Flusk: Two 21-Year-Olds at $20K a Month, Acquired by the Platform Itself for Seven Figures — 18 Months of “Building Inside the Ecosystem”

Note: Yen conversions in this article use a rough $1 = ¥150 rate.

A tool built by two 21-year-olds gets acquired by the platform itself for “seven figures” eighteen months later, as a headline, it sounds like too-good-to-be-true success. But the source, They Got Acquired, also records a failed pricing model, the difficulty of being trusted at a young age, and the exhaustion of a seven-month negotiation. We’re covering this case because it lays out both the blueprint for “building inside an ecosystem and getting acquired by the platform” and the costs that don’t show up on that blueprint.

The Business’s Path

The Numbers at Sale

The Pricing Model Failed Once

Flusk’s revenue wasn’t SaaS from the start. It began as the 24-hour support service launched in July 2022, a labor-intensive service business. Fielding a stream of client requests, the pair noticed security was a recurring issue, and in April 2023 they launched Flusk as an automated auditing tool. Their stated mission was “to make security more accessible, not just for people who can afford expensive audits.”

But the original pricing model was an annual license, which the founders themselves admit didn’t hold up. Many users just took the one-off audit and left. Churn stayed high, and recurring revenue never accumulated. It wasn’t until Flusk 2.0 in 2024, which added monitoring, alerting, and user analytics, that a “reason to keep using it every month” existed, settling into $29–65/month subscriptions plus a free tier. The $10,000 MRR at the time of sale is a number that only emerged after this rebuild. Turning a product into a real tool business isn’t a one-time pivot. It includes rebuilding the offering into something worth paying for continuously, and Flusk compressed that process into a short window. Notably, Flusk itself was also built on Bubble, which meshed well with the later integration into the parent platform.

The Trigger for the Acquisition Wasn’t Sales — It Was an “Outside Voice”

What shouldn’t be overlooked is that the acquisition didn’t happen because Flusk pitched itself. The pair had sent Bubble repeated partnership proposals with no result. The turning point was February 2024, when JJ Englert, CEO of the no-code industry group NoCode Alliance, publicly said on YouTube that “Bubble should just acquire them.” About two weeks later, Bubble reached out about an acquisition. Nihoul later learned that Bubble employees had also been pushing internally for the deal.

Direct outreach on its own didn’t work. What moved the decision was reputation inside the ecosystem: an outside, well-known voice, and internal support at the buyer. When selling to the platform itself, whether the buyer has internal champions matters more than the number of emails you’ve sent.

Reading This as a Blueprint for Founding Inside an Ecosystem

Breaking down Flusk’s 18 months lays out, step by step, a playbook for starting a business inside a platform ecosystem. The opening move is a job within the ecosystem (CTO at a no-code training company) and exposure to customer problems. Then monetize the problem through a service business (24-hour support) while learning. Turn the most reproducible problem (security) into a tool and convert it to SaaS. Have a trusted voice in the ecosystem publicly push for an acquisition. Finally, the platform buys the company as “a feature we’d eventually build in-house, plus a proven team”, effectively an acqui-hire.

The key was choosing the right domain. A feature that affects the platform’s trustworthiness (security) is something the parent company can’t ignore. Occupying that space first opens up two exit paths simultaneously: selling to a rollup like Snapbytes → Appfire, or being acquired by the platform itself. Dependence is a risk, but it also means the platform itself sits at the top of your list of potential acquirers.

What Didn’t Work, and What Wore Them Down

The source is candid because it also covers what failed and what wore the founders down. One was the trust barrier. Cybersecurity is a field where “two young, unknown people” struggle the most to be trusted, and the pair admit they “genuinely had to project the image of a much bigger organization than they actually were.”

The other was the exhaustion of negotiation. From the February 2024 contact to the September close took about seven months. The pair recall the process as “unbelievably long, complicated, and bureaucratic.” Their experience with the first M&A advisor and lawyer they engaged was a bad one. They felt they were being steered toward selling. “Almost every week, we nearly changed our minds about whether to sell.” The one lesson they draw from this: “Have someone trustworthy and experienced by your side, because you’ll be forced into major decisions in an area you don’t understand.”

How to Read the Headline

The honesty of disclosing the breakdown of the total seven figures, with the cash-and-equity portion at six figures, is another point of value in this case. Acqui-hire headlines that say “acquired for X figures” often bundle in the employment package. As with Really Good Emails’ 9% upfront payment, a headline needs to be broken down when you read it, and when you’re the one selling, that breakdown becomes negotiating material.

Being a 21-year-old high school dropout wasn’t a barrier inside the ecosystem. Nihoul says, “I started life with very low self-esteem. Bubble helped lift me up.” Not credentials or résumés, but contribution and reputation within the Bubble community were what mattered. An emerging platform is also a place where you can build career capital fastest.

What Repeats More Reliably Than Seven Figures Is Seven Months of Attrition

Flusk’s price includes the advantage of entering while Bubble’s third-party ecosystem was still thin, and the full-time employment of both founders. The seven-figure total is not a figure to reference as a valuation of the business alone, and the path of being bought by the platform itself only exists while a gap remains in a growing ecosystem’s reliability layer. In Japan, Lea in the LINE ecosystem is a transfer of the same shape, with the buyer found inside the ecosystem.

On the other hand, roughly seven months from first contact to close, distrust of the first M&A advisor and lawyer, and a decision to sell that wavered almost weekly happen to individual sellers whether or not the buyer is the platform. Our reading is that what repeats more reliably in this case than the dollar amount is that attrition.

Related Cases

• Snapbytes — another exit inside an ecosystem (a rollup)
• Order Tagger — the same pattern, Shopify edition
• Lea — a domestic version that found its buyer inside the LINE ecosystem
• Black Magic — the flip side, where platform dependence turned dangerous