Every public company in the US must file an annual 10-K report with the SEC, and every 10-K contains a section called Item 1A: Risk Factors. This section is a legal obligation to tell shareholders, in plain language, what could go wrong:
- regulatory shifts
- technology disruptions
- supply chain fragility
- customer concentration
- competitive threats
Most people skim past it. A startup founder should read it carefully. The risk factors section is, in effect, a map of the incumbent's weakest points. If a company discloses that its business depends heavily on one distribution channel, that channel is an attack surface. If it says that new technology could make its core product obsolete, that technology is worth investigating. The playbook from there is straightforward: find a risk they have disclosed, build a product that mitigates or exploits it, and sell that product to their competitors first. Once their competitors are using your product, the incumbent faces a choice — buy you or fall further behind. You do not need to win the whole market to be dangerous. You need to make their disclosed risk into a real and present threat.