Most deals price the revenue. Almost nobody prices the code underneath it.
Technology due diligence is the part of a deal — or a board's risk picture — that most advisors wave through. The spreadsheet gets audited line by line; the platform the whole business actually runs on gets a confident nod and a wishful slide. We open it up properly: the architecture, the code, the security, the team and the technical debt that won't surface until after you've signed.
Then we translate engineering reality into the language a board or an acquirer decides in — what's solid, what's a liability, what it will cost to fix, and how much of the valuation is resting on something held together with tape. No jargon for its own sake, no forty-page deck nobody reads. A clear, ranked picture of the risk you're taking on.
Buying a company, raising or selling one, or just trying to understand the systems you already own — we tell you what's really there, and what it means in dollars and months.
What we
look at
The reviewSix lenses on the same question: is this technology an asset you can build on, or a liability you'll inherit? We go deep on each one — automated analysis plus senior engineers actually reading it.
Architecture & scalability
Will it carry ten times the load, or fall over the first time growth gets real? We pressure-test the architecture for where the business is going, not just where it has been.
Code quality & technical debt
How much of what you're buying is an asset, and how much is a mortgage? We read the code, not just the README — maintainability, test coverage and the debt nobody has written down.
Security & compliance
Where are the holes, what's exposed, and which regulation is one audit away from a fine? Security posture, data handling and the compliance gaps that become your problem after close.
Team & key-person risk
Who actually holds the system in their head, and what happens the day they leave? We map the people, the gaps and the single points of failure the org chart hides.
Delivery & engineering practice
Can this team ship predictably, or is every release a coin toss? CI/CD, release cadence, incident history and how work actually gets from idea to production.
IP, licensing & third-party risk
Do they own what they think they own? Open-source licences, third-party dependencies, contractor IP and the AI-generated code that may not be anyone's to sell.
When teams
call us in
Six momentsM&A due diligence
You're acquiring, and most of the target's value is its technology. We tell you what you're really buying — before the price is locked and the risk becomes yours.
AcquirerVendor / exit readiness
You're raising or selling. We find the red flags before the buyer's diligence does — so you fix them on your terms, not theirs, and defend the valuation.
Founder / vendorInvestor diligence
You're writing the cheque. We give your investment committee an independent read on the technical risk behind the deck and the team behind the demo.
Investor / fundBoard & CTO health check
No deal — just a board that needs to know the technology is sound, and a CTO who wants an honest outside read on architecture, risk and best practice.
Board / CTOInsolvency & restructuring
An administrator, lender or board facing a distressed business needs answers fast: is the technology an asset worth saving, what will it take to keep it running, and what is it worth to a buyer?
Administrator / lenderIndependent expert opinion
When a deal or dispute needs an arm's-length technical read — a related-party transaction, a scheme of arrangement, a warranty claim or a matter headed for court — we give a defensible, independent opinion.
Expert / counselHow a
review runs
The rhythmTight loops and a real readout at the end — not a black box you wait weeks for. You see findings as they firm up, so there are no surprises in the final report.
Scope & access
We agree what's in scope, sign the NDAs, and get read access to the code, the cloud and the people. Days, not weeks.
Dig in
We work through the architecture, codebase, security, infrastructure and delivery — automated tooling plus engineers reading the real thing.
Pressure-test
We interview the key people, probe the scariest assumptions, and separate the genuine risks from the merely cosmetic.
Readout
A ranked findings report and a live session with your deal team or board — red flags, remediation, cost and the questions to ask next.
What you
walk away with
The outputA ranked risk register
Every finding scored by severity and business impact — not an undifferentiated wall of issues, but a prioritised list you can actually act on.
Red flags, called early
The deal-breakers and the hidden liabilities, surfaced while you can still renegotiate, fix or walk — not after the ink is dry.
A remediation plan & cost
What it takes to make it sound, in real time and dollars — so “we’ll fix it later” comes with an actual number attached.
Impact on the deal
How the technical reality should move the price, the earn-out or the conditions — translated into the terms you negotiate in.
Operators,
not auditors
Why us| What you actually get | Full Flight · Tech DD | Big-4 advisory | In-house review |
|---|---|---|---|
| Reads the actual code | Yes, line by line | Rarely | If there's time |
| Who does the work | Engineers who ship | Generalist consultants | Your own team |
| Independent | Yes | Yes | No — too close to it |
| Turnaround | Days to weeks | Weeks to months | Whenever it fits |
| Remediation plan | Costed & sequenced | High-level | Informal |
| The output | Ranked, plain-English | A long deck | A verbal “seems fine” |