Advisory
Technical due diligence for software acquisitions
You are buying a company whose value rests on a codebase you cannot assess, written by the team selling it to you. We give you an independent read on what you are actually acquiring.
What we assess
- Architecture and scalability
- Code quality and maintainability
- Technical debt, with remediation costed in money and time
- Security posture
- Payment and PCI DSS exposure where the target processes card data
- Dependency and licensing risk
- Infrastructure and disaster recovery
- Team capability and key-person risk
- IP ownership and third-party code
- Realistic cost to maintain and extend the system post-acquisition
What you receive
- A written report with an executive summary a non-technical buyer can act on
- A risk register graded by severity
- Remediation estimates in money and time
- A debrief call
Engagements and pricing
| Engagement | Price | Duration |
|---|---|---|
| Express technical review | €1,800 | 3–4 working days |
| Full technical due diligence | from €5,500 | 8–12 working days |
| Remediation roadmap (optional) | €2,500 | — |
Express suits targets under roughly €2M or solo-founder products: architecture, stack, principal risks, key-person risk, and a go/no-go memo. Full adds the graded risk register, costed remediation and team interviews. The remediation roadmap is advisory only.
Fintech and payments
Where the target processes payments, the assessment covers payment flow architecture, card data handling, PCI DSS scope and exposure, and processor and gateway dependency risk. It is delivered by an assessor with a direct payments and fintech engineering background.
We have built and operated payment platforms running around 30,000 transactions a day, and have prepared six server environments for PCI DSS assessment, maintaining several of them for between two and five years.
Who does the work
The work is delivered personally by an engineer working in software since 2012 who runs the company's engineering team. This service is not delegated. Targets built on Laravel and PHP are assessed with first-hand knowledge of the framework and its common failure modes. Six technical due diligence and fractional CTO engagements since 2022.
Independence
We do not bid on development work arising from our findings. Our recommendations are not a sales pitch.
Confidentiality
Every engagement is under NDA, and no client is ever named — including on this site. This is standard practice in due diligence.
Frequently asked questions
- What does a technical due diligence engagement cost?
- An express technical review is €1,800, a full technical due diligence is from €5,500, and an optional remediation roadmap is €2,500.
- How long does it take?
- An express technical review takes 3–4 working days; a full technical due diligence takes 8–12 working days.
- Do you bid on remediation work arising from your findings?
- No. We do not bid on development work arising from our findings, so our recommendations are not a sales pitch.
- Are clients ever named?
- No. Every engagement is under NDA, and no client is ever named — including on this site. This is standard practice in due diligence.
- What is covered where the target processes payments?
- Payment flow architecture, card data handling, PCI DSS scope and exposure, and processor and gateway dependency risk — delivered by an assessor with a direct payments and fintech engineering background.
- Who carries out the work?
- The work is delivered personally by an engineer working in software since 2012 who runs the company's engineering team. It is not delegated.