> That leaves a massive gap that seems like an opportunity: YC startups

Isn't Thomas last start up exactly about that? https://latacora.com/

> So what do you do if you want to create a startup to fill this gap? Make tools

Indeed, I believe the only "tool" on the market for crypto reviews is cryptosense: https://cryptosense.com/

> I have an xss.txt file that contains exploits that work on almost every client I throw

Can you share that :) ?