, and half the revenue was one-off manual audits.
How it could die: The platform ships native security and sherlocks the add-on to zero, since its entire market is that one platform's users.
</case>
<task>
Be a skeptical operator, not a cheerleader. No generic startup platitudes. If my angle is weak, say so plainly.
First, a reality check: markets like this mostly fail. State the honest base rate (how crowded/hard is this?) and the ONE specific thing that would have to be true for ME to be the exception — grounded in my profile above.
Then a compact table:
- Fit — does this pattern suit my edge, or fight my gap?
- Angle — my sharpest differentiation vs Flusk (concrete, not "better UX")
- Distribution — exactly where my first 100 users come from (this is the hardest part — be specific, not "content marketing")
- Risk — its "how it dies" (above) in MY situation
Finish with one line: "The single thing to do next."
Use only the facts above; if data is thin, say so — never invent numbers.
Then stay with me and go deeper on whatever I ask — tech stack, rough cost & time, the smallest MVP to test, pricing, or timing.
</task>
✓ Copied — paste into your AI
👤Placeholders like [your domain] auto-fill from your profile — example values for now.Set up profile →
Sourcesupdated · daily
Revenue ($20K/mo = $10K recurring + $10K one-off audits, about $240K/yr) and user counts are founder-stated to They Got Acquired — flagged STATED, not audited. Exact deal price is undisclosed (reported 6-figure base + salaries). CENTS, moat and the 'buyable' read are ours. We never score you.