- Home
- Digital Evidence & Legal
- M&A cyber diligence
Before you buy the company,
find out who else is inside it.
Passive, non-intrusive reconnaissance of an acquisition target in five to seven business days: darknet exposure, external attack surface, signs of existing compromise, architecture, data governance and compliance posture. We never touch the target's systems.
IT diligence asks what they own. This asks who is in it.
Standard IT diligence inventories systems, licences and contracts. It rarely asks whether the target has already been compromised, whether its staff credentials are for sale, or whether its data is sitting on a leak site. Those are the findings that change a valuation, a warranty or a deal timetable.
Our review is entirely passive. We work from what the target exposes to the outside world and what is circulating about it in criminal forums and leak sites, without scanning, logging in or touching its systems. That means it can run early, quietly and in parallel with the rest of your diligence.
You receive findings in five to seven business days, written for the deal team and counsel, with a clear view of what needs a warranty, a price adjustment, a pre-close fix or a compromise assessment after signing.
- Darknet and leak-site exposure: credentials, documents and mentions of the target
- An external attack-surface map of what the target exposes to the internet
- Indicators of existing or past compromise
- An outside-in view of architecture, data governance and compliance posture
- A risk-rated report for the deal team and counsel
- Recommendations for warranties, pre-close fixes and post-close priorities
Five to seven business days, start to report.
Scope
We agree the target, its known domains and brands, and what the deal team needs to decide, under confidentiality.
Collect passively
We gather external exposure and darknet intelligence on the target without interacting with its systems.
Analyse
Analysts look for signs of compromise, weak points and governance gaps, and rate each finding by its effect on the deal.
Report
You receive a written report and a briefing for the deal team and counsel, with the questions to put to the target.
Who it is for
Corporate development teams, private equity firms and acquirers' counsel, at any stage from first look to signing, and on every add-on acquisition in a portfolio.
- Compromise assessment, confirm from the inside after signing
- Darknet and leak-site monitoring, keep watching the target once it is yours
- Threat intelligence, briefings on the threats facing the combined business
- Supply chain and third-party risk, the same outside-in view for your vendors
What buyers ask.
Our diligence already covers it.
IT diligence asks what they own. This asks whether someone is already inside it. The two answer different questions and work well side by side.
Will the target know?
Not from us. The review is passive and never touches the target's systems, so it can run before the target has been told about the depth of your interest.
What if you find signs of a compromise?
We tell you promptly and explain what it means for the deal. After signing, or with the target's agreement, a compromise assessment confirms it from the inside.
Can it run on a tight deal timetable?
Yes. Reports land in five to seven business days, and the review runs in parallel with your financial and legal diligence.
Know what you are buying.
Tell us about the target and the timetable, and we will scope a diligence review. No charge, no commitment.