Malicious Tor exit nodes enable credential stuffing and attacks, but tracking them is manual.
Build a live map of bad exit nodes with automated abuse evidence collection and reporting APIs.
Sell to enterprise security teams and hosting providers who need to block abusive traffic.
MVP could be a simple scraper that correlates reported attacks with node fingerprints.
Risk: May face pushback from Tor privacy advocates.