Threat Category Framework

Ecosystem threats fall into five categories, each with distinct detection methods and response patterns. Displacement threats: a new technology or vendor that directly replaces your capability at lower cost or higher quality. Substitution threats: a different approach to the same problem that makes your approach obsolete. Platform threats: a major platform vendor absorbing your capability as a built-in feature. Regulatory threats: policy changes that constrain your operations or advantage competitors. Convergence threats: two or more ecosystem actors combining capabilities in ways that create a new competitive force.

1. Displacement Threats Detected by monitoring direct competitors and new entrants. Leading indicators: new entrant funding rounds in your category, open-source projects approaching your capability level, vendor pricing drops that undercut your economics. Response timeline: typically 6-12 months from detection to market impact. Displacement threats are the most common and the most predictable.
2. Substitution Threats Detected by monitoring adjacent markets and alternative approaches. Leading indicators: customer inquiries about alternative methods, conference sessions featuring different paradigms for your problem space, academic papers proposing novel approaches with practical implications. Substitution threats are harder to detect because they come from outside your normal monitoring scope.
3. Platform Threats Detected by monitoring major platform vendors' feature roadmaps. Leading indicators: platform vendor acquisitions in your category, platform vendor job postings matching your capability, platform vendor blog posts or conference talks addressing your problem space. When AWS, Azure, or GCP launches a feature that replicates your product, 60% of your addressable market evaporates within 18 months.