Splunk is a good example of this. I've worked at several public and private muti-billion dollar orgs, and they all rant and rave about how good Splunk is over whatever else they were using.
So, build more splunks. Maybe something that aggregates monitoring multiple servers. A plug and play Status Dashboard for a company's internal apps. Like this: https://www.google.com/appsstatus#hl=en&v=status
Which potential security threat do you want to eliminate to reduce the splunk bill?
I worked on many CRUD apps that had say 4 different groups of users. We made a library / system for determining what "level" a user is, based on what Active Directory roles the user is assigned. In the application, you can show or hide components based on this level. Making some sort of middle-ware that abstracts things for developers, so they don't have to think about things like AD, is a huge area of opportunity.
So what proxy method would you use to determine that Fortune 2000 companies are spending twice as much on Splunk as they do on New Relic (for instance)?
But similarly, I’ve found it convenient for all my other 2FA needs from GitHub to RuneScape. So even then, it has value to consumers.