Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Diligence reports

For a decision that was made before the cyber conditions changed: a loan already on the books, a deal already signed, a portfolio already assembled.

  • Cyber-Triggered Credit Review

    Private credit funds, BDCs, bank credit teams

    One borrower: the lenders' last valuation, the incident since, the evidence that ties it to the borrower, and the questions to put to management before the next mark or amendment.

  • Pre-Close Cyber Change Brief

    Sponsors and acquirers with a signed, unclosed deal

    What was known at announcement, what is known now, why the difference may matter before closing, and what the buyer should investigate.

  • Portfolio Concentration Audit

    PE operating partners, lenders, risk committees

    Every holding against verified incidents and shared providers, separating confirmed impact from dependencies that need management confirmation.

  • Single-company exposure check

    Anyone evaluating one company

    The verified incidents, the lenders and owners around the company, and what remains unknown, with every source.

In every report

  1. Executive summary
  2. The financial position
  3. The historical baseline (T0)
  4. What changed (T1), with occurrence and disclosure kept apart
  5. The evidence chain, link by link
  6. Financial relevance, separate from cyber severity
  7. Unknowns and limitations
  8. Diligence questions
  9. Source register

What a report is not

It is outside-in intelligence from public, licensed and filed sources. It does not replace the company's own technical diligence, an incident responder's findings, or an underwriter's judgment, and it never presents a vendor relationship as a confirmed compromise.

See a live example of the analysis: ConnectWise, LLC.

Tell us the company, the loan or the deal

We reply with what the report would cover for your case and when it can be delivered.

Request a report