Security monitoring for retail refrigeration controller fleets

Agentless monitoring and attack detection for supermarket refrigeration controllers (Danfoss AK/CC, Carel) so chains catch defrost-attack style intrusions before food spoils.

I want to build a venture-scale product. Help me plan and start the MVP.

Product: Security monitoring for retail refrigeration controller fleets
What it is: Agentless monitoring and attack detection for supermarket refrigeration controllers (Danfoss AK/CC, Carel) so chains catch defrost-attack style intrusions before food spoils.
Who pays: VP of Operations / CISO at grocery chains with 100+ stores (Carrefour-, Ahold Delhaize-scale), paying from loss-prevention and security budgets; a single 80-store incident with spoiled inventory justifies $50k–250k/yr contracts.
Closest alternatives: Claroty xDome, Nozomi Networks, Dragos, Microsoft Defender for IoT
The gap: Existing OT security platforms target power/water/manufacturing and are priced and staffed for enterprise SOC teams; none ship purpose-built protocol parsers, defrost-cycle anomaly detection, or per-store health views tuned to retail refrigeration estates, and none sell to grocery ops buyers at grocery margins.
Why now: A coordinated, publicized defrost attack (plus a suspected copycat on US military commissaries six weeks earlier, c:50057741) just made refrigeration controllers a named attack class; the vendor disclosed CVEs and admitted older models can never be patched (c:50061151), forcing chains to buy compensating controls instead of fixes.
Moat to build toward: Refrigeration-controller protocol and normal-cycle behavioral baselines are niche data assets that compound per deployed estate; integrations with Danfoss/Carel controller APIs and retailer EAM systems create switching costs.

A ready-to-paste brief for Claude Code, Cursor or any coding agent.