Preflight — cyber diligence for venture capital

What changed

Preflight is cyber diligence built for a venture-capital deal: a 20-minute red-flag scan on any target, term-sheet covenants auto-drafted from the findings, and a one-page cyber section for the quarterly LP letter. The design-partner cohort is open now.

Pre-term-sheet scan

A 20-minute external OSINT scan on any target: dark-web credential exposure, DMARC posture, attack-surface hygiene, public breach history, and peer comparison against companies at the same stage in the same sector. Output arrives inside your partner meeting window, not after it.

Covenant drafting

Every red flag maps to a proposed covenant clause your counsel can drop into the term sheet or SPA. Soft, hard, and closing-condition variants with location guidance built in. The library is reviewed on a quarterly refresh with a tier-1 M&A firm.

LP-letter section

Every scan flows into a portfolio view. Each quarter, a one-page cyber section is ready for the LP letter: per-portco peer-percentile movement, external EAL estimates, notable posture changes. Reportable to LPs, defensible in the next fund raise.

QCD lineage

The scan engine, covenant library, and LP-letter template sit on the same platform as QCD, the PE-side product that ships full five-pillar Cyber Cost of Deal in 72 hours per engagement.

Why it matters

Every existing cyber-diligence workflow was built for PE deal teams: $50K–$150K per deal, weeks of budget, dedicated operating partners. That doesn’t fit venture. Your partners write a term sheet in a week, your associate has a Google budget, and you govern from a board seat, not from inside the portco. Preflight is cyber diligence priced for that, timed for that, and built for that.

Findings on one side, the covenants that fix them on the other. That’s the whole product.

Availability

Beta today. The design-partner cohort is open now; public pricing lands at GA.

Design partners get free access through GA, direct input on the covenant library their firm will use in real deals, and a lifetime discount on their first subscription. The scan engine, covenant library, and LP-letter template sit on the same platform as QCD, the PE-side product that ships full five-pillar Cyber Cost of Deal in 72 hours per engagement. Preflight is the venture-side view of the same work.

Related reading: Preflight for VCs, the segment-side deep dive; The PE Buyer’s Playbook for Cyber Due Diligence, the LOI-to-IC workflow Preflight compresses; and Cyber Cost of Deal: A Worked Example, the CCOD framework Preflight surfaces on demand.

Known limitations

External OSINT only. Preflight does not read inside the target. For a cooperative, inside-the-portco view after the term sheet, run QCD.

The design-partner cohort is intentionally small while the covenant library is pressure-tested in real deals. Public pricing and self-serve activation land at GA.

The covenant library refreshes quarterly with the tier-1 M&A firm. Edge-case clauses outside the standard menu still need your counsel to draft.