A fixed-price gap analysis, remediation through to your audit, and upkeep after it. All in a workspace you keep.
All compliance →Led by a published security researcher with five CVEs. One standard report, letters for your buyers, and retests of your fixes.
All security →To the people you sell to, raise from or answer to.
All industries →Original research, free tools, and plain-language guides on security and compliance, from a published security researcher.
Read the blog →Eighteen questions about the company you are looking at. You get the red flags graded by what they do to the deal, and every "don't know" turned into a question for the founders.
Answer for the target company, from what you have been told and shown. "Don't know" is a fair answer.
Investors, acquirers and their advisers looking at a software company. Answer it from what the founders have told you and what is in the data room. If you are the company being looked at, the Due Diligence Readiness Scorecard is the other side of the same questions.
Something that transfers a liability you cannot easily fix after closing: code the company does not own, an undisclosed incident involving customer data, personal data held without a lawful basis, or a compliance claim made to customers that is not true. Most other findings are a cost, which belongs in the price or the 100-day plan.
Because in diligence an unanswered question is a risk until it is answered. Each one becomes a question for the founders, and how quickly and plainly they answer is itself useful information.
Some, yes. Code ownership, open source licences and what data is held where are often wrong in good faith, which is why a technical review checks them directly rather than taking the answer on trust.
Yes, free and no signup. Your answers stay in your browser.
We review the target's code, cloud, security and data practices directly, interview the team and give you a written report with findings graded by deal impact, before you sign. From $4,500 CAD.
See technical due diligence Talk about a targetNot ready for a call yet?
Your graded red flags and the questions to send the founders, then a few short notes from Jacob on what technical diligence usually turns up. Unsubscribe in one click. Reply anytime; it reaches him directly.
From Jacob Masse, principal of traztech: the files by email, then a few short notes over the next month. No spam, unsubscribe in one click.
Want it done for you?
Technical due diligence
A direct review of the target's code, cloud and security, with findings graded by deal impact.
Explore Technical due diligence →This gives you the shape of the problem. traztech Workspace walks you through every control of whichever frameworks apply to you, in plain English, with an evidence register, policy templates, a risk register, vendor questionnaires, and an audit-readiness score. Start a free assessment and walk every control.
No credit card, no trial clock, no locked features. TrazTech makes money when someone wants help closing the gaps, not from the Workspace itself.