We Beat a $10,000 Bid on outbid.lol With $151

O

Oleg

· 7 min read

There's a website called outbid.lol that has made a small fortune this week by doing something almost offensively simple: it lets you pay to rank. No SEO, no algorithm, no editorial review. The leaderboard is sorted by one signal only, which is how much money you put down.

This weekend, aicompliance.ai took the #2 all-time spot in outbid.lol's Security, Privacy & Compliance category for $151. The #1 spot above us is held by trycomp.ai (Comp AI), at $10,000. And on the site's new daily board, where rank is based on what you spent in the last 24 hours, our bid currently makes us #1 in the category for the day. The #2 spot on that board is sitting at all of $8.

I think we got the better end of this whole arrangement, and I'll make the case below. But first, the story of the site itself, because it deserves to be told.

A 29-Year-Old From Germany Just Made $182K Off a Website With One Button

Last Tuesday at 11:08 PM, a 29-year-old indie hacker from Germany named Jonathan Wilke (@jonathan_wilke, the founder of supastarter.dev) pushed a side project live and went to bed like it was nothing.

Four days later: 1 million+ visitors and $182,187 in revenue.

The site is outbid.lol, and the entire product is one rule. Pay more than the startup above you, and you rank #1. No ads, no API keys, no algorithm to game. The rank IS the bid.

That's it. That's the whole product.

Here's what has happened since launch night:

  • $182,187 in revenue as of this weekend (new spots start at $5)

  • $15,000 is the current top bid, and #2 is sitting at $14,028, just $972 behind

  • Enough traffic to break his analytics provider mid-week. He had to switch tools just to keep the counter running.

  • Someone offered $100K to buy the site. He kept the board.

  • 10+ copycats appeared in the first 24 hours.

And this is the part that should be framed in a museum: some of the copycats are now paying to be listed on the original board. Jonathan is charging his own clones for exposure. Clone #45 paid $501.

None of this is new, by the way. The Million Dollar Homepage pulled the same trick in 2005. Jonathan just rebuilt it for the AI-startup era, shipped it solo, and let founder egos do 100% of the marketing. Every bid war became a screenshot, every screenshot became traffic, and every visitor was a potential bidder.

He's not slowing down either. This morning he launched outbid.lol/today, a daily board that resets every 24 hours, so you don't need $15K to get seen. You need $5 and good timing.

The takeaway for every founder reading this at their desk: he didn't raise money, didn't build a moat, and didn't write a line of AI. He found something people would fight over in public and put a price on the fight.

Your weekend project doesn't need to be smart. It needs to be shareable.

Now, about that $10,000

In the Security, Privacy & Compliance category, the all-time board currently looks like this: #1 is Comp AI at $10,000. #2 is us, at $151. Third place sits at $150, which means we hold our all-time spot by the price of a coffee, while simultaneously topping the daily board where yesterday's bids don't count.

Here's my honest take: #2 all-time (and #1 for the day) at $151 is the better deal, by a wide margin.

The gap between #1 and #2 on this board is $9,849. The gap in what you actually get is one row of pixels. Both listings are above the fold on the same category page, seen by the same visitors, one scroll-second apart. Nobody browsing a compliance-tools leaderboard reads entry #1 and then closes the tab. The marginal visibility of first place over second place is real, but it is nowhere near 66x the price, which is what #1 currently costs relative to our spot.

There's also a defensive math problem at the top. To outbid us, a competitor needs $152. To outbid Comp AI, someone needs $10,005. That sounds like a moat for #1, until you remember the flip side: the #1 bidder has $10,000 of sunk cost to defend in a game explicitly designed around escalating-commitment psychology, where defending your position "rationally" $20 at a time is exactly how the house wins. We're playing the same game with two orders of magnitude less exposure.

To be fair to Comp AI: they've held their spot for three days and racked up nearly 13,000 clicks, which works out to well under a dollar a click. That's respectable performance marketing for a competitive keyword space like SOC 2 automation. Meanwhile our listing picked up its first 41 clicks within six hours of bidding; if that pace holds for even a couple of days, our cost per click lands in the same neighborhood, at 1.5% of the spend.

This isn't a "they got scammed" story. It's a marginal-value story. If $10,000 at #1 buys roughly the same audience as $151 at #2, then the last $9,849 mostly bought the number "1". And the number "1" on a board that everyone knows is pay-to-rank doesn't carry the credibility signal it would anywhere else. On outbid.lol, rank isn't a quality signal. It's a receipt.

The full Security, Privacy & Compliance board

We run the AI Compliance Index, so cataloguing this category is quite literally our job. Here are all 18 listings as they appeared on the board on August 23, 2026, ranked by bid. Some of these are solid tools that just happen to be cheap on a meme leaderboard, which is kind of the whole point of this post.

#

Name

One-liner

1

Comp AI

Automates SOC 2, ISO 27001, HIPAA and GDPR; 580+ integrations, audit and pentest included.

2

AI Compliance Index

AI compliance directory. Built for humans, structured for agents.

3

DNSai

DNS, WHOIS, blacklist and SPF/DKIM/DMARC lookups with plain-English summaries, API and MCP connectors.

4

complyeah

$50 AI-driven external pentest mapped to SOC 2 and ISO 27001, with auditor-ready report.

5

Korpalis

Human-curated AI security intelligence: research database, consulting and a weekly newsletter.

6

Decloak

Web security intelligence: free 15-second scan, AI agent investigation, authenticated pentesting.

7

Disinformation Commission

Real-time disinformation monitoring and narrative threat intelligence briefings.

8

Newly Registered Domains

Daily-updated search of newly registered domains across hundreds of TLDs.

9

Sequro

Zero-knowledge password manager; data encrypted and decrypted only on your device.

10

DocsOrb

Policies for people and AI: publish rules, answer questions, keep acknowledgments audit-ready.

11

Kordon

Straightforward GRC platform; claims 80% reduction in audit time.

12

1TimeLink

End-to-end encrypted, self-destructing password links via a Slack /1tl command.

13

Answerdeck

Drafts source-grounded security questionnaire answers with human review and audit-ready exports.

14

Strike Atlas

60 autonomous AI pentesting agents that discover, validate and chain vulnerabilities.

15

ClipScrub

On-device PII/PHI redaction for Mac before you paste into ChatGPT or Claude.

16

BLAZLE

Real-time AI security interceptor that blocks prompt injection and data leaks in under 1ms.

17

Zic VPN

Simple VPN for browsing and streaming, secured by WireGuard and V2Ray.

18

Subdomains Finder

Free subdomain enumeration: subdomains, IPs, ASN and open ports.

What compliance folks can take from a .lol domain

There's a real lesson here for anyone who thinks about risk and controls for a living, which is presumably why you're reading this blog.

Outbid.lol works because it made its incentive structure completely transparent. You know exactly why every listing ranks where it does. Compare that to the systems we all actually depend on, like AI-generated recommendations, search results, and "top 10 vendor" content, where the ranking logic is opaque and the payments, when they exist, are invisible. A leaderboard that says "this company paid $10,000 to be here" is, in a strange way, more trustworthy than a listicle that doesn't disclose anything at all.

Transparent incentives, legible rules, verifiable state. That's the whole compliance job description, accidentally implemented as a meme site by one developer in a few hours.

Anyway: we're the $151 line item, one row down from the $10,000 one on the all-time board, and sitting at #1 on today's. Built for humans, structured for agents. Come say hi before someone outbids us for $152.