An independent assessment of a target company's software — quality, security, architecture and key-person risk — delivered as a clear, evidence-backed report. Every finding traces to the actual code, because we analyse it as a knowledge graph, not by reading a pitch deck.
Not a checklist read off a README — each is measured against the codebase itself.
Complexity, duplication, test coverage and how hard the code is to change safely.
Known-pattern vulnerabilities, secret handling, dependency and supply-chain risk.
Where the debt sits, what it will cost to service, and whether it blocks the roadmap.
From Git history — how much knowledge sits with how few people, and where.
Coupling, cyclic dependencies, service boundaries and single points of failure.
Whether the architecture supports the growth the deal thesis assumes.
A grounded estimate of the engineering effort to fix, harden and scale what's there.
Third-party and OSS licenses that could constrain the business post-acquisition.
Written for decision-makers, backed by evidence engineers can verify.
Your report carries your codebase's real scores, each traceable to the file, module or dependency behind it.
A fixed-scope, fixed-fee engagement — typically delivered within days of access.
Read-only access to the target repository (or an offline copy) under NDA. Nothing leaves the agreed environment.
We build the code knowledge graph, run the analysis, and validate findings against the target's own team.
You receive the report and a live Q&A session — in time for your investment decision.
A senior engineer skimming a repo for a week gives you opinions. We analyse the whole codebase as a graph, so the report is complete, repeatable and traceable.
The graph sees every file and dependency — not a sampled skim under deadline.
Each claim links to the exact code it came from, so your team can verify it.
Read-only, under NDA, in an environment you control. No conflict, no code exfiltration.
Send us the repository access and your deadline — we'll tell you what we'll deliver and when.
