Cyber Due Diligence · M&A

The OSINT groundwork for your due diligence, already done.
You bring the analysis and your signature.

An outside-in OSINT intelligence dossier on any target company: attack surface, breaches, corporate group and dark-web exposure. Verified, traceable raw material that you turn into YOUR client report. 10 key indicators, 130+ public sources, RFC 3161 custody. €390 + VAT per dossier · 10-pack €3,200.

🎁 Launch offer · M&A only
Your first Cyber DD dossier, free
Sign up, we qualify within 24h, and we send you the full dossier on your real target. No card required.
Request it free →
Enter the target company and get your dossier
Company name + official domain are both required. The domain is needed so the engine can audit DNS, perimeter and exposure of the target company. Single price: €390 + VAT per dossier.
Single price €390 + VAT
Automated email delivery
Card · PayPal · SEPA · e-Invoice
RFC 3161 custody
Who it's for

Built for M&A professionals

The OSINT layer of your due diligence, already gathered. Traceable raw material on your engagement's target company, ready for you to analyze, sign and resell — without spending days assembling it by hand.

PE

Private Equity & Venture Capital

Fast deal screening. Filter out targets with cyber red flags before spending your investment team's time.

M&A

M&A boutiques and advisors

Fold it into your DD deck. Increase your service ticket without hiring extra cyber talent.

LAW

M&A law firms

A technical annex for SPA negotiation: identify material cyber liabilities that justify W&I clauses.

FO

Family offices and strategic buyers

Outside-in visibility with no need to request system access. Ideal for evaluating competitive or hostile acquisitions.

What's in the dossier

~30 pages + verifiable-sources annex. 10 indicators. 130+ sources.

Every dossier covers the same ten Key Risk Indicators (KRIs) calculated over public sources with an outside-in methodology. No touching the target company's systems, no legal risk. Verified raw data — you bring the judgment.

10
KRI indicators
130+
Public sources
Days
of collection work saved
~30pp
Pages + sources annex

The 10 Key Risk Indicators

01Executive (C-suite) exposure
06Sanctions and litigation
02Breaches and leaked credentials
07Supply chain risk
03DNS hygiene and email configuration
08Typosquatting and malicious infrastructure
04Perimeter security
09Shadow IT and code leaks
05Press reputation and crisis signals
10Dark web intelligence
Minutes vs. 2 weeks

The same deliverable, a fraction of the cost and time.

Our dossier covers the outside-in collection work that would normally cost you two to four weeks of manual effort to assemble. You layer your analysis, your signature and your price on top. Ideal for pre-screening before committing a full DD budget.

IntelMind Cyber DD Traditional CDD boutique
Time Minutes 2 to 4 weeks
Cost per dossier €390 + VAT €15,000 – €80,000
Results Same day, PDF by email Slides after weeks
Verifiability Public URLs + RFC 3161 custody Provider-dependent
Pure outside-in Yes (no system access) Mixed (sometimes requires access)
Deal pre-screening Unlimited via subscription Expensive to scale
How it works

Three steps. No friction.

The full process from pasting the company name to having the signed PDF in your inbox.

1

Paste the company name

Just the legal name (or company registration number, tax ID, domain). Within 3 seconds we identify jurisdiction, size and official identifiers (CIK, LEI, EIN).

2

We show you the price

Single price: €390 + VAT per dossier (total with VAT in Spain: €471.90). VAT not included in the base price (21% is added at checkout for Spanish clients; intra-EU B2B with a valid VAT number pays no VAT). Secure payment by card, PayPal or SEPA.

3

Receive the PDF by email

Within minutes: full PDF + RFC 3161 timestamp + e-invoice by email. Permanent access from your dashboard. Verifiable at any point in the future.

Rubén Jiménez Ormad — Founder of IntelMind
Who's behind it

"I built Cyber DD because I saw M&A funds and law firms lose weeks and tens of thousands of euros waiting for cyber reports that could be done in minutes. Same rigor, no sales call."

Rubén Jiménez Ormad
Founder · IntelMind · Spanish startup in acceleration
Meet the founder →
Pricing

Single price. No tiers, no surprises.

One single price for any target company. The same complete 10-indicator dossier and the same depth of collection, regardless of the target's size. What would take you days to gather, for less than you bill in an hour; you resell the final report starting at €5,000.

Cyber DD Dossier
€390 + VAT
Total with VAT (ES): €471.90
One dossier on one company.
10 KRIs · ~30 pages + annex
Raw material you sign off on
RFC 3161 custody
−18%
10-dossier pack
€3,200 + VAT
Total with VAT (ES): €3,872.00 · €320/dossier
10 dossiers at your own pace.
Ideal for recurring use in
deal screening.
Personalized handling.
Contact us about the pack →
Same dossier, same ~30 pages + sources annex, same depth — for any company. The single dossier is delivered automatically after payment; the 10-pack is handled on a personalized basis.
Public sample

See a real, anonymized dossier.

We ran the collection on a publicly traded company with known cyber incidents. We anonymized it as "Acme Industries Corp" to show you exactly the raw material you receive.

PDF · ~30 pages + sources annex · 1.6 MB

Cyber DD Dossier — Acme Industries Corp

10 real KRIs · 130+ sources checked · full verifiable-sources section · RFC 3161 custody. The same thing you'll receive when you request a dossier for your target.

Download sample PDF →
~30
FAQ

What people usually ask us.

Do I get a VAT invoice?

Yes, an electronic invoice under Spain's Verifactu system, issued automatically. For intra-EU B2B with a valid VAT number, VAT is 0%.

What payment methods are accepted?

Credit/debit card (Visa, MasterCard, Amex), Apple Pay, Google Pay, PayPal and SEPA transfer. All available at any tier — no minimum amount, no restrictions. Immediate delivery on any method with instant confirmation (card/PayPal) or once the SEPA transfer is received (24-48 business hours).

Is there a conflict of interest if we analyze a client's competitor?

We do not issue reports on a client's direct competitors without their express consent. We apply the same ethical criteria as a traditional M&A boutique.

Is it legal? Are we safe from GDPR issues?

Yes. The entire analysis is outside-in using public sources (OSINT). Legal basis: the buyer's legitimate interest (GDPR art. 6.1.f) in evaluating the deal. The subject of the analysis is a legal entity (a company), not sensitive personal data. We keep visible C-suite PII only when needed to assess risk (data brokers, breaches), never for harassment.

Do you sign a mutual NDA?

Yes, if you ask before the first report. Standard mutual template or adaptation to your own corporate template.

Is there a volume discount?

Yes. A 10-dossier pack for €3,200 (€320 each, −18%). A fixed-fee annual agreement for firms handling >30 targets a year. Contact us.

What if the target is very small or new and there's no data?

The system tells you before charging. If the company is invisible (no website, no records, no digital presence), the report comes back "HIGH confidence · no material findings" — which is already valuable information: it means the target has no corporate digital footprint, an important data point for valuation.

How does this compare to BitSight, SecurityScorecard, etc.?

BitSight/SSC are continuous-monitoring products aimed at TPRM (Third Party Risk Management) with generic scoring. IntelMind Cyber DD is a one-off report aimed at M&A with contextual narrative, actionable recommendations and legal custody. Different focus, different product.

How long does it take to receive the report?

It's generated automatically once payment is confirmed and arrives by email within minutes, along with a magic link to access your report history in the private portal with no password needed.

What does the Cyber Due Diligence report include?

Approximately 30 pages plus a verifiable-sources annex, with 10 Key Risk Indicators (KRIs): executive exposure, breaches and leaked credentials, DNS hygiene, perimeter security, media reputation, sanctions, supply chain, typosquatting, shadow IT and dark web intelligence. Each KRI comes with a 0-100 score, findings with evidence, economic impact and an actionable recommendation.

The collection, done. The analysis and the signature, yours.

A ~30-page dossier plus a traceable-sources annex on your target. Save the days of fieldwork and turn it into your client report, with your brand and your price.

Request a trial dossier →
Also investigating people, emails, IPs or phone numbers?

We have a SaaS of on-demand OSINT tools.

6 independent tools (email · IP · domain · phone · social media · forensic image) on a credit subscription. Built for one-shot investigations that don't need a macro-level report. Great for investigators, litigation lawyers and compliance teams.

See OSINT tools →