Executive Overview — Delve Tech DD

485

Companies Analyzed

5.6/10

Average Score

Score 7+ (High)

59%

AWS Adoption

44%

WAF Adoption

28%

Multi-Region

Score Distribution

Across 121 scored companies, the average tech DD score is 5.6/10 (median: 6). The distribution clusters tightly at 5-6, with 19 companies (16%) scoring 7+ and 12 (10%) scoring 4 or below.

N=121 companies with dimension scores

Key insight: The tight clustering at 5-6/10 suggests most companies achieve a similar baseline from template-driven SOC 2 compliance. The differentiators that push a company to 7+ are specific: multi-region deployment, WAF, named monitoring tools, and vendor transparency.

Dimension Analysis

Security is the strongest dimension (6.9/10) — MFA, RBAC, and basic firewalls are near-universal. Vendor Diversity is the weakest (4.3/10) — most companies depend on a single cloud provider with minimal third-party disclosure.

Error bars show standard deviation

Dimension Ranking

Dimension	Mean	Median	Std	Min	Max
Infrastructure	6.0	6	1.0	3	8
App Arch	5.1	5	1.4	2	9
Data Layer	5.0	5	1.3	3	8
Security	6.9	7	0.7	5	9
DevOps	5.6	6	0.9	4	8
BCDR	5.9	6	0.7	4	8
Vendor Div	4.3	4	1.8	2	9

Security & Infrastructure Adoption

The portfolio shows a clear three-tier security maturity pattern:

Table Stakes (80%+): MFA, RBAC, VPC, Multi-AZ, Firewalls — essentially universal
Differentiators (40-80%): Vulnerability scanning, branch protection, pen testing, WAF
Rare (<40%): Multi-region, cyber insurance, quarterly access reviews

N=485 companies

Cloud Provider Landscape

AWS dominates at 59%, creating systemic portfolio-level concentration risk. A major AWS outage would simultaneously impact over half the portfolio.

Key Takeaways

For PE: 28% multi-region adoption means 72% of the portfolio has single-region risk. Migrating companies to multi-region is a concrete value creation lever.

For VC: Vendor transparency (naming 5+ third-party services) correlates with higher scores. Ask founders to name their full stack — opacity is a red flag.

For CTO: Security (6.9/10) outpaces DevOps (5.6/10). Most companies have security controls but lack CI/CD maturity.