Ask HN: How to build “minimum-value” MVP?

I'm a founder of a startup focused on detecting security risks of open source. Because this is a heavily crowded space, what should my MVP contain so as to provide value and test market fit? Advancing the state-of-the-art requires many man-months of effort. Any advice is highly appreciated. Thanks!