The question is why would someone trust you with something as serious as security?

Keep tabs on schools that offer Cybersec degrees. They are like central nodes around which eco-systems grow. They usually have attached incubators and run events to help out with advice/funding/networking etc Eg: UC Berkeley School of Information - https://www.ischool.berkeley.edu/events/2025/entrepreneurshi...

It depends on what you're passionate about helping fix or solve within the cyber security industry.

Do you want to develop a product to solve a particular issue you've seen? Do you want to provide advice and consult on best practices? Do you want to help companies implement existing technologies to fix issues?

There's the question of how to start a company in general, but also a question of what do you actually want to do for other people? If you created a company what value would it bring to people that competes with other companies, how do you differentiate yourself.

WHERE are you located? In Europe there are a lot of companies that need to be NIS2-compliant but have little (or no) idea about it. A service offering might work... unless you want to retire before your 30th birthday.