Quantitative Cyber Diligence — live for M&A, PE, and IC deal teams
The QCD product is live at diligence.vcisolite.com. Per-engagement, deal-team-shaped diligence that returns a single Cyber Cost of Deal (CCOD) number — five defensible pillars, priced against the acquirer's valuation model, not a red/yellow/green rating.
Quantitative Cyber Diligence (QCD)is now live for M&A, PE, and investment-committee deal teams at diligence.vcisolite.com. The product operationalizes the QCD framework — the methodology published in the executive brief, the academic paper, and the book Someone Else’s Debt— into a per-engagement diligence workflow that returns a single number, Cyber Cost of Deal (CCOD), for the target company on the table.
What’s live
- The five-pillar CCOD engine.Attack surface & exposure, third-party & vendor concentration, data sensitivity & regulatory exposure, security program maturity, and integration & post-close risk — each decomposed into defensible line items that plug into the acquirer’s existing valuation model.
- Per-engagement pricing.Tier 1 diligence at $12,500 flat — sized for tuck-in and lower-mid-market deals. Tier 2 diligence priced against target enterprise value, starting at $15,000 — sized for platform investments and strategic acquisitions.
- Deal-team-shaped workflow.Engagements run from LOI through IC in days, not weeks — with a working paper, exec brief, and defensible line-item CCOD delivered against the acquirer’s valuation model rather than a red/yellow/green rating no one can act on.
- Year-0 handoff.Post-close, the target’s diligence graph seeds the operating-company vCISO Lite deployment — the risks flagged in diligence become the Year-0 remediation plan, priced and sequenced against portfolio return.
Who this is for
PE operating partners, corporate-development teams at strategic acquirers, investment committees who need a defensible cyber number for the IC memo, and the security and GRC advisors who work alongside them. The audience is deal teams, not IT teams — and the product is priced and shaped accordingly.
Read the full press release for the product launch, the QCD executive brief and academic paper, or the companion book Someone Else’s Debt (covered separately in the book’s changelog entry). Deep-dives that shaped the methodology are in the M&A Security Diligence series and the Risk Quantification cluster.
End-to-end AI-run QCD engagements are the roadmap play from Trustworthy Autonomy™ — the same five-pillar decomposition, run by the agent, with cryptographic proof of every read and every action.
Related reading
The PE Buyer's Playbook for Cyber Due Diligence — the LOI-to-IC framework QCD Diligence delivers on.
Cyber Cost of Deal: A Worked Example — the CCOD walk-through.
Cyber R&W Insurance or Price Reduction — the negotiating-table application of the QCD number.