01
Connect
Secure, least-privilege access to agreed evidence, documentation and cloud environments.
EdgeSignal · infrastructure intelligence for investors
See the infrastructure behind the investment.
Independent infrastructure diligence: cloud risk, scalability, resilience, technical debt, and the investment the next stage of growth will need.
Venture, growth equity, private equity, corporate and technology investors · pre-deal and across a portfolio
EdgeSignal is technical diligence, not investment advice. It informs technical risk, deal terms, integration planning and the post-close priority list; whether to invest, and on what terms, stays with you and your advisers.
What EdgeSignal answers
01 / 7
Not general technical due diligence. Cloud and platform infrastructure, AWS in particular.
We do not assess the codebase, the product, the commercial opportunity or the team, and the report says so rather than stretching an opinion past what was checked. The narrowness is the credibility.
Can it support the growth in the thesis?What breaks at 5x or 10x?Material AWS security riskIs production actually resilient?Are backups genuinely recoverable?How much is IaC-controlled?Manual configuration dependencySignificant platform technical debt?Post-investment engineering effortIs AWS spend structurally efficient?Will cloud economics scale?Enterprise-customer readinessHidden risks affecting valuation
What we assess
- Architecture and scalability
- AWS infrastructure and configuration
- Cloud security and IAM
- Data protection
- Resilience, backup and recovery
- Infrastructure as code and CI/CD
- Observability
- Cloud economics
- Platform technical debt
- Operational maturity
- Compliance and enterprise readiness
- Key-person and infrastructure dependency
- Growth-plan stress testing
What we do not
- The application codebase or product architecture
- Commercial or market diligence
- A valuation opinion
- Financial or legal diligence
- Any assessment of individuals
Why the boundary is drawn here
A firm that claims to assess a company's whole technology, product strategy and commercial opportunity in the same engagement is rarely expert in more than one of them. Infrastructure is a specialist discipline in its own right, and it is the one that rarely appears on the pitch deck — its consequences eventually appear on the P&L. Staying inside that boundary is what lets every claim in an EdgeSignal report be backed by evidence rather than impression.
The standard we hold it to
Infrastructure is judged against the company's stage, not an ideal.
EdgeSignal does not look for perfect infrastructure. Every startup carries technical debt — that is what shipping fast looks like, and on its own it is not a finding. The question is whether the infrastructure suits the company's stage and can carry the investment thesis, judged against customer profile, regulatory exposure, growth expectations and data sensitivity. A Series A is not judged like a bank.
Before capital goes in
02 / 7
EdgeSignal — Deal.
Pre-investment diligence, fast enough to fit inside a live process.
Assessment areas
ArchitectureScalabilityAWS infrastructureCloud securityIAMData protectionResilienceBackup and recoveryInfrastructure as codeCI/CDObservabilityCloud economicsPlatform technical debtOperational maturityCompliance and enterprise readinessKey-person and infrastructure dependencyGrowth-plan stress testing
Not a stack of AWS findings
The deliverable is an investor-grade document that reads in one sitting.
- An executive infrastructure verdict, written for the investment committee
- Material risks, and what each means for the thesis
- Scale constraints — what breaks at 5x or 10x
- Hidden infrastructure investment the thesis has not priced in
- Technical debt priorities, ranked by what actually matters
- Estimated remediation complexity for every material finding
- A 30/60/90-day sequence
- A clear line between what is deal-critical and what is normal post-investment improvement
How a finding is prioritised
Not every finding carries the same weight for the deal. Complexity to remediate and materiality to the investment are tracked separately, because a finding can be simple to fix and still be deal-critical, or complex and still be a normal post-investment item.
Specimen — illustrative, not a customer's data
The findings plotted below are illustrative composites, not a real diligence result. An EdgeSignal report plots your own portfolio company’s findings.
| # | Finding | Remediation complexity | Investment materiality |
|---|---|---|---|
| 1 | Root account has no MFA | Low | High |
| 2 | Primary S3 bucket is publicly readable | Low | High |
| 3 | No tested restore for the production database | Medium | High |
| 4 | Deploy role is over-permissioned | Low | Medium |
| 5 | CloudTrail retention is below policy | Low | Low |
| 6 | Accounts are not separated by environment | High | Medium |
| 7 | Cost allocation tags are inconsistent | Medium | Low |
How a finding reads
Every AWS-level finding is translated the same way before it reaches the investment committee.
MATERIAL INFRASTRUCTURE RISK
High The production database architecture creates a material resilience dependency, and recovery has not been independently validated.
INVESTMENT IMPACT
The current platform could create meaningful operational risk as customer volume increases.
GROWTH IMPACT
Infrastructure work is likely to be required before the platform supports the next stage of enterprise scale.
REMEDIATION
Moderate complexity.
ESTIMATED INVESTMENT
Approximate engineering effort — an indicative requirement, not a fixed quotation. This site publishes no prices.
DEAL CONTEXT
Not necessarily a reason not to invest, but should form part of the post-investment operating plan.
Specimen finding, illustrative and anonymised. No company, dataset or figure here is real.
Written for independence
The company-facing report is written so the target can act on it directly, without retaining InfraEdge to interpret it. A report only a consultant can explain has told the investor very little. Being genuinely usable is also what makes a target willing to grant access in the first place — which is what makes the diligence itself better.
After investment
03 / 7
EdgeSignal — Portfolio.
A consistent infrastructure-risk view across a portfolio, because every company reports risk differently, if it reports it at all.
- Which companies carry material infrastructure risk
- Which are scaling safely, and which are not
- Where technical debt is accumulating
- Where cloud spend is structurally poor
- Where enterprise or security readiness is weak
- What remediation is outstanding
- Whether a previously identified risk was actually resolved, or just marked closed
| Portfolio company | Assurance | Security | Resilience | Cloud efficiency | IaC coverage | Material risks |
|---|---|---|---|---|---|---|
| Company A | Assured | Strong | Developing | Efficient | ~80% | 0 open |
| Company B | Diligence only | Material risk | Material risk | Developing | ~35% | 2 open |
| Company C | Assured | Developing | Strong | Developing | ~60% | 1 open |
Conceptual. Illustrative structure only — not a live dashboard and not real portfolio data. Each company's individual result is confidential to that company and to the fund holding the position. InfraEdge does not rank or publish portfolio companies against each other, publicly or otherwise.
How it works
04 / 7
Five steps, from access to an optional fifth.
02
Investigate
Architecture, AWS configuration, security, resilience, infrastructure as code, operational maturity, cloud economics.
03
Translate
AWS-level findings into material investment risk, growth impact and estimated remediation complexity.
04
Decide
A concise, investor-grade view your team can act on.
05
Improve
Optional. InfraEdge can work with the portfolio company to resolve what was found, through EdgeResolve, and stay on through EdgeAssure.
The 90-day rule
We will not accept remediation work from a diligence subject for 90 days after the report is delivered. If they approach us during that window, we tell the investor, in writing. That costs us revenue, and it is worth more than the revenue — a diligence report written by someone hoping to sell the remediation afterwards is not diligence.
Where EdgeSignal sits
05 / 7
Investor in, portfolio company assured.
EdgeSignal is how an investor enters the same cycle every InfraEdge customer runs on, without holding a stake in what gets found. Risks found become the portfolio company’s findings; remediation is EdgeResolve, ongoing assurance is EdgeAssure.
Security and confidentiality
06 / 7
Built for a confidential transaction.
Least-privilege, read-only
Where cloud access is used at all, it is read-only, scoped to named accounts, and agreed in advance. InfraEdge holds no production authority and cannot make a destructive change, even if asked to.
An agreed scope, nothing wider
What is assessed, and which accounts and repositories are in scope, is agreed before access is granted — for both the investor engagement and, separately, the company’s own access grant.
Confidential throughout
Findings are handled as confidential transaction material. Nothing is published, benchmarked publicly or shared beyond the parties named in the engagement.
Evidence-led, always
Every claim in the report cites the artefact behind it. Where access limits prevented a check, the report says so rather than scoring it as a pass.
Questions this answers
07 / 7
What investors ask before the first call.
Do you assess the codebase or the product?
No. Cloud and platform infrastructure only. Codebase, product, commercial, valuation, financial and legal diligence are all out of scope, and the report says so.
How fast can you turn a deal review around?
Around one working week from access. The clock starts when the read-only role and the agreed evidence exist, not at signature, so a slow access grant does not consume the window.
Will you fail a startup for having technical debt?
No. Debt on its own is not a finding. Infrastructure is judged against the company’s stage, customers, regulatory exposure and the thesis — a Series A is not judged like a bank.
What access do you need from the company?
Read-only access scoped to named accounts, agreed in advance. InfraEdge holds no production authority and cannot make a destructive change, even if asked to.
Does the company have to retain you afterwards?
No. Every report is written so the company can act on it without us. Remediation is EdgeResolve and ongoing assurance is EdgeAssure, both optional.
How is confidentiality handled during a live transaction?
As confidential transaction material. Nothing is published, benchmarked publicly or shared beyond the parties named in the engagement.
Ready to discuss an investment?
Whether it is a single deal on a deadline or a first conversation about a portfolio-wide view, twenty minutes will tell us whether EdgeSignal is the right shape. Nothing is priced on the call.