Services / #5 Vet
Before you acquire, invest in or sign with a company, find out what it has not disclosed. Its security history and the people behind it, in one report.
What you get
01
Past breaches, leaked data and exposed systems are identified before you sign, when they can still affect the price.
02
One report covers the target’s security posture and who really owns and runs it.
03
Specific findings give you something concrete to price in, or to require fixed before close.
04
Scoped to your timeline, at a price agreed up front.
What’s included
How it works
We agree on the target, the questions that matter and the deadline.
Passive cyber review, breach and leak history, ownership, sanctions and reputation checks.
We identify the risks that matter and rate our confidence in each.
A short report written for the deal team, plus a call.
Case study
A PE firm wanted an outside look at a target's security and ownership before signing. We found evidence of a past breach the seller hadn't mentioned.
Example engagement. The client is fictional and details are illustrative, to show how this work typically goes.
10 days
from kickoff to final report
1
undisclosed past breach found
Price
renegotiated with a new security escrow
The deal team had financial and legal diligence covered but no one looking at the target from the outside. The target handled shipping data for large customers, so a breach would hurt both the deal and those relationships.
We agreed on scope and a ten-day deadline. We reviewed the target’s internet-facing systems passively, searched breach data and leak sites, checked ownership and sanctions lists, and looked for any sign of past incidents.
Most of the target’s setup was in reasonable shape. But a customer database export bearing the target’s name had been posted on a criminal forum about 18 months earlier. Nothing had been disclosed publicly or in the data room. Ownership and sanctions checks came back clean.
We rated the breach finding high confidence, based on matching file structure, dates and customer names, and described the posted material without downloading it.
The deal team raised the breach with the seller, who confirmed it. The firm negotiated a lower price and a security escrow, and added fixing the issues to the 100-day plan.
Related services
Tell us about your situation. We’ll confirm whether this service fits and agree on scope and price before any work starts.