Before you invest or acquire, get a clear look at the tech in the deal. We review how the product really works, the code underneath, and the team behind it, then walk you through a plain-language report with every risk ranked.
No hundred-page dump. A clear verdict first, then the detail behind it, written for the people making the decision.
- An overall verdict up front, in plain language
- Every area of the tech rated, from strong to critical
- Each risk ranked by severity, with what it means for the deal
- What to fix before close, and what can wait until after
- Questions to ask the management team
The company and findings are fictional.
Overall
Proceed, with conditions.
Ratings at a glance
- Architecture
- Sound
- Code quality
- Strong
- Security
- Critical
- Scalability
- Needs attention
- Infrastructure
- Sound
- Team & process
- Needs attention
Top risk
Six people share one set of production database credentials.
CriticalFix before close
Good code can still build the wrong thing. We look at everything the product depends on, including the people.
Features & edge cases
The scenarios nobody planned for, and what real customers will actually do. Over 20 years of building products teaches you where to look.
Architecture
How the product is put together, whether it fits the stage, and where it will strain as it grows.
Code quality
Readability, consistency, and test coverage. Whether a new engineer could pick it up and move fast.
Security
How customer data is protected, who can reach production, and the gaps that would hurt most.
Scalability
Whether the product can handle the growth in the plan, and what it would take if it can't.
Infrastructure
Hosting, deploys, backups, and monitoring. What happens on the day something breaks.
Team & process
Who knows what, how work ships, and where the company depends on a single person.
Third parties & licensing
The services and open-source code the product leans on, and any licenses that could cause trouble.
Tech debt
The shortcuts already taken, which ones matter, and what they will cost to pay down.
When to Bring Us In
Any time the tech is part of the bet.
Before you invest
Seed to growth stage. Know whether the tech can carry the plan you're betting on.
Before an acquisition
See what you're really buying, and what it will take to run and integrate it.
Before a follow-on
Check in on a portfolio company before you put more in, or when something feels off.
Get reviewed before your investors do. We'll look at your tech the way their reviewer would and help you fix what we find, so you walk into diligence knowing where the soft spots are.
We work to your deal's timeline, and everything stays confidential.
Already invested and need ongoing help? See our fractional CTO services.
A conversation
Tell us about the deal, the company, your timeline, and what worries you most. We scope the review around what matters to the decision.
Hands on, read-only
We dig into the code and infrastructure with read-only access, then sit down with the company's tech team to confirm what we find.
What you walk away with
- An overall verdict, in plain language
- Each area rated, every risk ranked by severity
- What to fix before close, and after
- Questions for the management team
Delivered before the deal closes.
Together, with your partners
We walk you and your partners through the findings and answer every question. If you invest, we can stay on as fractional CTO and help the team fix what we found.
Don't see yours?
What's included in technical due diligence?
We review how the product actually works, including the scenarios it misses, plus the architecture, code quality, security, scalability, infrastructure, the team and process, third-party services and licensing, and tech debt. You get a written report with an overall verdict, each area rated, every risk ranked by severity, and what to fix before and after close. See a sample report (PDF).
Is this a SOC 2 or HIPAA audit?
No. We don't certify compliance. We look at the tech the way an experienced CTO would, and we'll flag the gaps a compliance audit would likely catch, like weak access control or missing logs.
Is it confidential?
Yes. We're happy to sign an NDA, we work with read-only access, and the report goes only to the people you name.
How long does it take?
We work to your deal's timeline. Tell us your close date in the first conversation, and we'll scope the review to fit it.
What if the company has no tech team?
That's common early on. We review whatever's there, including work by an agency or contractors, and tell you what it would take to run and grow it.
What happens after the deal?
The report separates what to fix before close from what can wait. If you invest, we can stay on as fractional CTO and help the team work through it.
Can founders hire you too?
Yes. If you're raising or selling, we'll review your tech the way an investor's reviewer would, and help you fix what we find before anyone else sees it.
Trust, but verify. We'll handle the latter.