Technical due diligence for SaaS sales

Prove your code is worth buying, without handing it to everyone who asks.

Buyers want to see the code before they pay. You do not want to give it to every tyre-kicker, and refusing looks like a red flag. Struck Code reads your repository once, grades it, and gives buyers a third-party answer they can check themselves.

  • Read-only, one repository
  • Source never kept
  • No training on your code
Certificate of code assessment for Loopnote: grade B-, 67 of 100, with its nine dimension scores.

The certificate a buyer sees on your listing. Public, checkable, bound to one commit.

How it works

Three things, from one read of your repository

  1. 01

    The full report

    Every finding with its location, evidence, buyer impact, and fix. Yours to share or keep.

    From the sample report: 4 of 17 findings shown before paying

    • HighThe Jira integration is an email link, not an integrationThe listing sells two issue-tracker integrations. You are buying one. Expect to build the other, or to correct the marketing after you take over.
    • HighFeedback text is rendered into the dashboard without escapingAnyone who can submit feedback through the widget can run code in your customers' dashboards. For a product whose whole job is collecting text from strangers, this is the finding to fix first.

    Each with its evidence, line by line, and the fix with an effort estimate

  2. 02

    A public certificate

    A graded scorecard bound to one commit, at a link anyone can check. No repository access needed.

    LoopnoteB-
    67 / 100
    Bound to commit
    9f3c1a7d84e2
    Issued
    6 August 2026
    Repository access needed
    None
  3. 03

    A free preview

    About 30% of the findings, shown before you pay. You judge the depth before spending anything.

    4 of 1713 locked until you pay
    Findings shown free on the sample report

Methodology MV-2026.3

Nine dimensions, weighted the way a buyer cares

Every grade is the same arithmetic on the same checks. The weights are public, so a buyer knows exactly what a B- means before they ask you a single question.

Read the methodology
  • Claims and functionality25%
  • Security20%
  • Billing integrity10%
  • Code quality and maintainability10%
  • Tests and CI10%
  • Dependencies, licensing and IP10%
  • Operability and transferability10%
  • Provenance and bus factor5%
  • AI and LLM economics8%

Before you pay

Nobody should buy this without seeing a report first. Here is one.

A worked example, scored by the same engine yours will be, with the preview wall exactly where yours would be. Five minutes of reading tells you whether this is worth $299.

See the sample report
  • Read-only, one repositoryWe cannot write to it, and we never see your others.
  • Single-use machineAnalysis runs on one commit inside a machine that is destroyed afterwards.
  • Source never keptFindings, short excerpts, and hashes are all that survive.
  • No training, everYour code never trains a model. Ours or anyone else's.

Pricing

One price. No tiers, no subscription.

$299

The full report, the public certificate, and one fix-and-rescan so acting on the findings is free. The certificate is issued whatever the grade turns out to be.

Connect your repository