Minimum Cybersecurity Expectations for Series A/B Companies

This document outlines the baseline cybersecurity expectations typically applied in venture-stage due diligence for Series A and Series B software companies. It reflects recent changes in the threat landscape, including stronger expectations around SaaS identity controls, browser-based phishing and session theft, AI-assisted development, agentic AI systems, prompt injection, and...

Buying In – Cybersecurity Risk and Due Diligence

Cybersecurity issues are deal breakers. In a recent survey on software mergers and acquisitions conducted by West Monroe Partners, more than half of the respondents surveyed reported discovering a cybersecurity problem after deal closing. Cybersecurity issues were the second-most common reason that deals were killed, and the second-most common...