Fixed-fee technical due diligence and underwriting-grade software risk assessments. Blockchain-verified data handling. Delivered in 48 hours.
Who it's for
When a target company's software is a black box, Polaris turns technical risk into a clear investment view — before exclusivity expires.
Fast turnaround, fixed scope, and a report that feeds directly into deal decision-making without assembling a full advisory team.
Independent, code-backed software risk analysis to support cyber underwriting decisions — beyond what questionnaires reveal.
Understand the real state of your software estate ahead of a sale, funding round, or compliance review.
What we deliver
Each engagement produces a structured, investor-readable report grounded in source code analysis — not questionnaires, not interviews, and not AI-generated guesswork. 16 deterministic scanners reading real data, producing the same result every time. Every report ships with a cryptographically verifiable Data Handling Certificate.
Rapid codebase assessment for M&A transactions. Understand what you're buying before you commit.
Software risk assessment for brokers and underwriters placing or renewing cyber cover.
Why Polaris
Decision-ready output in 48 hours. Designed for deal timelines, not consulting timelines.
Transparent pricing with no open-ended consulting spend. Scoped before engagement begins.
Every finding grounded in code, manifests and repository history. No guesswork, no filler.
Written for investors, advisers and underwriters — not just engineers. Risk translated into commercial language.
Every engagement produces a cryptographic audit trail anchored to the Bitcoin network — immutable proof of when your code was received, analysed, and destroyed.
Purpose-built scanners that parse real dependency trees, read real licence files, and query real vulnerability databases. No language model guesswork — same code, same result, every time.
Dependencies, secrets, licences, architecture, code quality, governance, and more. Each scanner performs a specific, well-defined analysis task — consistent, repeatable, auditable.
Data Security
We don't ask you to trust us with your source code — we give you cryptographic proof of exactly what happened to it.
Every event — code received, each scanner executed, report generated, code deleted — is recorded in a tamper-evident SHA-256 hash chain. Altering any single record invalidates the entire chain.
The audit trail hash is submitted to the Bitcoin network via OpenTimestamps. This creates an independently verifiable timestamp that proves the audit trail existed at the stated time — no trust in Polaris required.
Every report ships with a certificate showing the complete chain of custody: when code was received, what analysis was performed, when code was permanently deleted. Verifiable by any third party.
Analysis runs on dedicated, network-isolated infrastructure. Source code never leaves the analysis environment, is never stored long-term, and deletion is cryptographically proven.
How it works
Define the engagement: repositories, turnaround, deliverables.
Receive secure repository access under agreed terms. Audit trail begins.
16-scanner automated analysis across all risk dimensions. Every step hash-chained.
Structured report, investor brief, and Data Handling Certificate delivered securely.
Source code permanently destroyed. Blockchain-anchored proof of deletion provided.
See the work
Real technical due diligence reports run against real codebases — from clean, well-maintained projects to repositories at the centre of major security incidents. Six case studies demonstrating what was visible in the code.
View the case studiesAbout
Polaris Intelligence delivers rapid, evidence-led technical due diligence for software transactions and cyber underwriting decisions.
Every engagement follows a structured methodology: source code analysis, dependency and vulnerability assessment, licence review, architecture mapping, and risk grading — assembled into a clear, commercially useful report.
Engagements are delivered at fixed fee with a defined scope and turnaround. The analysis is grounded in evidence from the codebase itself — not surveys, not interviews, not assumptions. Data handling is cryptographically verified end-to-end.
Contact
To discuss an engagement, request a sample report, or ask a question about scope and pricing, get in touch.
Fixed-fee engagements from £1,500.