They're Required to Tell You How to Beat Them — Julien Reszka

← Blog

Incumbents are required by law to list everything that could kill them. Read those lists. Then build one of those things.

100% US public companies required by the SEC to disclose material business risks annually in their 10-K filings SEC Regulation S-K, Item 1A

Every public company in the US must file an annual 10-K report with the SEC, and every 10-K contains a section called Item 1A: Risk Factors. This section is a legal obligation to tell shareholders, in plain language, what could go wrong:

regulatory shifts

technology disruptions

supply chain fragility

customer concentration

competitive threats

Most people skim past it. A startup founder should read it carefully. The risk factors section is, in effect, a map of the incumbent's weakest points. If a company discloses that its business depends heavily on one distribution channel, that channel is an attack surface. If it says that new technology could make its core product obsolete, that technology is worth investigating. The playbook from there is straightforward: find a risk they have disclosed, build a product that mitigates or exploits it, and sell that product to their competitors first. Once their competitors are using your product, the incumbent faces a choice: buy you or fall further behind. You do not need to win the whole market to be dangerous. You need to make their disclosed risk into a real and present threat.

Myth: Disrupting a large company requires secrecy until you're ready to compete directlySEC Regulation S-K, Item 1A; Christensen, The Innovator's Dilemma, 1997

Find an incumbent in your market, read their annual report risk disclosures, pick one risk you can actually mitigate, build a product around it, and sell it to their competitors first.

Post on X

Products I recommend

Both free to try, no login needed. Results saved locally in your browser.

You're looking for an idea to start a business? Empire Generators helps you find it from SEC filings of public companies and then generates a strategy around it with 40+ business frameworks. It's the only tool that turns the 'they're required to tell you how to beat them' insight into a repeatable process for finding and executing on real attack surfaces.<br>Try Empire Generator free

Discussion

Are you trying to compete with a larger incumbent and struggling to find a real attack surface?

Post on X

Fiona B. Dublin, Ireland 2026-05-28

Yeah this hit home. We're up against a ~$4B incumbent and for a year our pitch has basically been 'cheaper + nicer support' which is... not enough. Going through their 10-K this weekend to find something real to attack.

Reply

David L. 2026-05-29

Did this last year in payments. Found one risk disclosure around a coming regulatory change and built around that specific pain. Ended up closing 3 of their competitors.

Reply

Aman P. 2026-05-29

Same spot here. Incumbent has brand, distro, integrations, all of it. The 10-K angle is the first next step I've heard in months that isn't just 'grind harder'.

Reply

Vivienne T. Hong Kong 2026-05-30

Small pushback: risk factors in 10-Ks are lawyered to death. Useful, yes, but often sanitized. The nastier vulnerabilities are usually the ones they can't spell out publicly (roadmap bets, quiet channel deals, internal intel moves already underway).

Reply

Your name *

Your email * (never published)

City, country (optional)

Tell me about your situation *

Send<br>All comments are manually moderated by the author.

Subscribe to get new posts by email →

See also

Build for What Won't Change

The Web Is Not a Safe Harbor From Platform Control

Love Score Was Banned for Reading SMS Metadata On-Device

Browse all figures →<br>Browse all myths →